Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/2/75211254596E3697AF8DDC3C6AC24C08389E0F69.mft
File:                     75211254596E3697AF8DDC3C6AC24C08389E0F69.mft (raw, json)
Hash identifier:          MCul33VKrXK+vXInoCs7h4RoYREfltq/AtUGRA+iNfM=
Subject key identifier:   AF:36:B8:EA:77:02:3A:B9:CF:BF:C2:F8:E2:D1:9E:7F:36:C9:1D:EA
Authority key identifier: 75:21:12:54:59:6E:36:97:AF:8D:DC:3C:6A:C2:4C:08:38:9E:0F:69
Certificate issuer:       /CN=75211254596E3697AF8DDC3C6AC24C08389E0F69
Certificate serial:       5A80252545FD46E969C5F23184DA9D42DBD52917
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/75211254596E3697AF8DDC3C6AC24C08389E0F69.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/2/75211254596E3697AF8DDC3C6AC24C08389E0F69.mft
Manifest number:          05
Signing time:             Sat 22 Apr 2023 02:34:51 +0000
Manifest this update:     Sat 22 Apr 2023 02:29:51 +0000
Manifest next update:     Sun 23 Apr 2023 05:00:51 +0000
Files and hashes:         1: 75211254596E3697AF8DDC3C6AC24C08389E0F69.crl (hash: NkJ1M7bY7AD2C5U1yYNxfg5vyU8rwjODgpSsFyts1vk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:80:25:25:45:fd:46:e9:69:c5:f2:31:84:da:9d:42:db:d5:29:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75211254596E3697AF8DDC3C6AC24C08389E0F69
        Validity
            Not Before: Apr 22 02:29:51 2023 GMT
            Not After : Apr 23 05:00:51 2023 GMT
        Subject: CN=AF36B8EA77023AB9CFBFC2F8E2D19E7F36C91DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:d5:15:be:e1:95:88:88:2e:76:78:ae:4b:
                    73:35:b0:2e:4a:83:b5:30:e0:f1:88:01:09:39:3a:
                    3b:9b:c3:dd:cf:43:1f:c5:12:a6:81:44:26:83:4f:
                    49:0b:de:8b:e9:bd:d1:c9:b0:7b:a9:5b:db:b0:01:
                    53:76:e6:b5:d4:8b:62:82:dd:c2:e8:ec:95:7e:3f:
                    c3:72:69:9e:ed:b8:02:53:e7:ea:a4:3a:23:d7:fd:
                    aa:24:7c:d8:9f:0f:fc:a2:8b:ab:7a:25:15:8d:39:
                    52:2e:09:50:cb:e4:e3:c6:65:7c:3a:5c:04:1d:b6:
                    b9:e7:06:12:c2:f0:a3:3a:30:24:ed:f4:00:79:b3:
                    4a:61:f7:67:59:7f:c2:6e:c3:9a:37:4e:4a:cc:6a:
                    9c:0f:9f:f1:ab:9c:9d:88:f1:88:c7:36:31:9b:08:
                    d0:98:0e:78:5f:c7:00:d3:96:d7:3d:28:78:e3:90:
                    c8:e2:2d:50:36:ee:c3:ae:d3:09:99:e6:92:f6:81:
                    47:b0:f1:ec:7b:18:af:c3:cd:ff:0d:b9:50:23:94:
                    2b:e4:eb:24:cb:d5:cd:75:09:5e:eb:d3:13:24:16:
                    c3:2c:fb:f5:67:b4:e4:a0:f7:f0:18:c8:fd:47:f0:
                    5a:ff:34:58:73:a9:76:5f:2f:72:ba:3a:0d:8e:e6:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:B8:EA:77:02:3A:B9:CF:BF:C2:F8:E2:D1:9E:7F:36:C9:1D:EA
            X509v3 Authority Key Identifier:
                keyid:75:21:12:54:59:6E:36:97:AF:8D:DC:3C:6A:C2:4C:08:38:9E:0F:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/2/75211254596E3697AF8DDC3C6AC24C08389E0F69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/75211254596E3697AF8DDC3C6AC24C08389E0F69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/2/75211254596E3697AF8DDC3C6AC24C08389E0F69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ab:1d:94:43:fa:9b:33:24:9c:66:36:6b:38:29:68:a0:50:
         7e:f9:06:96:7d:35:b9:e0:b4:f7:6a:1f:76:34:39:62:c0:1a:
         56:16:33:01:46:a8:d2:02:58:c7:d1:4a:0f:61:d6:2c:6f:0d:
         30:9b:1d:cd:cf:17:1c:68:70:47:fb:3c:52:01:07:b5:1b:6b:
         91:3c:15:35:7d:f5:20:28:10:ef:ea:4e:8a:f2:49:e2:bb:26:
         e6:e5:5f:ed:a6:cc:a6:f9:c0:27:5c:ae:20:67:b0:4e:09:6d:
         9e:a4:c5:48:38:e8:6e:e5:95:24:b0:89:03:8b:02:8a:58:4a:
         27:43:a0:15:ba:af:5f:d0:70:52:01:25:62:6f:8f:0c:85:19:
         17:11:7d:5f:3a:e8:f3:7d:1a:3c:af:3b:8e:be:ae:2b:47:9d:
         b4:bf:96:70:dd:3f:96:11:54:58:b9:e9:26:7d:ea:e6:f8:60:
         30:04:f3:68:ae:80:1c:3e:d4:b6:16:31:cb:41:e8:d7:ff:ee:
         61:be:8c:93:93:cd:29:e2:76:df:c0:03:d4:de:ae:ee:03:43:
         d6:80:46:ae:36:ec:18:88:6d:2d:bf:45:a1:59:be:94:56:97:
         84:33:b9:be:b0:27:85:89:6e:24:3c:f9:57:d2:f0:73:37:c9:
         f8:2d:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----