Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft
File:                     B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft (raw, json)
Hash identifier:          M7KkKiV/K3vo86Mmp4SGPUesnrTQwt4sknlxnRBD4rs=
Subject key identifier:   B7:2B:07:CC:13:53:74:EF:D9:46:D1:1A:3D:29:A0:9C:F0:8C:EB:0E
Authority key identifier: B3:EA:FB:B8:7C:FF:EF:94:01:86:75:9F:08:A7:81:5F:1C:67:A7:29
Certificate issuer:       /CN=b3eafbb87cffef940186759f08a7815f1c67a729
Certificate serial:       0BECCB2BB5D9EA7FA4E380AAA724E7025E178155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-r7uHz_75QBhnWfCKeBXxxnpyk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft
Manifest number:          01BA
Signing time:             Wed 25 Dec 2024 03:01:00 +0000
Manifest this update:     Wed 25 Dec 2024 02:56:00 +0000
Manifest next update:     Thu 26 Dec 2024 03:49:00 +0000
Files and hashes:         1: B3EAFBB87CFFEF940186759F08A7815F1C67A729.crl (hash: a+G1Zk3lWsir8EA9C+0qDUzgItoNR7LmRGYPOCEh+2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ec:cb:2b:b5:d9:ea:7f:a4:e3:80:aa:a7:24:e7:02:5e:17:81:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3eafbb87cffef940186759f08a7815f1c67a729
        Validity
            Not Before: Dec 25 02:56:00 2024 GMT
            Not After : Dec 26 03:49:00 2024 GMT
        Subject: CN=B72B07CC135374EFD946D11A3D29A09CF08CEB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:d9:bd:70:f5:39:3a:6b:c5:e9:73:04:ff:
                    36:1f:a8:5b:63:bd:38:3a:36:2c:80:fd:43:5b:98:
                    43:3a:23:4d:09:ee:0c:d3:a6:a5:7d:b3:65:e4:2f:
                    d4:8f:6c:4e:53:e7:32:7c:9d:b0:36:c7:b2:4e:c2:
                    b2:49:b9:ad:c2:69:d6:85:f7:94:17:09:08:99:4f:
                    7c:03:7e:9a:b1:7d:a1:f1:88:12:f1:5c:24:11:c2:
                    ce:42:60:33:65:70:c2:27:46:c4:ca:b2:70:0d:66:
                    f7:fc:d5:d9:fc:5e:7d:d9:8a:1d:75:9a:bb:0f:0c:
                    fe:4d:a9:91:0e:d0:eb:5f:96:4e:4f:2b:bf:16:cf:
                    db:84:1b:94:8c:20:af:9c:84:88:ff:da:ac:b7:75:
                    0e:1b:1d:76:d7:7c:a3:61:90:5f:63:02:88:02:48:
                    fd:f8:8e:cd:3f:86:e8:77:34:8d:44:af:87:35:a0:
                    8d:bc:33:4b:c3:7b:8f:d5:09:06:45:44:53:57:cd:
                    45:99:91:80:ec:9e:74:64:40:cb:0c:85:68:ab:df:
                    dd:d3:41:1d:7e:b0:d9:f2:0d:7e:26:1d:81:1e:0e:
                    1b:92:ce:ff:37:45:e7:96:09:d5:f9:d7:5e:75:a3:
                    7b:a7:d9:90:98:f2:17:f1:0c:ae:73:14:46:3a:48:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2B:07:CC:13:53:74:EF:D9:46:D1:1A:3D:29:A0:9C:F0:8C:EB:0E
            X509v3 Authority Key Identifier:
                keyid:B3:EA:FB:B8:7C:FF:EF:94:01:86:75:9F:08:A7:81:5F:1C:67:A7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-r7uHz_75QBhnWfCKeBXxxnpyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:35:b8:ca:39:f4:ed:f7:9f:06:3f:5e:d5:24:0f:67:6a:
         15:09:11:55:66:4a:22:77:5f:84:4b:bf:77:93:13:e8:d1:ee:
         f5:6f:f5:f4:53:47:e9:5c:d6:e8:7c:3f:47:b3:cf:b8:b1:d1:
         ae:06:6f:d4:c6:29:6f:af:01:81:bf:df:15:fd:fb:41:df:8c:
         a9:2e:76:f9:5e:cd:6e:7f:05:19:46:07:73:ad:92:32:53:cf:
         9c:97:5f:e7:39:28:8d:a0:15:df:7a:2c:69:0c:6b:94:ed:c7:
         71:34:47:dd:18:dc:6e:20:5a:a6:06:d5:c3:5e:da:75:22:c3:
         b2:b0:b2:f1:ff:3e:92:fe:5c:94:3c:df:a7:60:68:63:59:c4:
         5d:01:5a:7c:f4:65:49:ba:24:da:fb:da:9f:c2:c7:19:42:28:
         f5:1e:17:82:e1:61:4b:14:78:36:25:6f:f3:68:82:39:f9:96:
         a9:66:a2:26:99:cd:f5:7c:e2:7d:9b:58:2d:09:f0:67:42:0a:
         e5:36:33:f9:84:9e:46:7b:27:cd:4a:00:69:84:e3:13:1f:95:
         62:e6:b9:83:cd:be:76:66:5b:b8:b3:2e:01:14:34:a3:db:4a:
         02:92:dc:f5:3e:20:26:81:d3:c3:72:f0:dd:ba:57:9e:41:fd:
         23:54:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----