Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File:                     13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier:          egv7RCCPfRl9yMtrLLkpq6IPnnk7aV9CAcBMXfbi/Mk=
Subject key identifier:   E6:28:FA:FD:75:7C:10:4B:90:8A:D8:85:41:4E:77:0C:D5:AB:30:0D
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer:       /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial:       3400E3E4453B458EDFB8781A6FDDB424599F4D4B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number:          37
Signing time:             Sun 13 Apr 2025 06:29:51 +0000
Manifest this update:     Sun 13 Apr 2025 06:24:51 +0000
Manifest next update:     Mon 14 Apr 2025 07:54:51 +0000
Files and hashes:         1: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: qkMH6UyB13JS/S1E7Eq233GkLUYVJkMljCHWQ8GvgBw=)
                          2: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=)
                          3: 326131343a373538303a6430303a3a2f34302d3430203d3e20313939333130.roa (hash: o5EJWyX5wiy66BCn4Phzo2mfDCvoGVTO+ICQo5ndufg=)
                          4: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=)
                          5: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:00:e3:e4:45:3b:45:8e:df:b8:78:1a:6f:dd:b4:24:59:9f:4d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
        Validity
            Not Before: Apr 13 06:24:51 2025 GMT
            Not After : Apr 14 07:54:51 2025 GMT
        Subject: CN=E628FAFD757C104B908AD885414E770CD5AB300D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:49:6f:3a:2e:e0:10:d2:86:6f:60:36:ef:
                    d8:2f:b7:9f:9c:79:ec:91:37:3a:a0:2f:40:bd:ee:
                    62:41:db:41:7b:00:06:46:d9:34:0a:1b:7d:fa:84:
                    a8:48:11:dc:67:8f:d3:35:3d:c0:5c:61:a4:46:2f:
                    e7:6a:bb:a0:2b:57:8f:e2:61:c8:ce:0c:59:4d:27:
                    63:94:c1:86:e7:f8:ef:9b:f0:96:fb:81:ec:81:91:
                    e1:54:2a:bd:39:f1:be:5b:7b:e6:a3:f7:68:c7:b1:
                    b6:5d:16:ad:57:37:cb:06:68:71:6f:80:c2:b9:b5:
                    de:f7:d2:e4:46:3d:b2:76:f2:9e:50:38:21:ee:b6:
                    62:69:5d:6c:94:5e:9f:b8:b9:4c:ae:a1:c8:05:7a:
                    8d:74:b9:70:69:83:3f:83:b2:09:1c:c5:c7:ab:af:
                    52:11:88:96:9c:ea:47:55:18:ac:a9:b0:bd:ae:6d:
                    4c:f1:34:c9:5f:9d:a7:73:34:95:3d:8a:25:1b:6f:
                    2c:4f:2f:f5:9a:24:37:9b:91:c5:10:f1:f8:a7:b7:
                    98:0c:ba:38:d9:8f:50:d0:d1:82:04:e5:2d:0a:87:
                    a5:25:88:b9:fd:0f:60:4a:46:5d:07:e7:d8:1a:d1:
                    27:a1:b6:7d:7e:d2:ba:d1:cf:2e:82:b5:78:25:37:
                    7d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:28:FA:FD:75:7C:10:4B:90:8A:D8:85:41:4E:77:0C:D5:AB:30:0D
            X509v3 Authority Key Identifier:
                keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:ab:5a:00:57:28:3a:7b:79:40:14:44:fc:e7:cd:a5:f0:
         1c:b9:ee:9f:d8:e4:91:03:94:bc:2a:d8:12:94:9d:df:37:11:
         2a:8f:f1:f8:36:ea:de:a1:be:a4:ed:19:0f:2c:89:45:8c:48:
         89:0c:b0:87:13:ca:26:5f:ec:bc:15:be:3c:9d:e6:6d:a5:7e:
         c5:10:f1:18:2b:10:89:ec:03:6d:32:9c:1c:e7:6d:f0:50:d3:
         86:3c:24:2d:26:20:8b:8d:35:6d:8b:e7:df:56:6b:1b:ed:0a:
         a0:38:91:ee:23:79:5f:a1:29:cc:e5:31:f7:2c:63:02:27:7d:
         f9:f4:51:45:66:e0:ce:9b:57:50:b4:04:6d:ee:83:c6:c0:07:
         29:00:d6:4f:6a:ec:45:90:0c:37:ed:ea:03:e4:73:f0:a0:30:
         6d:1f:67:9f:fa:e3:c3:e3:97:df:1a:47:ef:11:56:63:3f:11:
         43:55:c5:91:ba:11:5b:f8:9b:8d:bc:d0:92:b6:28:e2:26:48:
         bc:65:d3:c2:5d:52:87:37:60:11:64:07:b4:82:c3:7c:42:66:
         f0:cd:82:b4:6f:00:2d:e5:8b:fe:44:79:f1:f2:a4:88:40:cb:
         bb:94:65:ba:d4:d3:a9:5a:93:23:7a:e7:05:ec:0b:29:e3:f5:
         7e:d1:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----