Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft
File:                     C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft (raw, json)
Hash identifier:          hNXCTNc73rQZDjILjw8aOwQpbYUUvmNa+RtdFJi7CNA=
Subject key identifier:   F2:DF:61:E6:28:44:7E:59:68:8C:D8:AC:8C:FE:B2:81:6B:9D:0C:7E
Authority key identifier: C1:8E:8D:54:0B:18:BA:52:F3:E8:F8:BB:D8:1E:3B:F7:0A:2B:CB:85
Certificate issuer:       /CN=c18e8d540b18ba52f3e8f8bbd81e3bf70a2bcb85
Certificate serial:       33B9CE88E6EFFD5FDDFC67AAB7714E5BDAF33C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wY6NVAsYulLz6Pi72B479wory4U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft
Manifest number:          38
Signing time:             Thu 05 Sep 2024 15:46:28 +0000
Manifest this update:     Thu 05 Sep 2024 15:41:28 +0000
Manifest next update:     Fri 06 Sep 2024 17:02:28 +0000
Files and hashes:         1: C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.crl (hash: iBZgjpqFKnmIzc0nLhJrcOq48zSzoyiNCKsiUWtGp7w=)
                          2: AS214757.asa (hash: OIIdlODCG/htLKtKDjwRkALm0ZrVhzYs2dsERhPpzvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b9:ce:88:e6:ef:fd:5f:dd:fc:67:aa:b7:71:4e:5b:da:f3:3c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18e8d540b18ba52f3e8f8bbd81e3bf70a2bcb85
        Validity
            Not Before: Sep  5 15:41:28 2024 GMT
            Not After : Sep  6 17:02:28 2024 GMT
        Subject: CN=F2DF61E628447E59688CD8AC8CFEB2816B9D0C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:f3:b0:ad:b3:34:1a:fc:41:c9:04:9e:44:
                    eb:48:52:39:7b:49:c6:20:eb:b5:a9:25:a6:da:10:
                    84:df:c9:8a:8b:37:68:90:76:76:78:3a:8c:c0:5c:
                    f4:16:5e:96:3d:1a:17:2b:e5:07:6f:1d:a7:ee:50:
                    05:81:4d:44:0c:6b:5d:c8:c7:9e:c2:84:8c:12:c3:
                    f0:df:ed:1b:7b:81:98:7f:f4:b5:4f:97:79:74:88:
                    1a:ba:b7:6e:f0:0b:11:22:1f:42:2e:25:4a:69:82:
                    35:3c:35:64:81:f1:7e:4a:04:26:58:12:c4:47:2d:
                    4f:04:84:31:91:57:c1:7e:56:10:f2:ed:18:ed:82:
                    20:b5:27:60:0e:7e:65:63:fa:84:70:b8:f7:41:52:
                    a0:bc:55:d9:03:06:67:fe:c0:dc:67:04:62:14:28:
                    e3:a1:77:5b:aa:dd:ca:36:08:2a:b0:18:67:a0:3f:
                    51:7d:bf:eb:08:c1:35:a8:5b:3d:e6:89:3e:af:38:
                    02:cd:dc:70:c2:94:dc:b0:fe:79:d0:ab:e9:07:35:
                    9d:90:7d:6d:d4:b4:a7:e6:97:2e:14:3f:e3:25:83:
                    41:1f:93:f1:e3:4b:24:dd:19:49:0f:c6:15:f5:90:
                    d5:75:ea:11:80:77:5a:c2:e0:91:71:c0:f0:4a:7a:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DF:61:E6:28:44:7E:59:68:8C:D8:AC:8C:FE:B2:81:6B:9D:0C:7E
            X509v3 Authority Key Identifier:
                keyid:C1:8E:8D:54:0B:18:BA:52:F3:E8:F8:BB:D8:1E:3B:F7:0A:2B:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY6NVAsYulLz6Pi72B479wory4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7d:89:0b:3f:81:33:f9:0f:7f:cc:13:69:5d:9b:4e:61:9d:
         57:6c:59:ef:37:2c:a8:0d:b6:18:51:4a:e4:91:02:c3:60:e2:
         10:19:d8:07:66:58:44:38:c5:94:55:63:a2:9b:bc:15:5c:ec:
         8d:ad:47:47:2d:ad:36:b0:a5:c6:97:88:9e:f5:e8:4d:55:50:
         7e:35:7d:7b:da:79:33:12:94:5d:81:87:3e:22:aa:eb:0b:a1:
         c7:a6:5c:7c:4b:4c:c5:e2:30:54:6c:78:fd:64:1f:d5:a6:56:
         8b:32:f2:54:a2:a1:76:ba:df:8e:24:52:4d:2e:ed:fc:64:e5:
         3f:0a:4d:43:2a:8a:5b:df:fe:de:65:6d:a7:33:c1:63:72:96:
         01:a8:af:8d:f4:a7:2a:a7:37:0e:d6:7b:fc:9e:07:b4:4f:6c:
         63:67:9f:18:62:28:37:00:12:fd:6e:4b:c9:82:2f:e4:f3:41:
         4f:44:76:e7:be:e2:2c:77:1a:1a:66:5c:8c:f2:84:29:2f:e5:
         8c:b6:14:c2:86:be:53:47:1a:5e:65:9a:58:03:95:62:f6:e9:
         96:13:e4:c7:de:11:2a:54:5e:cf:04:d2:45:d0:c2:62:57:50:
         fb:82:f6:65:5e:63:e0:33:e7:84:27:12:ce:2f:b5:97:93:87:
         ac:f8:e1:db
-----BEGIN CERTIFICATE-----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