Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.mft
File:                     44EFF2E1E084352DB3CDCD751770946505E3E37B.mft (raw, json)
Hash identifier:          V2RHIW7+flYIlx7yI02Rs+VDjsaaFpxDVHvC9Qm9iOA=
Subject key identifier:   C8:A3:13:54:8F:21:A6:14:A1:D1:A7:D9:EC:74:8D:0A:C4:C2:96:40
Authority key identifier: 44:EF:F2:E1:E0:84:35:2D:B3:CD:CD:75:17:70:94:65:05:E3:E3:7B
Certificate issuer:       /CN=44eff2e1e084352db3cdcd751770946505e3e37b
Certificate serial:       0724725C8D4A9E58380FA7B85C25DAD1A50FF54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RO_y4eCENS2zzc11F3CUZQXj43s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.mft
Manifest number:          0531
Signing time:             Thu 21 Dec 2023 15:44:39 +0000
Manifest this update:     Thu 21 Dec 2023 15:39:39 +0000
Manifest next update:     Fri 22 Dec 2023 18:24:39 +0000
Files and hashes:         1: 44EFF2E1E084352DB3CDCD751770946505E3E37B.crl (hash: fh5MQdtIK6tAY0BPZEyCEuCvrW7JMb3MrknVZlspJc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:24:72:5c:8d:4a:9e:58:38:0f:a7:b8:5c:25:da:d1:a5:0f:f5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44eff2e1e084352db3cdcd751770946505e3e37b
        Validity
            Not Before: Dec 21 15:39:39 2023 GMT
            Not After : Dec 22 18:24:39 2023 GMT
        Subject: CN=C8A313548F21A614A1D1A7D9EC748D0AC4C29640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:f7:04:87:2b:37:26:89:e6:7e:1e:57:7a:
                    57:cd:fa:41:da:46:98:3f:ac:a0:b6:6a:ab:94:da:
                    42:50:92:9c:d6:44:08:77:11:65:fc:66:88:3c:7c:
                    d9:61:be:39:de:c4:de:30:d7:bf:6e:13:86:c0:21:
                    f0:74:38:f9:8a:c3:cc:30:ed:f0:36:26:c5:5c:bd:
                    d8:83:32:cf:ad:e0:41:4f:1d:13:d0:fa:10:49:57:
                    9a:20:f7:43:7e:77:4f:b6:c0:c7:8b:f4:fa:01:33:
                    b3:7a:53:f0:be:05:82:4e:cc:9f:09:81:1d:0d:02:
                    b3:c1:79:8e:ca:eb:83:96:ff:b8:27:85:82:ff:41:
                    8c:0b:17:9d:f0:af:a8:31:3e:35:0a:77:3c:05:77:
                    15:4a:4d:40:50:f3:28:ff:f4:52:f2:d5:3f:61:08:
                    28:23:4c:92:eb:04:7b:79:a6:3f:d4:c5:db:25:c9:
                    0b:b8:fd:21:43:43:c4:f0:e9:58:ed:f0:05:5d:e2:
                    23:d0:93:0b:09:38:d7:01:4b:43:fe:f3:8e:bf:06:
                    e6:28:e9:cb:93:3d:23:c9:0f:a5:16:35:10:f1:0e:
                    ab:6c:32:f5:4e:74:ac:04:a0:28:49:d9:ac:7c:ca:
                    ac:4c:d6:b1:2b:3b:b1:12:c1:69:a3:4b:1d:86:56:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A3:13:54:8F:21:A6:14:A1:D1:A7:D9:EC:74:8D:0A:C4:C2:96:40
            X509v3 Authority Key Identifier:
