Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
File:                     333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft (raw, json)
Hash identifier:          v/caFc5Ta7gS0c8UUyBF61AefcJbhyZekJd2I0hN9To=
Subject key identifier:   BF:6C:21:64:9A:E9:5A:9C:95:D4:50:DD:06:1E:57:48:C0:2A:74:A3
Authority key identifier: 33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
Certificate issuer:       /CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
Certificate serial:       02EE66539E46D6600495B3763EBE19FE3A951B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
Manifest number:          29
Signing time:             Sun 13 Apr 2025 10:40:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:35:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:26:02 +0000
Files and hashes:         1: 333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl (hash: B+IAqAnpYwIc/2BPQPi6gG+yLAHMtdZ5diFWN4QcM2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ee:66:53:9e:46:d6:60:04:95:b3:76:3e:be:19:fe:3a:95:1b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
        Validity
            Not Before: Apr 13 10:35:02 2025 GMT
            Not After : Apr 14 13:26:02 2025 GMT
        Subject: CN=BF6C21649AE95A9C95D450DD061E5748C02A74A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:36:35:45:d0:13:92:2d:3a:dd:67:30:9b:
                    83:7b:14:39:2a:12:25:eb:17:92:1a:56:fc:44:d0:
                    e9:21:02:05:a2:e4:af:d9:38:4c:ff:10:06:f4:46:
                    00:84:28:41:89:94:db:e1:3e:e0:35:8e:22:81:1b:
                    10:84:bd:3d:17:34:f8:d0:b3:aa:48:ce:00:fe:bc:
                    35:29:c5:b2:a4:7e:92:aa:5c:83:f5:de:bc:3e:70:
                    33:cf:3a:90:cb:23:3c:c4:fe:7f:d3:2c:89:d7:38:
                    8a:6f:ab:dd:c2:45:a7:ca:04:3b:b7:de:19:ad:c0:
                    ed:46:6e:99:28:8b:53:48:fb:de:ec:5b:e5:cf:ae:
                    f7:ca:6b:c0:96:41:6a:0f:21:cf:93:33:c9:24:2b:
                    93:ef:cd:9e:ca:50:a2:0c:df:74:b2:83:ad:7b:fe:
                    6d:6d:b7:b8:73:4f:1e:49:28:cf:5c:fd:72:de:7f:
                    67:a9:13:e3:eb:ff:16:7e:67:4d:97:f4:a0:7f:90:
                    71:32:be:cf:36:c9:58:c4:97:82:63:7c:7d:7d:c1:
                    b6:33:b0:0f:18:a9:79:51:44:03:46:18:11:92:0b:
                    9e:ed:8b:75:fd:fc:df:f8:55:f2:cd:2a:7d:5c:e5:
                    a5:7a:3b:da:3d:09:46:f9:e8:7d:d4:e7:5f:cb:f9:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6C:21:64:9A:E9:5A:9C:95:D4:50:DD:06:1E:57:48:C0:2A:74:A3
            X509v3 Authority Key Identifier:
                keyid:33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:89:69:84:d3:b9:22:a9:26:04:ba:6c:04:27:97:58:26:
         55:1d:5d:2e:11:18:c1:d1:15:36:b0:76:44:dc:76:01:03:aa:
         cb:63:ae:ad:42:86:4d:93:3e:3f:63:a6:11:f1:0a:a9:b9:0e:
         12:29:83:a5:a4:d0:03:83:d1:fd:f5:f4:1d:35:a0:50:88:ff:
         ad:91:dc:e7:af:a3:4a:a5:bc:a1:19:95:b5:b8:4d:84:ee:a8:
         37:e4:29:ab:21:a0:c6:17:01:ee:75:0a:3c:2b:10:6f:1e:b0:
         8e:c7:11:4c:c8:94:50:1e:c9:35:70:b8:b6:63:de:ad:02:32:
         ca:5f:c5:d0:8d:f9:ad:23:aa:ef:f2:dc:15:29:21:fe:af:17:
         ba:7f:3b:ed:01:76:25:af:24:1b:83:e7:bc:9a:19:63:e8:f5:
         f3:b1:2b:bc:7d:e9:73:28:fa:1a:3b:b6:2a:d6:e8:b5:c7:28:
         57:85:8e:7c:3d:4c:58:3b:1a:16:31:40:de:b5:83:ee:21:f9:
         f5:a8:25:81:56:45:c9:dc:7b:63:ec:83:bb:3c:36:ff:e0:90:
         4b:f5:5f:2f:25:eb:9d:18:3b:53:98:13:52:a1:c2:24:ee:21:
         c3:59:38:8d:af:db:de:7f:99:4c:d6:89:c1:f0:59:d2:56:ec:
         85:c8:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----