Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/206/2F50C455B1BC50D565BFD66080A7AD6C942F78C5.mft
File:                     2F50C455B1BC50D565BFD66080A7AD6C942F78C5.mft (raw, json)
Hash identifier:          N/CJ8n4YFJxkDKaJcsbHsFSrv/Y0bJohnpHPatZWwgY=
Subject key identifier:   BD:0C:91:46:C5:22:E2:6D:83:60:0E:2F:D6:71:A3:71:C4:B5:E7:27
Authority key identifier: 2F:50:C4:55:B1:BC:50:D5:65:BF:D6:60:80:A7:AD:6C:94:2F:78:C5
Certificate issuer:       /CN=2f50c455b1bc50d565bfd66080a7ad6c942f78c5
Certificate serial:       30BF6D35A9F9351BDE8FD51C1328B08A8E6D469B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1DEVbG8UNVlv9ZggKetbJQveMU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/206/2F50C455B1BC50D565BFD66080A7AD6C942F78C5.mft
Manifest number:          052A
Signing time:             Thu 21 Dec 2023 14:39:24 +0000
Manifest this update:     Thu 21 Dec 2023 14:34:24 +0000
Manifest next update:     Fri 22 Dec 2023 17:15:24 +0000
Files and hashes:         1: 2F50C455B1BC50D565BFD66080A7AD6C942F78C5.crl (hash: 3x5AYKFxHpx1ajyvkeLp+KmRBQTt4FCtdOr1+OnQmmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bf:6d:35:a9:f9:35:1b:de:8f:d5:1c:13:28:b0:8a:8e:6d:46:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f50c455b1bc50d565bfd66080a7ad6c942f78c5
        Validity
            Not Before: Dec 21 14:34:24 2023 GMT
            Not After : Dec 22 17:15:24 2023 GMT
        Subject: CN=BD0C9146C522E26D83600E2FD671A371C4B5E727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:db:2d:4a:29:8e:10:82:02:50:ee:ea:7e:
                    cf:f5:89:77:87:41:22:85:61:f8:e0:eb:2d:31:40:
                    ed:64:b0:6e:88:a2:9f:bf:48:fa:8a:02:c9:49:65:
                    b1:25:71:df:19:57:8c:bb:e4:2a:93:18:59:d7:6a:
                    e7:21:50:14:9c:ea:64:a5:c5:1e:af:16:57:41:c7:
                    0e:a8:49:fd:a5:d3:dd:ac:df:5a:b3:6a:dc:4d:3f:
                    76:e6:51:60:97:c1:ab:cf:83:ba:83:e4:07:43:a9:
                    60:60:f7:2a:b5:fc:de:52:ba:d1:4f:45:29:76:a7:
                    48:5d:51:79:74:26:8c:c3:24:02:1e:84:c7:9b:8e:
                    ec:ed:18:55:b0:31:d8:5d:1d:0a:22:d0:7e:33:c0:
                    cd:09:43:7d:ed:2e:97:8c:84:9d:56:bc:4c:2d:14:
                    5c:f7:8f:f2:a8:51:09:23:19:97:9a:50:b7:87:af:
                    00:60:a7:81:a6:77:5e:47:57:6a:8f:ad:6f:1a:cf:
                    91:d8:02:bd:d4:b7:4e:cb:3a:47:38:03:e2:df:27:
                    0b:dc:43:c3:f2:59:9b:c8:3f:7d:91:41:a1:51:2e:
                    35:17:aa:1d:94:e6:f2:ed:00:30:96:31:cd:08:c7:
                    30:ae:b5:7d:9b:16:e8:79:19:22:c8:6c:b2:9a:3a:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0C:91:46:C5:22:E2:6D:83:60:0E:2F:D6:71:A3:71:C4:B5:E7:27
            X509v3 Authority Key Identifier:
                keyid:2F:50:C4:55:B1:BC:50:D5:65:BF:D6:60:80:A7:AD:6C:94:2F:78:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/206/2F50C455B1BC50D565BFD66080A7AD6C942F78C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1DEVbG8UNVlv9ZggKetbJQveMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/206/2F50C455B1BC50D565BFD66080A7AD6C942F78C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fe:05:6b:a5:2e:75:80:91:0d:98:30:de:de:9e:12:a6:b8:
         c9:b2:18:ac:00:b3:29:1a:63:40:71:95:14:aa:0a:52:3d:35:
         4c:cc:5f:9a:33:2f:5e:91:eb:c3:80:30:24:eb:d6:a2:ab:40:
         94:0c:b5:d5:01:05:bb:b3:78:fe:a9:3e:87:c8:ef:6a:0d:e9:
         2c:a6:2d:d9:9e:03:5d:e4:28:e3:17:28:ea:b0:b0:db:cf:69:
         f1:a2:da:60:ac:df:c6:81:ac:7a:e4:06:24:44:84:0c:22:22:
         f3:32:a3:76:a8:61:cb:c8:1e:2c:5c:09:84:99:ca:31:c7:09:
         54:6c:2a:46:61:89:d8:d6:28:a6:2e:f8:1b:ce:52:6a:b3:06:
         48:c5:56:42:4f:d7:bd:7f:ae:6b:d3:24:4e:7a:cf:e2:58:16:
         73:20:0d:d7:bf:ce:41:04:19:20:03:68:c7:d7:db:11:c4:26:
         4e:bd:c4:1c:4e:74:f2:91:91:da:b7:68:11:bb:e9:b7:f5:4a:
         1f:1d:14:68:4b:a1:8a:fe:4d:1e:01:f0:a0:df:07:59:58:13:
         38:25:a0:94:a3:ea:86:a9:0a:c2:71:42:93:01:7d:e0:70:8f:
         e5:ad:db:68:7a:7c:83:0c:a5:57:d3:31:2f:a4:2b:65:76:d1:
         cd:0d:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----