Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
File:                     C746AC47360523A8D817C5EA638AE186912619C1.mft (raw, json)
Hash identifier:          vMcOrVesd8J82i3ebIgx593Stse8Vl9fK2Idj5nh6KE=
Subject key identifier:   44:4D:E2:CC:8D:69:E1:32:47:CA:AF:AC:AE:7D:0B:90:B9:B0:96:AE
Authority key identifier: C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1
Certificate issuer:       /CN=c746ac47360523a8d817c5ea638ae186912619c1
Certificate serial:       25FE6A1AFB1A13A9BC74ABB06366CAE85590D2D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
Manifest number:          75
Signing time:             Sun 13 Apr 2025 04:09:51 +0000
Manifest this update:     Sun 13 Apr 2025 04:04:51 +0000
Manifest next update:     Mon 14 Apr 2025 07:04:51 +0000
Files and hashes:         1: AS199310.asa (hash: dJ8Ero/CCjpMFeCTL5944nFJjzH1QNiuhfR7pMJhGEA=)
                          2: C746AC47360523A8D817C5EA638AE186912619C1.crl (hash: NBidctjca1WBC9AeTOlKsFIQD5o9fnZHbqi42eu80Zw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:6a:1a:fb:1a:13:a9:bc:74:ab:b0:63:66:ca:e8:55:90:d2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c746ac47360523a8d817c5ea638ae186912619c1
        Validity
            Not Before: Apr 13 04:04:51 2025 GMT
            Not After : Apr 14 07:04:51 2025 GMT
        Subject: CN=444DE2CC8D69E13247CAAFACAE7D0B90B9B096AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:53:08:f8:e5:90:aa:00:ab:27:33:fb:c8:
                    0b:75:f3:e5:ec:40:7a:06:5b:69:92:06:26:4e:e1:
                    68:c1:1c:f5:6f:44:ce:44:dc:ca:c6:50:29:15:cb:
                    e4:13:28:e3:61:76:4d:47:a3:6b:ab:6e:84:ff:38:
                    b0:02:a9:63:a6:d2:75:5c:dd:79:7c:e0:65:a3:98:
                    8a:81:a4:69:27:74:3f:9d:8c:75:ef:06:eb:b4:c3:
                    ee:fe:d9:31:99:4a:d2:49:f4:8f:73:eb:68:b6:3b:
                    5c:ea:15:20:aa:7a:08:57:b6:e3:7d:1c:2b:cb:32:
                    da:af:b8:bb:b6:a4:9a:f4:26:77:46:16:02:3d:a4:
                    27:5e:b6:f3:fb:29:71:74:bd:13:17:86:f6:0a:0d:
                    14:20:d2:1c:ea:37:bd:6f:31:9a:f6:17:d1:25:12:
                    11:3e:68:50:a9:e4:28:85:a4:a0:9e:6c:94:77:22:
                    d8:73:f7:a3:f1:16:0a:83:40:ce:66:01:61:a6:61:
                    4e:8c:04:5b:af:ac:d9:37:de:2b:e1:d1:5c:b0:d0:
                    96:84:ca:7b:1d:95:f1:67:5e:85:13:9c:85:37:de:
                    2f:80:c6:a4:aa:5e:51:b5:02:25:86:95:a4:12:f0:
                    03:e5:52:3b:68:c0:04:c7:5d:41:6b:9f:6d:3d:0c:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:E2:CC:8D:69:E1:32:47:CA:AF:AC:AE:7D:0B:90:B9:B0:96:AE
            X509v3 Authority Key Identifier:
                keyid:C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:eb:7e:bf:46:58:77:2f:cb:e4:86:c5:39:80:d6:db:9f:
         62:e3:a3:6d:f5:60:de:a2:1b:57:bd:3a:7f:50:97:b8:bf:f4:
         f2:ab:23:77:84:df:e7:9f:fa:fc:81:68:e6:02:ee:89:c0:10:
         a7:49:ed:f3:2b:fb:d7:f5:07:ac:8b:24:a8:a4:68:55:3e:60:
         49:56:ba:ce:44:f1:c1:67:da:a6:75:69:23:f8:9d:31:84:a0:
         8c:ef:a0:9d:95:0e:ce:6f:80:81:f0:e8:7d:32:4c:e6:6c:ff:
         f3:6c:f0:6f:bf:8c:71:95:f5:67:49:cd:cc:86:cd:99:14:84:
         75:96:ef:7c:84:b8:ae:61:6f:3c:72:5c:ff:8b:81:bf:e1:e9:
         e9:5e:a9:16:c7:93:4d:1e:a9:ba:f0:45:dc:cd:a4:b9:7c:6b:
         ba:8d:4d:c8:f1:ea:b2:6e:a2:cc:1e:47:5e:27:1d:a8:2e:7a:
         1f:cd:d4:44:d5:78:2b:b0:dc:db:0b:53:da:f8:09:5d:25:0d:
         aa:74:c6:7d:18:b5:49:22:af:37:97:1e:4e:cc:3b:c7:cb:ea:
         96:b3:29:e9:7d:08:d6:24:5b:b9:e9:8e:c9:85:ca:95:db:83:
         42:dd:5a:9d:a9:78:aa:de:4b:02:c9:84:10:b2:56:68:cf:07:
         dd:ba:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----