Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/4/77659DA62CB45DCA8D08DF5273E511C90092A5DC.mft
File:                     77659DA62CB45DCA8D08DF5273E511C90092A5DC.mft (raw, json)
Hash identifier:          ZLyDCNVuRxBtyGQyUApxreQBn98rLexF18cMP/9vyTs=
Subject key identifier:   BC:4B:16:73:CC:6C:9E:CE:CB:02:C4:3C:93:C5:3D:A8:9E:A7:BF:4D
Authority key identifier: 77:65:9D:A6:2C:B4:5D:CA:8D:08:DF:52:73:E5:11:C9:00:92:A5:DC
Certificate issuer:       /CN=200ae5435faaa2d4b83fbf01a5f873c76d0758f5453185f337
Certificate serial:       52841B7C99002F5FD7A5B61AB6E33B633B13DDBC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161/200ae5435faaa2d4b83fbf01a5f873c76d0758f5453185f337.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/4/77659DA62CB45DCA8D08DF5273E511C90092A5DC.mft
Manifest number:          06
Signing time:             Wed 22 May 2024 13:31:25 +0000
Manifest this update:     Wed 22 May 2024 13:26:25 +0000
Manifest next update:     Thu 23 May 2024 13:58:25 +0000
Files and hashes:         1: 77659DA62CB45DCA8D08DF5273E511C90092A5DC.crl (hash: w7lDuh3fDzpctMCyofWBGv/98t0hNoqh4V0zAvtORjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:84:1b:7c:99:00:2f:5f:d7:a5:b6:1a:b6:e3:3b:63:3b:13:dd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200ae5435faaa2d4b83fbf01a5f873c76d0758f5453185f337
        Validity
            Not Before: May 22 13:26:25 2024 GMT
            Not After : May 23 13:58:25 2024 GMT
        Subject: CN=BC4B1673CC6C9ECECB02C43C93C53DA89EA7BF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:cb:0b:34:9b:e8:69:b2:fd:f8:00:8e:ef:
                    f6:d2:ee:8d:8a:e5:28:7d:59:1a:30:0e:ee:3c:8d:
                    27:76:d8:da:43:54:77:f6:bb:79:88:d0:5b:2e:50:
                    c9:83:98:b5:81:c2:33:ca:ad:ab:73:01:30:75:a9:
                    4f:f4:11:f8:40:ea:da:44:e5:92:3b:d5:62:b1:45:
                    cc:62:f1:40:8a:0b:a3:11:c1:8e:ee:67:81:4b:a0:
                    97:66:5c:09:cf:bb:ff:c4:37:bf:8d:de:a0:3a:e8:
                    99:94:5f:a6:75:11:51:9b:0e:37:e6:92:9f:5d:d1:
                    17:67:9a:e6:dc:a3:5c:c8:04:81:9a:4a:b3:f4:0e:
                    4c:96:30:12:dc:a8:6b:13:17:41:23:57:af:de:33:
                    09:b3:10:4a:a3:e6:2c:f2:c4:a8:b2:de:16:64:ff:
                    9f:00:f1:f0:1a:24:b8:25:d9:17:c4:d9:4f:66:40:
                    72:e7:56:a6:86:b8:2c:86:ac:27:59:e9:ea:d5:3a:
                    85:90:c7:eb:9e:6d:57:1e:8a:e9:3c:d3:58:39:d0:
                    f9:d6:03:01:80:bc:3d:cd:51:da:b2:40:71:cf:fd:
                    ed:3b:5a:c5:0b:93:fd:c7:f9:6f:59:56:ba:62:27:
                    38:a6:2a:31:75:8d:58:82:68:7a:53:f0:bd:33:a5:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:16:73:CC:6C:9E:CE:CB:02:C4:3C:93:C5:3D:A8:9E:A7:BF:4D
            X509v3 Authority Key Identifier:
                keyid:77:65:9D:A6:2C:B4:5D:CA:8D:08:DF:52:73:E5:11:C9:00:92:A5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/4/77659DA62CB45DCA8D08DF5273E511C90092A5DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161/200ae5435faaa2d4b83fbf01a5f873c76d0758f5453185f337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/4/77659DA62CB45DCA8D08DF5273E511C90092A5DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:99:c5:68:ef:1a:1f:86:09:6e:58:78:1b:26:7f:78:5c:6d:
         1d:a4:35:32:f6:b5:2f:ad:1e:09:b7:c3:36:b1:3d:ed:7c:51:
         6f:39:61:38:c3:0d:d8:d2:23:c3:1e:b8:05:34:12:19:95:22:
         35:b5:a7:42:1f:ca:96:0d:fa:fb:2f:e7:51:41:59:22:55:e7:
         95:4e:52:8f:83:d0:e0:e8:6f:4e:3e:af:8f:bb:06:0d:1e:e4:
         92:54:88:ce:9b:6c:2b:01:41:53:ff:1d:b0:12:a1:49:b9:cf:
         29:00:f4:01:6f:66:4d:be:fe:58:c6:47:0a:17:8b:25:c7:ea:
         80:22:f0:75:88:35:04:33:90:bf:9b:a2:36:dc:21:84:4c:82:
         81:7b:87:0f:1e:20:45:80:5e:85:5c:55:cc:6f:b4:a7:4e:7b:
         71:07:6e:79:2f:fb:6b:94:a0:05:c5:1c:e4:ce:e8:da:8c:e6:
         cb:2d:91:01:8c:81:bf:03:2e:c3:ba:6a:83:88:a3:e3:75:e2:
         03:e5:73:80:e9:03:21:8d:1f:66:43:ba:1a:2f:24:52:fe:30:
         0d:bd:b2:73:40:e4:b6:eb:8a:8c:04:85:8e:33:97:98:1f:b6:
         10:44:4e:3a:b3:d3:5a:19:8b:fa:23:f7:cb:5b:f6:90:13:a1:
         3e:bf:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----