Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft
File:                     9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft (raw, json)
Hash identifier:          udWG5W79lRJoas3jHi8dTIJM9Hrkwciqhwh2m2A7ITA=
Subject key identifier:   12:02:82:B0:EF:14:96:D3:BA:C0:96:68:E2:47:7B:45:BC:A6:C4:1F
Authority key identifier: 97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53
Certificate issuer:       /CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53
Certificate serial:       6DC3E23BF3BA90272CB175A09B306B7BAE2ABF9E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft
Manifest number:          7B
Signing time:             Thu 19 Dec 2024 20:34:27 +0000
Manifest this update:     Thu 19 Dec 2024 20:29:27 +0000
Manifest next update:     Fri 20 Dec 2024 22:20:27 +0000
Files and hashes:         1: 9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl (hash: xsmix00VKqccXWk9diqbzEon56xid3pTUp7rKYWkntw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c3:e2:3b:f3:ba:90:27:2c:b1:75:a0:9b:30:6b:7b:ae:2a:bf:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53
        Validity
            Not Before: Dec 19 20:29:27 2024 GMT
            Not After : Dec 20 22:20:27 2024 GMT
        Subject: CN=120282B0EF1496D3BAC09668E2477B45BCA6C41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:3e:25:ea:e9:39:9e:55:7a:04:f7:9a:fb:
                    ba:2a:cf:f9:e7:e0:d8:82:88:91:4e:da:ff:01:b6:
                    b5:53:ab:55:4d:a7:df:a0:5a:83:d9:dd:f5:17:b5:
                    ca:77:e1:bf:d3:31:b5:4b:62:a6:aa:32:6c:70:bf:
                    f6:a2:53:97:70:ea:38:d0:fb:0f:8b:f7:c5:cd:7a:
                    fc:8c:9a:b2:85:f7:54:58:62:22:70:6e:ea:ba:94:
                    12:69:72:a5:fb:4d:17:fa:74:f7:ed:f6:5f:43:cd:
                    fc:e9:ff:11:8b:4d:a5:00:21:18:fe:71:3d:47:eb:
                    bd:56:b7:17:19:58:74:2b:2f:87:92:5e:af:8f:75:
                    85:b6:76:09:33:61:97:a5:02:09:df:da:c5:1d:aa:
                    4d:fd:8d:7a:66:e0:38:fa:43:62:c6:1e:be:5c:3f:
                    2b:64:4c:79:6d:30:6e:f2:ad:d7:7a:87:c6:fc:52:
                    48:d8:7b:58:ce:77:7d:e1:f4:43:b1:04:2a:04:16:
                    92:ea:e3:b4:6d:81:80:8c:a8:9f:3c:17:fd:e5:d9:
                    ab:ea:c8:e6:3d:f1:28:30:6d:25:69:5e:11:3d:5c:
                    f4:9a:32:45:82:1f:d1:ab:51:b3:ca:f6:6c:5d:dd:
                    3e:58:9d:83:34:1c:be:b5:52:c6:20:f4:14:5f:9f:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:02:82:B0:EF:14:96:D3:BA:C0:96:68:E2:47:7B:45:BC:A6:C4:1F
            X509v3 Authority Key Identifier:
                keyid:97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:95:52:05:6e:71:33:79:6b:0a:e2:c6:51:e6:d7:2e:f8:ec:
         d2:9a:51:af:e8:55:44:c7:1f:88:06:d3:31:34:bf:a1:88:89:
         53:98:fd:2a:e1:12:c1:86:b8:93:34:6c:21:18:ed:9b:44:3f:
         1d:de:c8:b8:de:56:be:37:bf:a0:6e:23:91:56:57:8e:03:35:
         cf:e8:f4:c9:9c:4e:98:43:0a:61:0b:8b:f2:8a:d3:58:73:36:
         97:92:2d:b3:86:d8:d2:4e:6b:78:ab:a6:7c:94:c4:95:dd:da:
         ea:1b:8a:af:b5:59:52:12:d7:10:d3:7e:7e:66:37:4a:40:da:
         80:ef:70:e9:cb:38:a4:d3:17:ac:71:6d:ce:71:c3:04:bc:1e:
         ea:4a:45:94:08:fe:b5:64:6e:b3:65:99:5c:d4:37:72:96:71:
         ca:c0:22:50:37:58:2e:46:07:2e:af:4e:7d:3f:0e:29:61:35:
         9c:f1:14:bb:56:d1:6c:d2:72:d0:00:08:5c:7d:2f:2a:d0:2f:
         2a:27:f8:fc:72:54:5c:ca:53:a8:b5:40:61:56:f5:62:3e:3e:
         05:98:20:25:a8:9e:4d:c3:cf:1c:08:f3:cd:c0:1b:5a:82:ec:
         66:60:5b:36:c1:6c:57:0d:c1:ee:c5:c1:a2:da:b1:7d:a0:76:
         92:af:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----