Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File:                     91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier:          HmP5mGx6POBcvZ1+Wb0Qofa9sSQQ4i39oh8/xxu9B7o=
Subject key identifier:   1A:5D:94:78:9A:83:7D:9C:DD:74:5D:6C:06:D9:D9:6A:23:35:DE:82
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer:       /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial:       0D20054FFE9DB9CF71AE4F1E868F2E31620DD850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number:          02B5
Signing time:             Sun 13 Apr 2025 00:02:40 +0000
Manifest this update:     Sat 12 Apr 2025 23:57:40 +0000
Manifest next update:     Mon 14 Apr 2025 02:21:40 +0000
Files and hashes:         1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: 70qovCd9dfKzUJy/uOcNSkI17QxhJJk2B+Ps1OpYpOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:20:05:4f:fe:9d:b9:cf:71:ae:4f:1e:86:8f:2e:31:62:0d:d8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
        Validity
            Not Before: Apr 12 23:57:40 2025 GMT
            Not After : Apr 14 02:21:40 2025 GMT
        Subject: CN=1A5D94789A837D9CDD745D6C06D9D96A2335DE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:8a:15:06:0c:31:3f:a6:81:78:c5:cb:5c:
                    8a:dd:76:c4:c1:c8:91:cb:28:fa:06:93:4e:24:c2:
                    11:85:8e:ec:dc:87:70:af:57:f9:0e:c5:51:74:2c:
                    2f:cb:0b:3a:cf:ff:d5:1f:8b:cd:67:7c:79:98:f5:
                    1e:ce:ef:a0:94:c9:ec:a7:bc:ed:3d:25:ad:e3:5e:
                    80:df:49:86:6c:f0:f6:10:cc:7e:e9:a1:49:a0:fc:
                    75:f4:5e:f7:43:9f:4b:c3:71:bb:49:a1:c7:d6:0f:
                    83:ae:dc:f7:12:5d:8b:a1:7d:89:a0:29:10:91:cc:
                    79:00:4d:f7:4c:ad:09:c8:c7:fd:e0:a7:26:3c:48:
                    04:76:d9:91:46:79:8c:87:65:09:ca:af:45:81:a4:
                    82:95:47:81:5c:36:96:81:a5:f7:2c:13:0a:6d:01:
                    bc:65:2a:c9:da:bc:27:41:31:8a:4c:b5:13:14:2d:
                    70:26:3b:dd:a8:c3:73:6b:1e:7c:fa:dd:90:81:cb:
                    f8:09:0c:92:73:85:76:d2:62:49:03:f3:b5:23:da:
                    2a:db:f7:ca:7c:48:ca:8f:c5:46:1a:b5:c3:ac:53:
                    59:00:6f:25:df:aa:d3:99:e3:de:dd:66:2c:65:b1:
                    d8:ac:07:ee:26:bb:e8:4d:9c:47:8a:b0:bf:fc:1e:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:94:78:9A:83:7D:9C:DD:74:5D:6C:06:D9:D9:6A:23:35:DE:82
            X509v3 Authority Key Identifier:
                keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a9:98:41:38:86:13:e5:59:b7:08:2f:c1:16:33:3f:26:b4:
         7f:11:a3:d5:c2:ab:e6:3f:f6:f5:48:97:e1:27:a4:ed:4f:53:
         73:b4:c7:c8:23:83:2d:08:0f:e1:7f:75:f4:8c:c9:20:cb:59:
         c1:e1:47:b9:6a:1d:80:59:5c:44:ba:bc:21:8b:0d:20:bc:54:
         0e:a4:e4:60:c6:a8:e9:a6:52:36:8b:71:13:ce:a3:6c:35:53:
         ab:17:89:65:bf:94:66:2d:71:3e:50:10:8a:cd:87:21:35:62:
         b1:6d:d8:90:fb:0a:db:2b:2e:70:0f:51:01:55:de:99:42:20:
         d5:e7:9d:89:aa:e0:34:99:4a:6c:28:84:0b:fd:0f:56:51:d9:
         a5:72:34:3f:14:01:bb:06:34:f5:d0:82:f1:b0:8e:7e:76:e1:
         c4:54:60:a3:4e:23:be:dc:25:ff:eb:2f:e7:2e:83:b7:1a:f6:
         b9:2f:20:78:83:af:01:c8:c0:fb:0a:5d:10:df:39:5f:56:d1:
         f7:52:58:7f:3e:00:a8:24:83:14:28:39:ef:ce:f3:33:5e:6b:
         9b:e7:4a:77:be:ab:cc:a6:e4:9f:f4:c7:15:e5:b8:f5:31:19:
         09:86:c2:9c:6c:40:4c:5b:4c:62:8d:15:0f:0d:df:fd:5e:ba:
         59:e8:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----