Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft
File:                     D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft (raw, json)
Hash identifier:          CdEppoAvVczZzDnttOU6zxuG0nQoCgEW/4rAjJBU3Eo=
Subject key identifier:   DD:C5:B5:59:5B:E2:92:C8:29:6F:D5:07:47:50:33:94:D3:18:C0:C8
Authority key identifier: D3:A0:F8:80:74:54:20:FB:2B:86:A2:D1:C1:98:84:9D:8B:7C:67:6C
Certificate issuer:       /CN=D3A0F880745420FB2B86A2D1C198849D8B7C676C
Certificate serial:       4646FB033DFE7522FD3C806E17C946FD3D495240
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft
Manifest number:          23
Signing time:             Thu 25 Apr 2024 14:55:42 +0000
Manifest this update:     Thu 25 Apr 2024 14:50:42 +0000
Manifest next update:     Fri 26 Apr 2024 16:49:42 +0000
Files and hashes:         1: D3A0F880745420FB2B86A2D1C198849D8B7C676C.crl (hash: xiILoraoHUMWeOpfQ/D0QtMHgZd0M+wKniwOW9lIdX0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:46:fb:03:3d:fe:75:22:fd:3c:80:6e:17:c9:46:fd:3d:49:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3A0F880745420FB2B86A2D1C198849D8B7C676C
        Validity
            Not Before: Apr 25 14:50:42 2024 GMT
            Not After : Apr 26 16:49:42 2024 GMT
        Subject: CN=DDC5B5595BE292C8296FD50747503394D318C0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:06:dd:0a:a5:5c:bc:a2:41:8c:88:cb:cf:
                    58:7a:d9:1f:bb:4a:e7:e9:da:ea:cf:d4:c1:ef:44:
                    52:b9:72:02:c9:05:98:70:87:44:2a:ec:b3:94:39:
                    df:f7:d1:76:42:e5:a3:3b:81:7c:b1:7f:7e:a8:26:
                    8b:ef:09:9c:57:e0:80:c8:0e:be:d0:20:d5:25:81:
                    d5:af:19:12:dd:c7:37:24:ad:2a:3e:81:53:28:a8:
                    3d:69:53:b0:a1:42:0a:4f:28:41:28:6e:0b:f0:67:
                    23:9b:c5:ee:79:ed:db:ce:34:4d:f4:6e:2e:46:be:
                    2d:f7:eb:88:8c:ad:b4:10:ba:d7:4c:02:07:4e:54:
                    03:da:81:c1:25:d6:1d:ab:92:0c:3a:97:22:eb:e7:
                    d1:42:57:90:4e:57:33:7f:07:b4:7d:b9:0b:68:e6:
                    1a:6f:0c:14:76:4b:7a:d9:12:dd:87:ec:b6:30:93:
                    2c:85:41:59:08:7a:c7:39:57:93:a7:58:35:30:25:
                    25:20:2d:f0:e0:6c:21:09:64:db:2f:4a:3c:e1:27:
                    9c:a2:48:be:31:e6:06:b8:1b:db:dd:54:ca:c0:89:
                    00:50:27:a6:1e:92:50:23:79:6d:50:48:af:dc:2c:
                    b1:e7:39:02:0c:10:4a:32:f5:68:3c:81:f3:86:d0:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C5:B5:59:5B:E2:92:C8:29:6F:D5:07:47:50:33:94:D3:18:C0:C8
            X509v3 Authority Key Identifier:
