Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/37947CA4C4EA8DE3F5A85693380EE85681A0C8D0.mft
File:                     37947CA4C4EA8DE3F5A85693380EE85681A0C8D0.mft (raw, json)
Hash identifier:          hzCXpTzluv/c3RD6QH8Y3lAa0QeQ0dulolgCOHT9w58=
Subject key identifier:   1F:ED:CB:6B:65:1F:B6:4E:A9:51:AF:5B:B1:28:23:A6:16:96:85:05
Authority key identifier: 37:94:7C:A4:C4:EA:8D:E3:F5:A8:56:93:38:0E:E8:56:81:A0:C8:D0
Certificate issuer:       /CN=d90d8aba2a276014419fdb44ec8a186dd7c241c33e6c353dd7
Certificate serial:       2E9807485A9D13EDFB55E2335973E0D16999E3C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a276014419fdb44ec8a186dd7c241c33e6c353dd7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/37947CA4C4EA8DE3F5A85693380EE85681A0C8D0.mft
Manifest number:          06
Signing time:             Wed 22 May 2024 13:31:22 +0000
Manifest this update:     Wed 22 May 2024 13:26:22 +0000
Manifest next update:     Thu 23 May 2024 14:26:22 +0000
Files and hashes:         1: 37947CA4C4EA8DE3F5A85693380EE85681A0C8D0.crl (hash: eXDfP4zXvhXX1ziUzZoFu9yvdcHXm/VoPRDj7tqFH6U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:98:07:48:5a:9d:13:ed:fb:55:e2:33:59:73:e0:d1:69:99:e3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a276014419fdb44ec8a186dd7c241c33e6c353dd7
        Validity
            Not Before: May 22 13:26:22 2024 GMT
            Not After : May 23 14:26:22 2024 GMT
        Subject: CN=1FEDCB6B651FB64EA951AF5BB12823A616968505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:72:7e:ec:c0:b9:ec:2a:bc:5c:68:8e:07:
                    01:ba:25:92:a2:3c:37:38:d8:8e:cb:64:8f:c5:ae:
                    ca:1f:1b:af:04:dc:7a:62:8b:29:c5:f2:0a:9a:3b:
                    a5:9d:1b:78:fc:74:98:b9:62:05:e9:27:24:90:bf:
                    d8:6a:db:d9:06:87:88:b3:fd:8b:f5:b4:32:28:dd:
                    4e:ea:cf:86:4f:82:02:9c:0a:e4:3d:66:49:54:fe:
                    68:01:a6:6f:9d:04:10:03:cb:2e:d4:01:70:8b:c1:
                    6d:66:ee:60:eb:aa:2a:9b:4f:6c:a3:a4:71:48:c2:
                    4d:64:72:e7:2d:9e:e0:c6:0f:de:c5:46:09:bd:6a:
                    f8:a1:83:bd:2e:c4:92:77:1c:68:d1:b7:d5:dc:9e:
                    a9:5d:8a:fb:1f:e3:57:1e:1c:a6:76:95:72:87:18:
                    38:18:f0:8e:93:b6:6b:75:44:24:67:7f:3a:55:7f:
                    a6:32:f3:7a:5f:f4:61:d8:8e:b3:48:56:20:c8:0b:
                    a5:a6:4c:b7:fb:56:31:36:dc:b9:30:13:5c:0a:97:
                    4e:64:64:e8:7f:72:cd:2d:83:59:29:5b:a1:18:1a:
                    c5:a8:ac:48:89:d6:06:84:06:8e:b4:27:82:2d:5c:
                    44:b8:53:ed:db:2d:de:93:00:a4:2a:f5:a2:36:ba:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:ED:CB:6B:65:1F:B6:4E:A9:51:AF:5B:B1:28:23:A6:16:96:85:05
            X509v3 Authority Key Identifier:
                keyid:37:94:7C:A4:C4:EA:8D:E3:F5:A8:56:93:38:0E:E8:56:81:A0:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/37947CA4C4EA8DE3F5A85693380EE85681A0C8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a276014419fdb44ec8a186dd7c241c33e6c353dd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/37947CA4C4EA8DE3F5A85693380EE85681A0C8D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:95:24:e1:5c:67:b4:35:65:c5:f2:52:86:34:db:44:4d:75:
         2d:61:92:fa:d9:5d:ce:50:a4:ba:75:1e:84:18:fc:4a:46:27:
         18:42:62:3d:25:58:b6:04:15:0e:ff:24:72:dc:7f:91:11:39:
         0c:1c:e5:ab:6b:5a:50:5f:12:51:f0:2d:c8:56:40:47:9d:2d:
         4f:75:d4:eb:30:2b:03:46:eb:1c:08:a1:9b:90:17:90:42:fd:
         f6:37:87:82:34:83:a3:b4:1b:3b:84:a4:10:43:45:91:e6:f8:
         f3:26:24:a0:6d:5c:17:53:61:d9:c9:48:84:7c:53:c2:53:d5:
         3c:e3:9d:1d:ab:bc:e9:6e:0d:ca:ce:fb:16:b6:d5:d0:44:82:
         b9:4a:cd:df:4d:f0:c6:45:4a:26:bc:6b:e2:86:15:53:a1:2a:
         1a:88:56:46:97:d8:fa:86:1f:39:d0:4b:3d:ec:30:2a:7c:38:
         93:25:0f:ad:3c:52:3c:06:10:92:3d:77:40:3f:7b:e5:97:8e:
         2c:74:95:5a:16:59:45:54:a7:9a:45:49:5e:84:1f:e2:01:0d:
         28:78:9a:f1:05:0a:82:5c:f9:08:17:c8:e3:32:77:f4:5e:7f:
         7d:84:e9:83:ab:52:25:27:d0:a1:b3:d3:35:6e:70:0c:5a:8f:
         0f:f3:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----