Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.mft
File:                     44EFF2E1E084352DB3CDCD751770946505E3E37B.mft (raw, json)
Hash identifier:          k7CEwPm406bWHV5uxIH2zjKawxQYT978iL+DYdY3Tls=
Subject key identifier:   2B:EC:C5:10:97:AE:99:79:DC:65:4D:51:0B:CE:93:28:FC:00:66:25
Authority key identifier: 44:EF:F2:E1:E0:84:35:2D:B3:CD:CD:75:17:70:94:65:05:E3:E3:7B
Certificate issuer:       /CN=44eff2e1e084352db3cdcd751770946505e3e37b
Certificate serial:       61609BF5A87509FD74B0AFB999ECB51C82ADD447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RO_y4eCENS2zzc11F3CUZQXj43s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.mft
Manifest number:          0527
Signing time:             Wed 20 Dec 2023 19:18:41 +0000
Manifest this update:     Wed 20 Dec 2023 19:13:41 +0000
Manifest next update:     Thu 21 Dec 2023 22:49:41 +0000
Files and hashes:         1: 44EFF2E1E084352DB3CDCD751770946505E3E37B.crl (hash: U9gvCfd7ROuYGvBfJY371itoXKJMBAQGC822BcFY+II=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:60:9b:f5:a8:75:09:fd:74:b0:af:b9:99:ec:b5:1c:82:ad:d4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44eff2e1e084352db3cdcd751770946505e3e37b
        Validity
            Not Before: Dec 20 19:13:41 2023 GMT
            Not After : Dec 21 22:49:41 2023 GMT
        Subject: CN=2BECC51097AE9979DC654D510BCE9328FC006625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:ae:f7:fe:77:50:95:43:4e:03:49:65:6d:
                    0c:89:66:82:c3:20:cf:81:cd:9e:a9:76:07:98:3d:
                    26:9f:d9:b8:e1:a2:57:4b:de:ec:ea:9a:ac:64:14:
                    8f:e7:f2:2f:83:44:5b:1a:b7:29:87:44:55:de:51:
                    0d:f3:72:39:04:e8:e3:c3:e5:77:46:22:e9:cd:cd:
                    48:6a:96:9e:db:e1:dc:fc:10:d0:9d:58:3d:cd:8e:
                    52:fc:57:d2:5d:9b:e9:c7:fa:98:4c:3b:ea:23:32:
                    88:9f:5e:14:93:b2:15:ec:f3:5e:cc:7b:fb:b4:18:
                    1c:e6:d4:b1:f5:be:7f:5f:b1:09:36:15:e6:60:a2:
                    dc:2c:82:a7:b3:1c:8a:63:7f:5c:3f:19:ea:88:dd:
                    47:64:fe:99:1a:0d:62:50:c5:43:cb:7d:a6:6b:38:
                    44:bc:c0:f5:53:31:16:f0:2a:a2:16:a1:d1:6c:d7:
                    60:0e:e0:b9:ff:18:a0:2b:94:44:16:68:db:6f:bd:
                    2c:f0:96:82:93:26:16:06:e6:1b:7a:ce:ac:73:8c:
                    a6:cd:1d:9c:13:c5:03:2b:c1:e3:51:e0:4c:a6:e9:
                    d7:f4:4f:38:c0:2c:f3:15:d5:9c:a3:9e:b2:dd:58:
                    0e:ed:0a:f1:ba:4c:ee:c2:03:c1:e0:c7:33:31:15:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EC:C5:10:97:AE:99:79:DC:65:4D:51:0B:CE:93:28:FC:00:66:25
            X509v3 Authority Key Identifier:
                keyid:44:EF:F2:E1:E0:84:35:2D:B3:CD:CD:75:17:70:94:65:05:E3:E3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO_y4eCENS2zzc11F3CUZQXj43s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:b7:44:c8:a7:60:82:c3:6a:52:8f:f9:a4:86:8d:83:d1:
         6f:b1:b7:21:86:20:d7:38:f0:fd:0c:09:d5:09:3a:df:72:4e:
         d2:9b:0b:16:1a:ca:da:ac:3f:a4:f8:b8:cf:f5:57:a0:ca:31:
         75:33:12:e0:3a:31:e1:f5:82:44:61:9a:73:cf:ca:5b:ff:e9:
         b6:ed:ed:fe:27:02:95:16:e5:90:fe:f0:e2:1d:fc:52:23:96:
         90:83:a4:c3:f2:4e:f2:ab:06:e9:0e:f7:33:e7:6f:f6:01:2e:
         b7:91:ef:67:50:d7:f2:dd:ba:45:68:64:0c:59:c8:f9:5c:89:
         87:2c:19:60:ad:05:71:da:eb:7c:b0:c4:1f:62:1d:28:8d:1d:
         7e:52:36:10:96:56:ec:74:9e:a7:87:b2:d8:3d:ea:63:55:d0:
         7c:71:81:36:58:ed:fe:6e:48:f8:dd:b0:da:bf:6a:ed:72:c9:
         fa:60:12:b2:61:8b:da:d0:cb:fa:fd:a2:cd:69:2d:27:d1:3d:
         66:36:12:e2:ce:29:9d:f9:ff:11:07:a9:a7:21:30:7d:e9:0b:
         b7:91:92:c2:65:e6:1b:3f:4e:2b:b8:3f:36:63:48:63:fa:7e:
         aa:a8:42:c0:d8:80:63:e8:30:64:49:98:6f:99:83:f6:71:4d:
         58:a5:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----