Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b34be4af-2dce-4e47-a4d0-c814e799201e/0/5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7.mft
File:                     5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7.mft (raw, json)
Hash identifier:          ZE2jyWgc/HqM7+jFlL3WTQDTEgPBEY8HJukGgztmNcQ=
Subject key identifier:   4E:9F:99:3F:68:03:80:D6:DD:2D:11:AD:9C:0C:90:FD:26:DC:53:77
Authority key identifier: 5C:CA:D3:25:B9:8A:0D:AB:98:D2:D9:41:DF:5E:B7:43:3B:F6:AD:D7
Certificate issuer:       /CN=5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7
Certificate serial:       27270609F2A0DCFACEF04FF37126D6B0913C4FCF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b34be4af-2dce-4e47-a4d0-c814e799201e/0/5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7.mft
Manifest number:          01
Signing time:             Sun 03 Mar 2024 05:15:47 +0000
Manifest this update:     Sun 03 Mar 2024 05:10:47 +0000
Manifest next update:     Mon 04 Mar 2024 07:52:47 +0000
Files and hashes:         1: 5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7.crl (hash: 6U/ITg1rTnuwehmiJ2bOK5id8GXpYpfLIweuDiY3BJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:27:06:09:f2:a0:dc:fa:ce:f0:4f:f3:71:26:d6:b0:91:3c:4f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7
        Validity
            Not Before: Mar  3 05:10:47 2024 GMT
            Not After : Mar  4 07:52:47 2024 GMT
        Subject: CN=4E9F993F680380D6DD2D11AD9C0C90FD26DC5377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:4b:27:ca:e8:a0:91:31:64:37:b6:4a:3e:
                    67:6a:57:52:73:66:07:e2:17:f1:ad:79:ee:68:02:
                    12:8d:8e:47:d1:8e:24:29:8b:21:92:5a:de:b6:0a:
                    ac:27:04:b4:b3:ad:10:b8:54:7b:df:b2:15:a3:a1:
                    c3:11:99:0e:96:45:5e:01:49:a7:37:10:50:93:44:
                    c9:9f:15:04:a1:84:76:f9:27:f8:71:55:cc:36:69:
                    64:d3:a1:9d:22:ad:fd:97:13:78:5c:59:17:1f:4e:
                    2c:23:e2:3e:61:e6:1f:e1:6c:a9:cb:3c:be:ef:ad:
                    59:6d:c8:dc:36:e6:f7:1f:44:64:98:41:e4:d9:68:
                    55:62:a6:a9:11:0c:14:94:7d:5a:2d:1a:c4:e8:62:
                    cb:45:8d:2f:60:81:62:ae:b7:b4:a6:61:e6:85:38:
                    9a:af:43:5f:d9:44:04:85:ce:8f:28:ca:f8:26:64:
                    78:40:f8:43:05:92:a5:0f:36:3b:25:71:02:97:67:
                    4a:12:8f:80:73:dc:56:52:01:6d:00:76:b9:b1:0e:
                    13:02:2d:86:ac:87:8b:31:79:cc:54:1e:94:b4:7c:
                    76:49:24:2a:55:18:92:63:03:b7:73:c5:ba:5c:a1:
                    96:b9:55:5a:91:9a:63:f1:eb:28:4b:ab:c7:32:4c:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9F:99:3F:68:03:80:D6:DD:2D:11:AD:9C:0C:90:FD:26:DC:53:77
            X509v3 Authority Key Identifier:
                keyid:5C:CA:D3:25:B9:8A:0D:AB:98:D2:D9:41:DF:5E:B7:43:3B:F6:AD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b34be4af-2dce-4e47-a4d0-c814e799201e/0/5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b34be4af-2dce-4e47-a4d0-c814e799201e/0/5CCAD325B98A0DAB98D2D941DF5EB7433BF6ADD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:26:30:91:ff:bb:3d:14:9d:a4:99:ed:2c:a8:4a:53:b3:a9:
         47:7b:b6:c5:60:a5:bb:03:6a:b4:d8:b3:bf:a8:12:15:63:fa:
         b5:e0:18:14:68:9d:4d:f8:82:bd:6e:1b:36:1e:63:64:fd:5d:
         7b:1e:97:79:3f:82:4c:23:81:21:a0:9b:02:43:a2:8f:d1:6a:
         c2:1a:3c:14:a6:f3:a1:4a:d1:54:79:4b:b5:d7:f5:9b:ad:53:
         b4:2c:38:73:5b:d5:1b:ea:b7:de:2c:88:4e:7c:a9:51:08:70:
         8a:76:c2:ae:98:9a:13:9b:3f:a1:54:e0:b4:c3:37:48:89:2c:
         e5:05:fc:59:9c:67:ec:b5:df:ba:d1:ff:7c:68:bd:e1:14:1a:
         ee:67:92:7b:12:d0:60:09:47:58:31:b9:36:a7:61:24:1d:1c:
         76:1e:ee:58:61:51:08:51:b3:0b:62:c0:98:65:e5:cb:ac:aa:
         bd:18:b9:68:c8:bd:87:a7:f6:2b:0b:f4:4d:54:99:5e:77:31:
         95:c6:27:08:9a:88:f5:d2:ec:d8:40:cd:ec:fb:dc:dd:cc:9a:
         e7:b0:5a:f0:28:58:f3:da:68:8a:e1:e7:da:34:61:24:9a:24:
         bf:63:30:0c:b9:84:57:38:9a:07:00:d9:1f:70:f2:51:d7:95:
         ff:ec:d7:56
-----BEGIN CERTIFICATE-----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