Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/205/619CC4DF10774A9838E50F7AA3E570C07FB08DA3.mft
File:                     619CC4DF10774A9838E50F7AA3E570C07FB08DA3.mft (raw, json)
Hash identifier:          Vx3EyXzISPDrFhZ8FOVD6Tj74DqOjtOeYed5sVdtVR8=
Subject key identifier:   F5:E2:DC:74:0C:1B:65:E9:73:1B:53:EB:36:BA:95:A4:64:59:C6:D8
Authority key identifier: 61:9C:C4:DF:10:77:4A:98:38:E5:0F:7A:A3:E5:70:C0:7F:B0:8D:A3
Certificate issuer:       /CN=619cc4df10774a9838e50f7aa3e570c07fb08da3
Certificate serial:       48C5740196614737843456547416EEB22AF8F1D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZzE3xB3Spg45Q96o-VwwH-wjaM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/205/619CC4DF10774A9838E50F7AA3E570C07FB08DA3.mft
Manifest number:          052F
Signing time:             Thu 21 Dec 2023 14:39:25 +0000
Manifest this update:     Thu 21 Dec 2023 14:34:25 +0000
Manifest next update:     Fri 22 Dec 2023 18:12:25 +0000
Files and hashes:         1: 619CC4DF10774A9838E50F7AA3E570C07FB08DA3.crl (hash: i8bS3sepoQQZH9ULNT5GcfB+NIzRr+K6/TF6KTeHGFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c5:74:01:96:61:47:37:84:34:56:54:74:16:ee:b2:2a:f8:f1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619cc4df10774a9838e50f7aa3e570c07fb08da3
        Validity
            Not Before: Dec 21 14:34:25 2023 GMT
            Not After : Dec 22 18:12:25 2023 GMT
        Subject: CN=F5E2DC740C1B65E9731B53EB36BA95A46459C6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:81:82:8d:dc:b5:56:80:15:0b:ee:4e:b8:fa:
                    1a:4f:ca:18:a8:fd:26:8f:d0:d0:c5:d6:04:9e:3b:
                    96:26:20:fd:8d:28:57:b8:d2:3a:85:02:a6:20:5c:
                    53:4f:0a:e3:ed:35:73:90:8b:2e:75:3d:67:b0:77:
                    e4:79:da:16:09:9f:fd:40:9b:d8:0e:f3:e5:2b:84:
                    e7:93:06:b3:d2:0b:15:1c:d0:61:a9:8f:e5:5f:89:
                    40:d9:7c:77:32:c0:53:7d:2a:c3:cc:a1:ea:9d:5a:
                    29:74:02:ca:de:58:db:60:2c:e7:c8:4a:d3:46:10:
                    0a:8a:e6:66:7e:13:02:97:91:a0:aa:2f:42:a0:ae:
                    cf:22:0a:a0:75:6b:53:b9:b2:31:65:45:0d:df:f0:
                    bb:d8:2b:c8:cf:48:13:29:70:a3:43:3a:e5:f9:c2:
                    38:05:28:63:ee:97:7d:02:4f:da:04:31:79:34:69:
                    51:f8:a8:b3:26:18:47:7f:24:be:3c:d0:3b:07:88:
                    a7:12:8c:bd:b3:e7:c5:ab:ed:e6:e9:79:99:52:7b:
                    de:fa:2d:c0:d3:ea:c1:e8:17:6a:db:82:71:6f:e5:
                    d0:20:57:75:67:ea:26:41:6b:85:d5:dc:ca:37:01:
                    32:83:de:39:17:9c:a3:8b:f3:77:8f:d4:d8:4b:c0:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E2:DC:74:0C:1B:65:E9:73:1B:53:EB:36:BA:95:A4:64:59:C6:D8
            X509v3 Authority Key Identifier:
                keyid:61:9C:C4:DF:10:77:4A:98:38:E5:0F:7A:A3:E5:70:C0:7F:B0:8D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/205/619CC4DF10774A9838E50F7AA3E570C07FB08DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZzE3xB3Spg45Q96o-VwwH-wjaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/205/619CC4DF10774A9838E50F7AA3E570C07FB08DA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:43:a3:fe:96:27:6c:03:7b:90:ae:0b:6b:b0:a3:1d:98:6d:
         af:d0:6a:e7:2d:99:5a:3e:15:f4:9d:4f:8b:80:fa:b9:1e:b3:
         47:b7:9c:3d:44:23:1a:0b:68:0d:24:ff:d7:9a:0c:76:4f:5b:
         3d:67:27:76:df:e9:3d:ac:cc:20:08:e3:0e:6c:c1:47:4a:99:
         48:de:9a:be:f3:f6:82:f8:bd:25:28:f3:66:42:cd:1a:a0:b8:
         89:80:2c:ad:1f:03:c6:47:ec:d9:d6:d1:ad:e0:fd:19:a4:e7:
         e3:88:18:06:db:b1:0b:91:b4:d5:eb:c7:27:af:9c:6f:cc:23:
         be:c0:b1:e7:0f:22:d3:03:f3:ae:41:7a:15:f4:06:09:a8:10:
         db:df:74:cd:4c:61:b9:f6:87:33:c9:61:9f:e6:78:cb:86:eb:
         3b:74:2c:45:37:26:32:28:27:f2:50:67:94:16:38:03:5d:3b:
         ab:ae:77:2f:22:c9:f5:8e:d8:f0:35:d6:04:59:32:69:f4:d0:
         3f:06:04:38:d1:65:5e:2e:b7:b5:74:dd:18:0c:73:fa:63:61:
         07:70:22:cd:24:6d:0d:14:95:8c:d2:4c:6f:a6:41:e3:f1:34:
         a3:dc:7a:3f:2f:1d:a0:8c:2a:73:8d:9e:c8:d4:10:48:17:d3:
         76:39:c4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----