Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/197/B1B58B2A6EB2BACA23ECEF710D037001AE0DE8BD.mft
File:                     B1B58B2A6EB2BACA23ECEF710D037001AE0DE8BD.mft (raw, json)
Hash identifier:          RNb3utC8o4KCDqmhBildnKU3Yso/XNP8ywv0wRhnyrs=
Subject key identifier:   53:B9:E2:E8:97:3C:3A:12:8B:C7:B7:F9:C6:87:97:71:32:E4:B3:10
Authority key identifier: B1:B5:8B:2A:6E:B2:BA:CA:23:EC:EF:71:0D:03:70:01:AE:0D:E8:BD
Certificate issuer:       /CN=b1b58b2a6eb2baca23ecef710d037001ae0de8bd
Certificate serial:       58C5096C8E866E0DF690723673F8ACA19E7084BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbWLKm6yusoj7O9xDQNwAa4N6L0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/197/B1B58B2A6EB2BACA23ECEF710D037001AE0DE8BD.mft
Manifest number:          0546
Signing time:             Tue 26 Dec 2023 20:00:57 +0000
Manifest this update:     Tue 26 Dec 2023 19:55:57 +0000
Manifest next update:     Wed 27 Dec 2023 21:00:57 +0000
Files and hashes:         1: B1B58B2A6EB2BACA23ECEF710D037001AE0DE8BD.crl (hash: BR2tWunJQabqYw9sQx222IxFwpdQF+0Qao1ESsgmTdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c5:09:6c:8e:86:6e:0d:f6:90:72:36:73:f8:ac:a1:9e:70:84:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b58b2a6eb2baca23ecef710d037001ae0de8bd
        Validity
            Not Before: Dec 26 19:55:57 2023 GMT
            Not After : Dec 27 21:00:57 2023 GMT
        Subject: CN=53B9E2E8973C3A128BC7B7F9C687977132E4B310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:4c:e3:1f:0d:76:e7:7d:7f:0a:fe:e8:fe:
                    6e:0c:bf:0f:73:c3:56:3f:52:6c:17:a1:66:a8:ed:
                    48:b2:0e:8d:e9:35:11:22:ad:13:03:44:66:06:dd:
                    53:3b:06:fe:bc:69:05:12:0e:26:5b:6e:ed:c2:6c:
                    b0:57:e4:26:58:24:c8:6f:3c:6a:be:0f:8e:c4:ed:
                    c8:0a:74:5e:41:88:92:23:a0:66:a1:20:06:fc:e8:
                    da:46:4a:52:8a:3f:87:13:ce:46:d4:75:05:8b:f8:
                    84:ce:43:78:8c:3f:65:90:d5:84:71:a4:90:e2:33:
                    95:17:bf:af:45:08:b0:a4:e1:c4:44:c4:c4:6d:73:
                    b3:41:52:40:49:96:d5:f3:13:03:28:7b:f4:76:10:
                    a9:89:95:76:e6:8a:7a:04:cc:68:34:5a:c8:39:f7:
                    fb:a0:5b:2a:fb:ce:83:44:48:75:3b:9d:50:7c:e9:
                    cd:8c:e7:e6:0b:b3:4e:ce:e7:cd:2e:7d:ab:4e:41:
                    d6:f3:f8:27:57:c4:00:7f:f5:ee:99:18:76:bb:81:
                    c5:73:ac:71:df:dc:d3:00:a6:03:f6:4f:45:c5:81:
                    03:58:07:16:28:ff:37:49:3c:8c:a3:a8:c6:4c:7e:
                    9b:65:b6:91:21:83:42:97:e6:84:51:69:e2:60:94:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B9:E2:E8:97:3C:3A:12:8B:C7:B7:F9:C6:87:97:71:32:E4:B3:10
            X509v3 Authority Key Identifier:
                keyid:B1:B5:8B:2A:6E:B2:BA:CA:23:EC:EF:71:0D:03:70:01:AE:0D:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/197/B1B58B2A6EB2BACA23ECEF710D037001AE0DE8BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWLKm6yusoj7O9xDQNwAa4N6L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/197/B1B58B2A6EB2BACA23ECEF710D037001AE0DE8BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:dc:b7:d3:d7:69:e3:3c:88:34:3f:e4:e8:ca:82:48:d4:47:
         87:cc:54:66:4d:3e:92:b6:34:f4:46:25:91:88:0c:05:51:d2:
         4c:1f:41:25:aa:6d:22:c3:38:6e:ab:68:ed:e2:6b:65:f7:94:
         4b:80:4f:2e:5a:02:7e:2b:1e:1a:26:c4:23:b3:ad:62:11:f8:
         2d:81:b9:61:81:be:a7:84:b2:e3:24:22:e0:ce:0d:de:1c:2f:
         4b:6b:09:e9:b6:62:85:e7:92:78:f2:95:26:00:1d:8b:00:3e:
         d1:1c:20:af:c1:1f:c9:1a:1b:96:f5:d0:50:2c:d9:c8:c6:6c:
         48:28:7c:67:c8:46:67:53:2c:1b:0b:3e:92:46:c3:8c:98:66:
         9b:5a:53:cf:da:8e:f4:70:b5:c6:32:0e:e9:84:83:d4:a9:82:
         fa:bf:f9:be:dd:de:a8:e3:8d:6b:2b:0e:44:3e:12:2e:70:9d:
         f8:5b:3f:e4:5b:a3:af:0b:cc:24:93:c5:d2:b5:15:b2:87:68:
         05:c3:b3:82:95:d4:83:1b:c2:30:c0:35:8e:07:5e:9e:6c:36:
         23:50:27:82:25:9c:12:7f:0b:ce:69:59:57:e0:22:44:c4:78:
         3e:02:b9:9e:6e:6a:66:d8:c8:44:25:35:03:9f:17:05:e4:d5:
         55:cd:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----