Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File:                     D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier:          yIO1Ku9n9zR717iwsZVrR7sbkz0B6W8RLBrFScFgvE8=
Subject key identifier:   EB:5A:08:0D:43:AC:79:B7:71:3A:BA:3D:D8:16:7E:86:85:FF:DE:97
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       628CF375B20A645E22F40BEF8EB92652E2090869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number:          02C8
Signing time:             Fri 28 Mar 2025 20:59:36 +0000
Manifest this update:     Fri 28 Mar 2025 20:54:36 +0000
Manifest next update:     Sat 29 Mar 2025 23:27:36 +0000
Files and hashes:         1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 0EOkxXj0vPkj1FSFRMKPYpGOg5Ga7t5HLhQIHiQax3o=)
                          2: AS203843.asa (hash: k+8u9HPPsukyHGLKivS7lRN0IL/eqmbOiCwuPE+ZnUg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8c:f3:75:b2:0a:64:5e:22:f4:0b:ef:8e:b9:26:52:e2:09:08:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Mar 28 20:54:36 2025 GMT
            Not After : Mar 29 23:27:36 2025 GMT
        Subject: CN=EB5A080D43AC79B7713ABA3DD8167E8685FFDE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:af:8e:f6:f2:37:82:68:69:f9:57:47:ba:
                    9c:c7:61:94:a5:28:5e:85:e8:d9:2b:6c:e8:a7:2a:
                    b4:5a:b8:70:ff:85:85:9e:2f:d4:1c:61:77:79:9a:
                    47:34:a4:3a:ca:db:f1:2e:71:cf:36:45:5c:d6:fb:
                    cd:3b:68:8e:06:f4:c0:52:26:88:e6:a0:fa:12:b9:
                    70:78:62:38:fa:64:cd:e1:8e:0a:d9:16:d2:2d:70:
                    7e:0a:85:44:2f:a9:d0:57:a7:e9:30:3f:45:b5:16:
                    ff:9e:7b:af:97:b5:a0:45:5d:72:95:8b:16:42:98:
                    77:36:96:f2:67:03:fc:bc:04:3e:60:10:89:29:e0:
                    d9:18:5f:47:70:5f:83:d5:98:35:8e:30:64:0c:f7:
                    1d:14:9f:7f:d8:02:a1:1d:72:5b:0e:6e:66:38:75:
                    fe:67:c4:01:be:5d:85:d5:e1:19:8b:9f:4a:67:fd:
                    47:b7:d3:00:71:2c:6f:d6:57:0d:b0:a2:ad:1c:ad:
                    f4:65:46:6f:2d:4e:ad:e8:84:df:18:00:5f:4c:41:
                    06:9a:7f:1f:63:a3:6f:e2:ea:4f:9e:36:87:e5:58:
                    55:91:5f:f2:01:e2:18:63:99:a7:92:bf:20:cf:c3:
                    18:f4:06:fc:b6:8f:b7:41:77:bb:36:e7:27:0e:ac:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5A:08:0D:43:AC:79:B7:71:3A:BA:3D:D8:16:7E:86:85:FF:DE:97
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:eb:a2:0a:e3:7a:3a:6d:72:e5:67:fd:f2:34:41:87:33:
         7e:19:53:97:fd:24:65:54:e8:b9:99:91:d8:88:62:ff:aa:4d:
         e6:6a:c8:57:05:a4:65:96:29:1c:c6:80:c3:e5:2f:a0:93:ba:
         1a:fc:61:df:87:b6:29:41:86:1f:77:0e:7a:61:8b:64:18:f3:
         33:9f:4e:5e:8e:9e:e2:1d:21:12:b3:47:3a:52:5b:bb:c3:a6:
         0b:23:79:e9:96:1c:f4:ef:df:f8:75:1f:7e:d0:79:76:6b:20:
         0f:58:e8:c6:0f:b3:f9:87:d5:a9:f1:74:8d:b3:59:2c:b2:67:
         be:c3:ac:c4:5d:c3:06:1e:d4:96:a9:38:19:8e:d1:42:39:ea:
         6f:40:87:11:e7:44:b5:4c:8f:08:3a:21:34:a9:8f:e1:71:68:
         8a:fa:59:92:4a:11:fc:bf:e6:78:50:d1:a1:f7:89:5e:07:a0:
         8c:0c:91:54:c8:88:21:f5:ad:79:55:ff:6d:e2:d7:5f:cb:47:
         50:a1:03:ca:0f:af:25:d3:f6:22:9b:f9:19:b6:81:f1:3b:45:
         b1:74:34:5f:67:d2:36:b8:42:70:dc:d1:8d:d9:f6:e8:1e:a4:
         3c:e2:b6:ea:dd:d1:54:93:82:62:d8:86:70:40:65:e9:91:ff:
         a4:25:47:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----