Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/0/E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.mft
File:                     E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.mft (raw, json)
Hash identifier:          ourDHvpb445eEwqSdLFRTWGAoZnvD1UXyeQNn0BQZ+k=
Subject key identifier:   DC:3F:25:5B:FA:92:60:0E:C3:0D:EE:46:E9:93:30:C7:DC:50:52:DE
Authority key identifier: E8:5B:6D:CC:AF:B9:E5:58:31:24:7A:CE:77:E8:B7:A4:3E:60:46:B0
Certificate issuer:       /CN=e8238ea0d52c65298c79e62da18532405bea7039d2ab108ffe
Certificate serial:       61ADF9926741777187727218F644A8680F1D6424
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d52c65298c79e62da18532405bea7039d2ab108ffe.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/0/E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.mft
Manifest number:          BC
Signing time:             Fri 26 Jul 2024 09:04:33 +0000
Manifest this update:     Fri 26 Jul 2024 08:59:33 +0000
Manifest next update:     Sat 27 Jul 2024 09:42:33 +0000
Files and hashes:         1: E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.crl (hash: 1ncpDL9TjbGEkZFm30Trokp1qvy9KJubj4TBA3ZUA6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ad:f9:92:67:41:77:71:87:72:72:18:f6:44:a8:68:0f:1d:64:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d52c65298c79e62da18532405bea7039d2ab108ffe
        Validity
            Not Before: Jul 26 08:59:33 2024 GMT
            Not After : Jul 27 09:42:33 2024 GMT
        Subject: CN=DC3F255BFA92600EC30DEE46E99330C7DC5052DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:14:7c:44:29:22:f5:f5:87:3e:36:d5:10:
                    45:e1:42:ce:bf:a3:b3:ea:2f:e4:ea:66:11:38:b0:
                    93:68:f0:bd:c3:cd:7e:cd:58:61:0b:f2:78:3a:8d:
                    9f:04:99:b4:26:d9:31:41:d7:92:bc:11:85:54:26:
                    0b:a7:d1:b0:da:55:30:58:92:6d:fd:93:e1:dd:4a:
                    17:c0:e1:b2:a7:bd:9f:9b:2b:e2:c2:4c:81:3d:fd:
                    b6:dc:ae:d3:37:40:d6:e2:bc:42:87:f5:40:2f:5e:
                    64:fd:58:02:ee:3c:67:03:4d:68:ac:82:dd:46:ef:
                    3f:53:4f:4f:f2:d8:e5:de:53:3f:48:ce:d0:74:4e:
                    98:e1:f5:0b:1d:11:d9:de:8e:f8:aa:ae:3f:f3:89:
                    40:d5:04:b9:b3:be:aa:6b:57:e6:70:a5:54:e7:9d:
                    2b:68:ed:3e:95:85:91:1f:62:4b:54:4e:4e:24:3a:
                    a9:bb:c0:a9:fa:67:1c:55:f1:0d:fb:29:47:42:25:
                    46:f6:58:9f:66:ec:06:62:d3:c4:1e:de:e1:6f:45:
                    9a:7b:3f:d8:27:4c:db:a7:31:53:91:73:b0:9f:51:
                    62:34:f5:2b:e9:7e:56:65:6d:e8:0b:39:03:e6:0b:
                    47:36:11:ca:17:ef:9a:71:f1:f5:f0:2f:5e:cb:75:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3F:25:5B:FA:92:60:0E:C3:0D:EE:46:E9:93:30:C7:DC:50:52:DE
            X509v3 Authority Key Identifier:
                keyid:E8:5B:6D:CC:AF:B9:E5:58:31:24:7A:CE:77:E8:B7:A4:3E:60:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/0/E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d52c65298c79e62da18532405bea7039d2ab108ffe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/0/E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:83:c8:5a:75:91:fd:0f:d7:81:c1:0c:20:2b:58:5f:69:
         31:fc:ab:7c:0f:ed:0b:2e:bd:44:5c:25:86:20:4f:66:bc:f0:
         76:70:df:4e:5e:6d:b1:ad:f8:f8:aa:c9:3f:5a:8e:67:6d:ce:
         a8:4b:c5:7b:91:ee:1a:fe:c8:50:85:14:6e:8c:70:84:6f:2f:
         a1:47:fc:a9:4c:d2:30:7c:8f:52:2d:9c:11:98:c6:05:35:96:
         49:7f:11:ac:34:2c:97:22:7d:ee:48:6b:97:02:6b:e5:6b:c3:
         be:5f:d4:12:f2:01:42:13:18:ee:f3:89:23:8d:fd:42:0b:28:
         bc:67:7f:84:ce:a3:02:1e:80:25:27:55:0f:92:bb:6f:50:73:
         ea:33:d9:ed:95:cf:22:68:a5:af:6a:fc:3e:20:88:a2:1a:88:
         18:d7:3f:72:bd:91:15:46:1c:03:24:77:e6:45:ad:e3:13:b7:
         71:c8:25:da:b7:8f:48:18:20:0f:0c:98:27:78:8b:05:db:94:
         ae:25:63:c3:87:72:59:a4:9b:9c:ef:d2:74:63:51:91:d9:08:
         33:0e:e4:73:a0:2f:18:80:57:b2:69:ac:5e:fb:93:25:d0:26:
         f8:e3:b9:78:7d:87:fa:32:76:a5:10:64:ae:b0:20:a4:be:5c:
         51:0e:d0:38
-----BEGIN CERTIFICATE-----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