Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/1/E524D22662D34F9ADC3246B33ED587443B8CFD2E.mft
File:                     E524D22662D34F9ADC3246B33ED587443B8CFD2E.mft (raw, json)
Hash identifier:          XjW9aGVghfrm8zP0fV0bYolqT0RVw3oQMlVV4visQyM=
Subject key identifier:   AF:C3:90:2C:BF:2C:14:98:75:85:B5:94:CA:A4:D1:BC:27:DF:EC:28
Authority key identifier: E5:24:D2:26:62:D3:4F:9A:DC:32:46:B3:3E:D5:87:44:3B:8C:FD:2E
Certificate issuer:       /CN=E524D22662D34F9ADC3246B33ED587443B8CFD2E
Certificate serial:       381A1B7BAE063BE5B44EE8E753497569AE27ADFC
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/E524D22662D34F9ADC3246B33ED587443B8CFD2E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/1/E524D22662D34F9ADC3246B33ED587443B8CFD2E.mft
Manifest number:          0D
Signing time:             Mon 18 Sep 2023 13:42:04 +0000
Manifest this update:     Mon 18 Sep 2023 13:37:04 +0000
Manifest next update:     Tue 19 Sep 2023 14:29:04 +0000
Files and hashes:         1: E524D22662D34F9ADC3246B33ED587443B8CFD2E.crl (hash: bVmTpeQsvw5wQhr1x6J0lx0AHSGC+MXWy7u9/9SjVIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1a:1b:7b:ae:06:3b:e5:b4:4e:e8:e7:53:49:75:69:ae:27:ad:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E524D22662D34F9ADC3246B33ED587443B8CFD2E
        Validity
            Not Before: Sep 18 13:37:04 2023 GMT
            Not After : Sep 19 14:29:04 2023 GMT
        Subject: CN=AFC3902CBF2C14987585B594CAA4D1BC27DFEC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:11:e9:0e:67:83:8a:a9:f9:50:35:9e:05:
                    ba:44:e2:80:55:d5:75:8a:8f:c2:97:39:29:02:2e:
                    66:16:e6:48:a5:7b:fe:a6:83:9e:84:48:fb:1b:88:
                    b6:7f:24:3a:88:d6:a6:1c:5b:76:ff:ae:d9:8a:12:
                    3b:e2:ed:09:08:d7:40:3d:0e:c7:71:73:b8:9d:d0:
                    ae:1e:a6:68:38:63:58:33:a5:ef:56:72:c6:0b:99:
                    de:9b:14:08:16:b9:c4:fb:3d:a0:40:9f:50:4e:e1:
                    24:44:c4:b7:3a:f5:75:90:3d:7d:64:ce:1f:8f:12:
                    d2:6f:b4:e6:ff:98:e6:fa:89:44:34:7b:45:00:63:
                    d6:82:ea:64:f1:c7:93:a9:14:61:3e:9d:00:d0:67:
                    29:82:f6:6c:b6:4d:7d:90:b7:af:ba:5d:a1:1d:0e:
                    ec:d2:c5:c7:16:e3:12:3b:41:12:19:e1:b3:e4:c6:
                    c4:ef:af:e0:b2:f0:3a:11:99:a9:09:8d:99:18:3e:
                    b8:86:e0:24:4f:fb:64:3f:14:ae:b4:2e:df:8f:df:
                    16:db:9b:2a:2e:b5:52:f5:13:73:41:b8:b9:da:d3:
                    6f:19:a0:1b:ab:1a:32:08:71:05:83:20:8e:8a:35:
                    50:47:56:e0:67:9e:be:20:b3:7a:29:0b:c4:e1:8a:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:90:2C:BF:2C:14:98:75:85:B5:94:CA:A4:D1:BC:27:DF:EC:28
            X509v3 Authority Key Identifier:
                keyid:E5:24:D2:26:62:D3:4F:9A:DC:32:46:B3:3E:D5:87:44:3B:8C:FD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/1/E524D22662D34F9ADC3246B33ED587443B8CFD2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/E524D22662D34F9ADC3246B33ED587443B8CFD2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/1/E524D22662D34F9ADC3246B33ED587443B8CFD2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:d0:2e:fd:2c:50:1d:19:f0:ca:4b:87:2c:c8:e7:d7:e8:
         08:55:b1:ea:a4:df:91:53:5d:3b:8b:a1:43:c9:7b:10:b1:6d:
         8a:bd:0f:19:60:a1:32:04:dd:a2:4b:59:18:6d:92:0a:54:ae:
         ff:bb:d6:86:5f:69:b5:0c:cb:2b:02:08:40:16:b3:91:89:e6:
         c7:97:0b:a0:5f:a7:3d:6d:d8:ec:6b:fd:d9:2b:f3:13:32:6a:
         1c:32:c2:41:86:e2:6a:3a:78:f9:2f:5f:2f:56:b9:27:ba:68:
         14:30:1c:76:43:2a:d7:01:ef:0d:8d:87:66:ef:99:9b:ef:1f:
         eb:1c:2b:09:fb:92:1f:d4:39:8f:7e:89:22:6c:fc:1c:96:c5:
         8f:20:79:98:8f:f6:82:b7:4a:fe:7b:f0:d7:45:44:d8:59:a0:
         5e:4b:d1:6e:a4:39:2f:fa:85:f6:f9:53:28:63:9c:33:9a:ee:
         7c:49:29:4c:57:71:1b:c0:48:16:3a:f6:a7:68:af:d7:7b:c7:
         21:b6:94:9f:1d:49:23:a5:19:ed:97:55:34:7a:c6:ea:0b:a4:
         a6:e2:f2:2f:98:b3:ee:bf:1e:e7:0d:91:b9:04:1d:78:79:aa:
         9e:00:a6:f4:a2:37:53:31:20:1c:fe:2f:bf:31:b1:70:b8:58:
         6c:4f:7a:2c
-----BEGIN CERTIFICATE-----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