                keyid:D3:A0:F8:80:74:54:20:FB:2B:86:A2:D1:C1:98:84:9D:8B:7C:67:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:6e:56:1d:b5:15:17:3f:f3:94:a6:fc:9f:d3:e1:44:fe:
         5e:5d:7f:4f:46:e0:45:17:dc:65:cb:ce:c9:f4:e5:e0:c3:99:
         af:47:24:bd:8a:dd:6e:01:8f:84:29:62:66:ab:e5:ee:5a:40:
         21:22:8a:8b:e5:f4:95:13:dc:07:53:be:76:fc:ba:02:e0:ed:
         00:c9:58:7d:fe:79:d7:b4:a7:3f:ab:8f:97:4a:9f:c3:81:63:
         30:2c:a4:75:57:17:f6:81:4b:9f:75:99:04:a2:2f:9f:b4:07:
         ec:be:65:ed:93:c1:a7:88:8f:d9:ae:02:85:d1:c9:9f:7b:68:
         1a:eb:2b:e1:51:d2:37:f3:c5:47:4e:d8:ad:93:01:d5:31:b2:
         2b:b7:76:a0:8c:67:99:2c:2a:78:97:40:61:0b:25:8e:9b:6c:
         ea:c3:12:c4:8c:55:6a:f2:ca:14:ad:ff:c1:d5:1e:bc:8d:37:
         14:76:42:6e:d3:81:58:5c:e1:f4:97:8d:67:2c:a8:81:db:ce:
         df:1c:57:a2:07:4a:95:df:97:6e:51:19:38:22:93:9e:06:df:
         1d:89:ab:1d:64:0c:85:d7:b8:56:c6:80:9a:11:b7:48:41:5d:
         90:2a:cb:6d:36:af:1e:04:68:68:cd:18:9d:1a:69:53:bf:0c:
         6a:3a:d4:d1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIURkb7Az3+dSL9PIBuF8lG/T1JUkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNBMEY4ODA3NDU0MjBGQjJCODZBMkQxQzE5ODg0OUQ4
QjdDNjc2QzAeFw0yNDA0MjUxNDUwNDJaFw0yNDA0MjYxNjQ5NDJaMDMxMTAvBgNV
BAMTKEREQzVCNTU5NUJFMjkyQzgyOTZGRDUwNzQ3NTAzMzk0RDMxOEMwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YgbdCqVcvKJBjIjLz1h62R+7
Sufp2urP1MHvRFK5cgLJBZhwh0Qq7LOUOd/30XZC5aM7gXyxf36oJovvCZxX4IDI
Dr7QINUlgdWvGRLdxzckrSo+gVMoqD1pU7ChQgpPKEEobgvwZyObxe557dvONE30
bi5Gvi3364iMrbQQutdMAgdOVAPagcEl1h2rkgw6lyLr59FCV5BOVzN/B7R9uQto
5hpvDBR2S3rZEt2H7LYwkyyFQVkIesc5V5OnWDUwJSUgLfDgbCEJZNsvSjzhJ5yi
SL4x5ga4G9vdVMrAiQBQJ6YeklAjeW1QSK/cLLHnOQIMEEoy9Wg8gfOG0A8PAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU3cW1WVviksgpb9UHR1AzlNMYwMgwHwYDVR0j
BBgwFoAU06D4gHRUIPsrhqLRwZiEnYt8Z2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzlhNWI5ZGMtZjc4Yy00MGE5LWJlYjktMGQzNWI4MzQ3
ODU0LzIvRDNBMEY4ODA3NDU0MjBGQjJCODZBMkQxQzE5ODg0OUQ4QjdDNjc2Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2E4MTFmOC1kMDc1LTRl
NTAtOWJiZi03YjJkMDkwNzE2OGYvMi9EM0EwRjg4MDc0NTQyMEZCMkI4NkEyRDFD
MTk4ODQ5RDhCN0M2NzZDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzc5YTViOWRjLWY3OGMtNDBhOS1iZWI5LTBkMzViODM0Nzg1NC8yL0QzQTBGODgw
NzQ1NDIwRkIyQjg2QTJEMUMxOTg4NDlEOEI3QzY3NkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUXW5W
HbUVFz/zlKb8n9PhRP5eXX9PRuBFF9xly87J9OXgw5mvRyS9it1uAY+EKWJmq+Xu
WkAhIoqL5fSVE9wHU752/LoC4O0AyVh9/nnXtKc/q4+XSp/DgWMwLKR1Vxf2gUuf
dZkEoi+ftAfsvmXtk8GniI/ZrgKF0cmfe2ga6yvhUdI388VHTtitkwHVMbIrt3ag
jGeZLCp4l0BhCyWOm2zqwxLEjFVq8soUrf/B1R68jTcUdkJu04FYXOH0l41nLKiB
287fHFeiB0qV35duURk4IpOeBt8diasdZAyF17hWxoCaEbdIQV2QKsttNq8eBGho
zRidGmlTvwxqOtTR
-----END CERTIFICATE-----