Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.mft
File:                     40C5E16CC09D12B91FFDE58141213F2E82A6F498.mft (raw, json)
Hash identifier:          oesOQpf9IZbY0CpnrnZ6AlMWn1dgfU10ol0bChZehOQ=
Subject key identifier:   83:25:B4:59:C9:10:18:1A:82:F9:8B:8E:D1:36:5D:10:A0:44:01:22
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       6575BE921515469331B52E4145D398F1F49A7EF0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.mft
Manifest number:          C4
Signing time:             Tue 21 May 2024 01:33:30 +0000
Manifest this update:     Tue 21 May 2024 01:28:30 +0000
Manifest next update:     Wed 22 May 2024 03:08:30 +0000
Files and hashes:         1: 40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl (hash: QpgahgNWT5RHULB8qeudF+ESfqIYc/7RUbr4W2aXhjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:75:be:92:15:15:46:93:31:b5:2e:41:45:d3:98:f1:f4:9a:7e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: May 21 01:28:30 2024 GMT
            Not After : May 22 03:08:30 2024 GMT
        Subject: CN=8325B459C910181A82F98B8ED1365D10A0440122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:da:31:d6:8a:f2:70:ba:af:ba:83:07:5b:
                    d7:9f:ef:bf:87:a4:65:1b:5b:d3:44:36:81:84:92:
                    4e:47:0e:21:a2:1b:03:40:92:c1:ad:a7:3d:c4:0b:
                    37:12:35:17:cb:66:1e:ff:5f:8e:b7:a1:77:95:10:
                    f5:1e:67:88:ad:f2:51:59:f3:2b:fe:37:e8:8f:45:
                    4f:9c:00:37:9a:d0:bc:16:f1:7b:9e:31:02:e4:ca:
                    39:8d:72:54:69:25:37:3c:54:34:2a:93:2d:3e:17:
                    cf:81:52:37:1f:e0:01:c6:c7:24:44:ed:28:03:9b:
                    79:6b:f6:68:3c:3f:84:86:d2:b3:6e:5a:27:a0:47:
                    d4:f1:fd:c8:25:b7:4a:da:47:41:21:54:2c:53:bb:
                    5e:e9:20:4b:fe:23:49:ac:58:e9:a9:15:6c:60:6c:
                    09:dc:b0:46:c9:86:5d:ff:12:93:af:40:3a:da:20:
                    2a:a0:9f:95:dd:ff:6b:3b:47:65:ee:a1:a4:68:1c:
                    88:5c:9f:69:44:1b:63:ff:e7:ea:81:01:f4:53:d5:
                    ae:18:28:d1:d8:03:c4:a6:22:d5:34:cf:92:6f:9e:
                    8e:0a:4b:ff:4c:e8:42:39:59:ad:9d:45:10:f6:33:
                    15:19:9a:e4:68:ec:4a:11:f7:f0:99:d3:df:d3:a4:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:25:B4:59:C9:10:18:1A:82:F9:8B:8E:D1:36:5D:10:A0:44:01:22
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:cb:bc:70:e5:e7:9a:c4:aa:ea:6d:04:5b:a9:26:26:9c:59:
         b4:8a:69:44:d1:86:5a:7a:d6:15:64:4b:40:c9:52:a2:a8:3f:
         d8:28:82:65:7d:82:03:63:1a:35:22:a1:a0:e1:06:db:bb:18:
         5e:d7:57:ef:e2:fd:87:43:d9:bd:88:69:fb:97:bc:88:ac:bf:
         7d:04:4e:54:62:d3:52:d4:c4:a7:d2:2a:59:3b:bf:f8:78:b9:
         a4:aa:9e:5a:d4:74:83:c7:0e:74:1b:ad:9c:08:b7:4e:4b:83:
         8b:d2:9e:4b:45:aa:d1:83:81:3e:ee:3d:d2:c8:8a:07:b0:da:
         04:df:dd:a9:1f:54:67:59:8b:6e:65:e4:5e:f7:82:8f:9f:92:
         af:e5:ea:3a:d3:0f:c6:5d:41:d9:a4:a4:55:34:53:47:0b:db:
         fe:e3:6e:16:c9:b7:90:83:21:79:53:da:9e:cf:a5:4d:10:64:
         76:2c:80:46:db:bd:88:64:74:07:9d:51:1b:b0:70:9d:d3:d9:
         18:dd:4d:28:9c:07:10:84:a1:d8:c5:85:16:6d:19:08:38:2e:
         76:87:5b:e6:75:e0:f1:9d:fc:4e:56:58:6c:4b:07:55:33:95:
         da:ab:e6:21:49:97:1b:d6:1b:6f:a4:6f:d3:a5:a9:af:66:90:
         52:09:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----