Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File:                     0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier:          EM1oJX2OL3duZ+1ulvRwYw+WNn2efqaduNlobVZK0UA=
Subject key identifier:   9C:1B:E4:6E:D7:D1:2D:02:C8:FC:86:0F:3F:8A:8D:93:A1:45:FE:E8
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer:       /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial:       0283D423C03AD213338E3FB3D2C2060ABFC996A1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number:          031B
Signing time:             Fri 31 Jan 2025 08:59:47 +0000
Manifest this update:     Fri 31 Jan 2025 08:54:47 +0000
Manifest next update:     Sat 01 Feb 2025 09:59:47 +0000
Files and hashes:         1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: +w7L08LGLFPiuSsHWU+W4+ooMYxXjITKX2et6VnFG84=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:83:d4:23:c0:3a:d2:13:33:8e:3f:b3:d2:c2:06:0a:bf:c9:96:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
        Validity
            Not Before: Jan 31 08:54:47 2025 GMT
            Not After : Feb  1 09:59:47 2025 GMT
        Subject: CN=9C1BE46ED7D12D02C8FC860F3F8A8D93A145FEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:c5:63:32:3a:fd:77:da:1c:32:53:ab:a1:
                    38:00:ff:2e:54:e6:a5:5c:e2:d8:e2:3c:36:6d:5c:
                    39:7c:2f:85:c3:04:5d:5e:bb:c5:72:25:d0:f0:56:
                    4a:c7:06:2c:a3:0e:12:fc:4b:b6:b8:43:e5:4a:80:
                    25:d8:24:6f:78:0c:52:8b:66:17:e3:c8:18:9c:8a:
                    77:9a:5c:eb:5e:c7:ff:ae:90:54:1b:da:cb:19:ef:
                    08:f7:71:36:db:9d:10:79:91:4c:4e:66:9b:a2:67:
                    04:b3:7a:93:50:b7:d1:e0:4a:01:5f:de:99:35:be:
                    2b:19:82:2d:c7:57:e2:c3:0d:13:5c:58:58:73:b8:
                    07:b0:50:ee:ef:6a:a0:ff:28:61:6f:1a:95:a8:24:
                    bd:d4:ca:7b:6a:5a:7d:73:d7:9d:c8:af:29:73:ff:
                    15:f9:ac:30:19:6f:27:0b:30:70:83:8c:19:44:00:
                    2f:89:87:4d:68:d2:1c:7c:11:3f:40:ad:f8:ea:53:
                    9a:f3:33:49:d4:f2:52:97:d3:cb:39:f0:bd:4b:ff:
                    ed:81:d7:32:3f:27:43:45:42:44:c5:c0:fd:f6:d1:
                    03:09:e9:ff:c1:cb:ea:68:2e:de:91:24:10:0a:c1:
                    39:81:5c:a9:c7:76:b7:a6:32:fa:a3:d3:d0:1e:8f:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1B:E4:6E:D7:D1:2D:02:C8:FC:86:0F:3F:8A:8D:93:A1:45:FE:E8
            X509v3 Authority Key Identifier:
                keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:6b:46:18:e7:ce:4a:7d:ed:a7:8a:d2:52:b3:22:92:89:
         59:a9:22:62:65:66:4c:e3:32:26:8f:31:25:69:8d:0d:88:23:
         9b:20:01:26:e9:20:db:db:25:3a:26:8b:89:9c:d6:fa:d5:6e:
         76:e5:f4:a9:7f:c0:3d:2d:82:be:d1:f3:1b:c6:56:88:f5:82:
         92:8e:63:4f:9c:b7:4c:53:11:a5:a8:f5:a5:99:62:e0:42:7f:
         2b:ef:69:0b:e8:8f:db:c3:7a:7d:24:65:e4:33:b8:eb:f0:dc:
         a6:ad:24:f9:56:19:2a:dc:d0:80:77:94:f6:33:dd:b4:a6:5e:
         f0:10:fd:df:0e:4b:29:b5:8c:4a:52:30:93:4e:38:df:68:b1:
         e9:de:d8:07:e3:59:ef:ce:7e:dd:7f:88:b1:5a:e5:9a:01:d9:
         94:a3:f5:1b:6d:7f:f2:0b:27:27:fe:29:8c:04:b1:25:61:a7:
         b8:7d:07:28:36:a6:ab:b8:bf:73:ff:51:9c:63:1e:58:45:3a:
         c1:9f:a3:2b:05:4e:98:c1:38:64:ad:9d:55:20:eb:67:8c:68:
         a7:91:28:69:94:84:84:99:c0:00:28:47:f0:91:f7:95:a2:46:
         7c:1c:c6:db:b6:07:4e:06:3f:25:fa:46:92:fc:fa:ac:ae:75:
         e2:fc:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----