                keyid:44:EF:F2:E1:E0:84:35:2D:B3:CD:CD:75:17:70:94:65:05:E3:E3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO_y4eCENS2zzc11F3CUZQXj43s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:f7:41:db:6e:49:b7:e1:f7:f1:ef:9e:15:8b:42:4a:4c:
         96:be:12:13:7d:e7:a8:9d:09:c9:ab:eb:83:88:09:05:8b:d2:
         48:23:ba:c7:9a:bb:69:04:ab:e4:5e:3d:68:36:e5:b0:78:12:
         c7:1e:f4:4e:7c:b3:12:87:b3:2a:ed:6b:73:bd:0a:e8:80:83:
         47:1c:bd:d9:1a:d8:8f:21:80:4d:55:eb:cf:45:31:6b:93:07:
         9b:c0:4b:39:50:b3:1e:52:2b:f4:30:f2:05:48:a5:b7:61:39:
         ae:ee:11:f9:a8:9e:a6:a4:3a:50:be:44:e7:34:de:8f:53:7c:
         84:a7:12:80:da:14:5f:46:64:e8:da:94:69:f2:1c:90:0f:52:
         31:e9:ff:f9:4d:c7:c7:dd:09:a6:0d:22:d6:03:33:14:60:f6:
         0b:00:e0:55:fb:d0:d3:1a:c7:1f:dd:00:94:f0:fe:48:6b:fb:
         55:74:1a:91:49:a8:07:81:95:35:85:1e:37:63:67:72:0c:6d:
         98:ba:84:40:96:cd:3f:b7:96:ce:7a:d0:dc:6b:ac:b0:1c:2c:
         a6:7e:12:34:5d:b2:fa:9e:f5:3b:22:c5:5e:de:e7:dc:2f:b9:
         a8:6a:e5:be:bc:22:d6:fa:43:b4:af:4a:65:55:f7:29:d3:55:
         70:0e:ed:f1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUByRyXI1Knlg4D6e4XCXa0aUP9U0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRlZmYyZTFlMDg0MzUyZGIzY2RjZDc1MTc3MDk0NjUw
NWUzZTM3YjAeFw0yMzEyMjExNTM5MzlaFw0yMzEyMjIxODI0MzlaMDMxMTAvBgNV
BAMTKEM4QTMxMzU0OEYyMUE2MTRBMUQxQTdEOUVDNzQ4RDBBQzRDMjk2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkfcEhys3Jonmfh5XelfN+kHa
Rpg/rKC2aquU2kJQkpzWRAh3EWX8Zog8fNlhvjnexN4w179uE4bAIfB0OPmKw8ww
7fA2JsVcvdiDMs+t4EFPHRPQ+hBJV5og90N+d0+2wMeL9PoBM7N6U/C+BYJOzJ8J
gR0NArPBeY7K64OW/7gnhYL/QYwLF53wr6gxPjUKdzwFdxVKTUBQ8yj/9FLy1T9h
CCgjTJLrBHt5pj/UxdslyQu4/SFDQ8Tw6Vjt8AVd4iPQkwsJONcBS0P+846/BuYo
6cuTPSPJD6UWNRDxDqtsMvVOdKwEoChJ2ax8yqxM1rErO7ESwWmjSx2GVmNjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyKMTVI8hphSh0afZ7HSNCsTClkAwHwYDVR0j
BBgwFoAURO/y4eCENS2zzc11F3CUZQXj43swDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8yMDQvNDRFRkYyRTFFMDg0MzUyREIzQ0RDRDc1MTc3MDk0NjUwNUUzRTM3
Qi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JPX3k0ZUNFTlMyenpjMTFGM0NV
WlFYajQzcy5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIwNC80NEVGRjJFMUUwODQz
NTJEQjNDRENENzUxNzcwOTQ2NTA1RTNFMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLv3QdtuSbfh
9/HvnhWLQkpMlr4SE33nqJ0Jyavrg4gJBYvSSCO6x5q7aQSr5F49aDblsHgSxx70
TnyzEoezKu1rc70K6ICDRxy92RrYjyGATVXrz0Uxa5MHm8BLOVCzHlIr9DDyBUil
t2E5ru4R+aiepqQ6UL5E5zTej1N8hKcSgNoUX0Zk6NqUafIckA9SMen/+U3Hx90J
pg0i1gMzFGD2CwDgVfvQ0xrHH90AlPD+SGv7VXQakUmoB4GVNYUeN2NncgxtmLqE
QJbNP7eWznrQ3GussBwspn4SNF2y+p71OyLFXt7n3C+5qGrlvrwi1vpDtK9KZVX3
KdNVcA7t8Q==
-----END CERTIFICATE-----