Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
File:                     AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft (raw, json)
Hash identifier:          hQ6enjpHiZ6r6iZ+QmQLc6zOJ6AeY5DoDA0tp8ll/GU=
Subject key identifier:   6F:BC:D1:91:98:AD:3D:E9:E5:EB:6B:0E:39:94:0B:F7:3C:86:D1:19
Authority key identifier: AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01
Certificate issuer:       /CN=aedc298d252d5647dd0d0c9e3335517df6f49801
Certificate serial:       592CAF45B9AA956E4CFD52FC987BC462C77E0346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
Manifest number:          0AD5
Signing time:             Thu 19 Dec 2024 16:04:27 +0000
Manifest this update:     Thu 19 Dec 2024 15:59:27 +0000
Manifest next update:     Fri 20 Dec 2024 19:46:27 +0000
Files and hashes:         1: AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl (hash: hQ+CequnxSJOpWwZue5qsvhv0BRCvn20cOl6jxECPzU=)
                          2: 33312e32342e38352e302f32342d3234203d3e20323035363539.roa (hash: VMXyT3RWSUasYdwhisrKxteHuM6tNfJ75ub8wAAY4QI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2c:af:45:b9:aa:95:6e:4c:fd:52:fc:98:7b:c4:62:c7:7e:03:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc298d252d5647dd0d0c9e3335517df6f49801
        Validity
            Not Before: Dec 19 15:59:27 2024 GMT
            Not After : Dec 20 19:46:27 2024 GMT
        Subject: CN=6FBCD19198AD3DE9E5EB6B0E39940BF73C86D119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:06:90:1e:d7:9b:65:5c:1b:7c:0b:4e:24:
                    cc:1d:b1:92:23:d2:dd:51:70:da:02:5f:47:4d:33:
                    94:5a:00:3c:a3:23:7c:72:84:ae:dd:51:45:e6:13:
                    38:d4:7e:38:08:c5:c4:c9:1a:6a:21:48:ba:b3:dc:
                    64:d9:85:c6:b1:94:dc:6b:79:39:8f:29:d3:08:f9:
                    bb:88:f9:ed:65:7d:7a:44:b9:e0:99:63:a6:c2:eb:
                    4d:51:9c:f8:f0:09:2c:5f:44:ec:fe:00:91:e9:5f:
                    8a:f4:34:5f:2c:c0:e3:4d:c8:ee:b1:24:99:f6:42:
                    45:7e:2c:60:19:85:59:c1:2a:0e:14:f4:9b:c4:77:
                    71:36:c5:ff:5a:6b:60:a7:dc:fb:80:0e:4b:de:a1:
                    a9:95:ff:17:d8:9f:37:c5:f6:9a:3d:38:ea:5b:27:
                    5b:ae:78:3e:f1:79:28:58:1c:f8:b3:8b:76:aa:98:
                    ef:32:08:6a:5f:e6:b3:4a:7f:67:55:df:46:fc:79:
                    1a:ef:f8:9e:e2:a5:e4:84:14:27:0a:ae:51:83:3b:
                    e9:cc:96:01:39:02:75:dd:41:d3:13:4d:d2:1d:b3:
                    a7:17:67:f1:9b:56:ad:dc:a2:16:3a:de:a1:98:de:
                    4b:32:8b:c1:a0:ed:8f:6f:07:0d:7d:b4:de:a6:21:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:D1:91:98:AD:3D:E9:E5:EB:6B:0E:39:94:0B:F7:3C:86:D1:19
            X509v3 Authority Key Identifier:
                keyid:AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:95:d9:13:37:58:72:fb:2f:f2:05:e4:57:b9:d3:c7:76:3d:
         26:60:73:31:e6:a0:1a:e2:de:5b:97:d7:f8:9e:4f:13:b7:93:
         eb:95:e4:99:40:5b:bb:d5:90:c0:bf:0b:cc:27:1e:21:7f:a5:
         c9:65:f0:88:c6:9b:5f:0f:4b:99:af:26:6b:0e:0b:78:53:dc:
         b5:4a:19:b3:e6:18:0f:ef:02:ba:ea:a2:9c:08:b4:0b:e5:a1:
         ac:4f:40:e1:9a:dc:1b:3b:18:80:b3:1d:12:ee:b4:6e:d4:20:
         cb:ba:66:35:ac:f9:84:ca:cf:39:c7:4b:64:bc:38:5b:6a:9b:
         93:d7:2b:37:91:e6:44:5f:2f:c6:9e:c9:44:e2:6a:45:12:05:
         cb:e4:99:86:23:c7:a7:bc:4b:fa:6e:5c:71:2d:e4:27:c8:ef:
         8b:80:38:41:43:a3:78:bc:8b:69:05:86:c6:7b:9e:0d:a2:13:
         df:34:27:3e:f9:27:80:21:5d:4b:ee:1d:81:75:26:32:c7:33:
         a0:52:6a:9c:1b:87:dc:1a:be:3c:ec:ca:48:c0:84:6d:22:18:
         51:35:0b:3a:2f:4e:07:26:d3:39:87:7e:50:15:cc:1a:8d:91:
         b9:62:9d:4e:e6:6e:a0:f6:92:b1:8c:cb:ed:10:89:79:72:5d:
         29:02:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----