Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
File:                     2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft (raw, json)
Hash identifier:          HZnEqfCnWfUVSbJ84XaoOG60T3jkCAmPbtcKHrzGexc=
Subject key identifier:   02:1A:43:06:ED:DD:84:5C:00:DF:3A:19:81:E7:4F:B1:35:18:7A:8E
Authority key identifier: 2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
Certificate issuer:       /CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Certificate serial:       03EE53EC1A9BE1342A4EB1A3770CA6AB948E8127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
Manifest number:          2D
Signing time:             Sun 13 Apr 2025 02:29:33 +0000
Manifest this update:     Sun 13 Apr 2025 02:24:33 +0000
Manifest next update:     Mon 14 Apr 2025 05:13:33 +0000
Files and hashes:         1: AS214757.asa (hash: l0Y+CPb9AOgowGXfzD29IiYtbowgVgdv2PTL+8Uiexk=)
                          2: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl (hash: ygoRlIy+shjFJlT/FnDPrdnhxu7b0MJNmO+thebF0og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ee:53:ec:1a:9b:e1:34:2a:4e:b1:a3:77:0c:a6:ab:94:8e:81:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2caba02127925d9988710eee5a0a59b004c6b6b1
        Validity
            Not Before: Apr 13 02:24:33 2025 GMT
            Not After : Apr 14 05:13:33 2025 GMT
        Subject: CN=021A4306EDDD845C00DF3A1981E74FB135187A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:c6:e8:d1:19:6c:7e:b2:3e:db:b1:9c:9b:
                    e3:ba:a1:b6:b6:61:f0:37:c4:8e:17:70:4b:9d:af:
                    4a:98:15:8b:80:53:27:36:07:5b:49:5d:85:ac:c6:
                    72:6a:d1:1a:36:26:d3:99:d0:d6:8e:8a:6d:b4:62:
                    8f:99:c2:80:b3:ad:7e:83:de:58:41:4f:b7:ca:4b:
                    4d:27:c4:ac:26:4f:e5:22:38:4f:fc:cd:6c:43:db:
                    32:bb:a7:fe:e3:cf:6a:60:2d:ab:c1:1c:be:0b:32:
                    8c:67:36:c5:a7:c0:33:f7:1e:5a:b7:6e:87:67:47:
                    83:74:ec:86:27:83:7c:7a:7a:9a:da:13:e9:60:c1:
                    5f:1d:d7:78:39:2b:3f:60:3f:81:c1:cd:64:cf:61:
                    28:b9:2c:c9:9e:aa:87:d8:09:a8:b1:d8:c0:2c:dd:
                    67:6b:8e:19:ce:19:69:48:55:bf:99:ac:44:b6:9e:
                    43:4e:7f:fb:99:e4:5e:cd:81:c7:72:78:c5:36:d2:
                    df:ae:f2:5a:88:c8:90:2f:fb:92:ca:04:5b:eb:d2:
                    d0:d6:b6:4d:d9:e2:fb:70:fa:04:0b:7e:09:9f:d2:
                    c7:2a:95:e4:4d:d3:44:7c:5a:15:c1:c5:55:fe:87:
                    89:86:dd:bb:b4:53:94:3e:e7:02:76:f8:a3:42:07:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:43:06:ED:DD:84:5C:00:DF:3A:19:81:E7:4F:B1:35:18:7A:8E
            X509v3 Authority Key Identifier:
                keyid:2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8a:80:d9:a6:bb:a0:c9:6f:3d:6f:52:f7:a8:67:d1:37:cb:
         77:38:c6:7d:5f:50:d2:97:cb:a8:07:ee:f0:8c:fe:7b:81:5c:
         af:51:e9:7e:c4:b7:54:f5:ee:10:5c:37:51:1d:9c:63:8a:25:
         4a:09:b6:34:a5:a1:eb:16:76:46:d5:30:55:c2:3f:07:bd:4e:
         27:67:65:90:95:64:c4:9e:06:f2:9b:36:3d:0d:ec:ba:66:71:
         37:31:c7:22:17:71:da:c0:c5:b0:1b:aa:56:c4:7c:4a:38:aa:
         1e:fb:b9:96:47:db:f7:be:30:f6:76:e3:c8:fb:75:c9:8c:d1:
         db:51:e0:c2:31:b7:ab:71:ca:6d:a3:23:1a:59:d9:d6:ec:db:
         3e:9f:83:a5:4f:e3:4f:59:70:be:8e:d5:f6:16:ad:e0:eb:d9:
         e1:71:e1:dc:b4:0d:f9:3e:ed:bb:70:73:bf:79:8c:37:08:61:
         0e:77:fb:4c:d4:bf:d3:2f:1d:82:1a:35:77:33:20:d3:a1:8b:
         de:b4:f1:38:f4:f0:5d:1a:4c:34:8c:a2:ea:27:92:34:ac:2b:
         6d:4c:9a:3e:89:7b:d1:e9:f1:ca:b3:05:1f:84:7d:76:63:dd:
         d7:97:22:54:94:e4:c7:6b:ff:cb:18:66:dd:ae:32:90:f6:ef:
         5f:5a:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----