Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/5DCFD028F8CA8132FE6B9B221B342AB44928EA48.mft
File:                     5DCFD028F8CA8132FE6B9B221B342AB44928EA48.mft (raw, json)
Hash identifier:          AWutWv3dYlvMdKHzp/BCCpNqGFBlFy6ThTcAai/Jhtw=
Subject key identifier:   71:2E:C1:2C:66:E0:46:B9:40:20:57:35:75:7E:9F:7B:4E:FF:36:C3
Authority key identifier: 5D:CF:D0:28:F8:CA:81:32:FE:6B:9B:22:1B:34:2A:B4:49:28:EA:48
Certificate issuer:       /CN=5dcfd028f8ca8132fe6b9b221b342ab44928ea48
Certificate serial:       28FFFD7A8B7B08EDAADF713DE9F518F67A671F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xc_QKPjKgTL-a5siGzQqtEko6kg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/5DCFD028F8CA8132FE6B9B221B342AB44928EA48.mft
Manifest number:          06
Signing time:             Tue 10 Sep 2024 15:15:01 +0000
Manifest this update:     Tue 10 Sep 2024 15:10:01 +0000
Manifest next update:     Wed 11 Sep 2024 17:51:01 +0000
Files and hashes:         1: 5DCFD028F8CA8132FE6B9B221B342AB44928EA48.crl (hash: +ft8GMjX7YHIUX9/4HxvcqIVzzoSWs4/PqOjQQnSSCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ff:fd:7a:8b:7b:08:ed:aa:df:71:3d:e9:f5:18:f6:7a:67:1f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcfd028f8ca8132fe6b9b221b342ab44928ea48
        Validity
            Not Before: Sep 10 15:10:01 2024 GMT
            Not After : Sep 11 17:51:01 2024 GMT
        Subject: CN=712EC12C66E046B940205735757E9F7B4EFF36C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:a6:34:a4:2f:ab:67:83:ac:ec:f2:2e:b3:
                    19:3f:b4:e5:f8:f2:24:75:a7:8a:a9:6c:6e:3a:3a:
                    98:b1:18:30:d4:83:a7:42:2d:e4:71:05:8a:f6:98:
                    b7:1b:f8:83:31:c2:86:e8:3a:08:b3:55:11:e4:4f:
                    6a:49:cc:70:ce:fa:89:2d:fe:67:eb:9a:47:e7:f8:
                    f9:3b:40:ad:66:43:9f:83:3d:7b:04:9f:5c:87:d1:
                    38:09:ee:06:de:6b:5b:7e:07:9e:09:b0:12:2f:d1:
                    6b:2f:9e:1f:99:19:ec:ef:42:79:af:98:59:ea:de:
                    89:ee:28:1b:4d:ca:a2:ec:a9:0a:83:2c:37:fc:05:
                    b2:bf:33:3e:a0:96:01:80:d8:40:b3:cc:9d:0a:f2:
                    7c:15:11:ca:a8:bb:2e:f4:73:17:f5:46:bb:d4:23:
                    da:a6:3b:e8:19:23:34:ef:ad:05:d3:95:9a:9a:eb:
                    34:b5:ba:45:2d:2e:4a:ea:1b:f4:48:aa:3c:b6:6a:
                    db:1b:35:d1:a2:8d:40:73:72:a7:e8:bf:47:a4:51:
                    c9:8a:a5:27:36:a5:79:8c:d9:33:25:98:51:46:e6:
                    f0:c0:d9:51:33:e5:ed:2b:42:5b:8e:fb:ea:c4:7b:
                    77:06:35:57:a3:6d:d7:8c:3f:19:c7:53:8a:e3:43:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2E:C1:2C:66:E0:46:B9:40:20:57:35:75:7E:9F:7B:4E:FF:36:C3
            X509v3 Authority Key Identifier:
                keyid:5D:CF:D0:28:F8:CA:81:32:FE:6B:9B:22:1B:34:2A:B4:49:28:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/5DCFD028F8CA8132FE6B9B221B342AB44928EA48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xc_QKPjKgTL-a5siGzQqtEko6kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/5DCFD028F8CA8132FE6B9B221B342AB44928EA48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:b0:e4:b3:94:30:cd:22:d2:6f:37:25:9c:f4:a8:1a:3c:54:
         69:fb:67:2e:29:8c:2b:0a:c7:ef:2c:6c:cd:a6:60:9d:ff:00:
         33:7a:33:2e:8a:33:e2:aa:1c:fd:0d:89:ce:76:50:6f:ed:67:
         e6:52:3c:7d:d9:73:1e:89:ac:4a:0f:ba:c3:d5:6b:48:c2:f4:
         84:6a:56:ec:7e:a4:16:63:e9:aa:7f:1b:6a:c6:30:1f:33:cf:
         72:47:3f:7b:ad:55:f9:6f:1f:fe:0b:da:3a:ab:05:58:ae:e9:
         6d:31:5e:32:68:62:b5:0e:4c:43:44:b0:5f:94:5e:86:21:eb:
         d9:05:a2:08:ca:20:75:fd:a7:47:26:b0:9c:3f:d0:3f:b7:44:
         19:f4:bf:be:84:e9:6b:3e:85:57:5f:06:98:a0:97:16:03:bb:
         af:11:40:92:f2:a8:91:ae:a3:dc:36:cf:4b:b8:df:71:46:fe:
         b7:e5:90:7b:db:a9:4b:e6:6d:a8:f8:2f:ae:f7:ed:dd:fb:b9:
         06:b9:55:e0:d7:d8:77:e8:5b:ec:40:9f:fd:9f:4c:f6:c0:5a:
         fd:30:94:75:14:a0:6d:5f:4f:e9:87:da:3b:b4:cc:7d:20:c4:
         2b:75:d7:37:9a:f0:a6:56:bb:fb:3d:7a:4e:a4:9a:30:6c:02:
         a6:6c:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----