Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
File:                     F861C17CCC63A8FE4F54B725229D4182E376702E.mft (raw, json)
Hash identifier:          rHWFFioGMFtQd6JeTN+uxHIYck3W2E4Y91kNRsVt7Sk=
Subject key identifier:   38:A3:09:AC:F7:75:E8:A8:29:60:CA:B4:8B:DB:78:32:83:E9:CA:82
Authority key identifier: F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E
Certificate issuer:       /CN=F861C17CCC63A8FE4F54B725229D4182E376702E
Certificate serial:       32E2A775874CA36BA4F934A6E571544414587496
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
Manifest number:          1F
Signing time:             Sun 13 Apr 2025 13:11:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:06:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:48:04 +0000
Files and hashes:         1: F861C17CCC63A8FE4F54B725229D4182E376702E.crl (hash: Z4hZPySGPncm7eBRcAgu/wTSUX7bQDrYddr6qPSxQjg=)
                          2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: nEpVXZ4G7eLeVLBw2JFUizV21nv5AkYeo88InoKYBm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e2:a7:75:87:4c:a3:6b:a4:f9:34:a6:e5:71:54:44:14:58:74:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F861C17CCC63A8FE4F54B725229D4182E376702E
        Validity
            Not Before: Apr 13 13:06:04 2025 GMT
            Not After : Apr 14 14:48:04 2025 GMT
        Subject: CN=38A309ACF775E8A82960CAB48BDB783283E9CA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:fe:94:b9:79:4a:8a:21:10:cb:29:16:db:
                    a0:31:c1:f9:e1:9b:3a:66:73:bd:75:29:7b:43:03:
                    27:41:d3:b0:43:0a:0b:24:cf:82:1f:bb:b6:b2:33:
                    36:37:18:1d:c7:c3:79:66:2b:7b:3e:f1:4d:ad:46:
                    61:81:96:12:ee:28:8f:93:17:cf:7f:15:d9:f4:38:
                    aa:83:2c:29:36:10:a6:db:19:ac:1b:07:b1:62:ec:
                    ea:4b:ce:81:7f:1a:65:dd:1d:c5:b2:46:ef:11:a0:
                    25:25:1f:45:5c:99:16:03:e7:22:03:13:68:b3:63:
                    ca:93:c9:92:1e:7c:f4:07:20:12:ee:f9:e4:41:13:
                    c8:8c:01:d5:a0:b3:ba:b2:61:8f:6f:e4:54:fd:1c:
                    23:6b:a3:05:c2:71:8f:bc:90:5a:8b:40:26:9b:9c:
                    2a:a0:d4:6e:ab:a4:17:dd:8d:e9:ed:6b:68:7b:8d:
                    bc:20:99:e2:e2:bd:b4:f1:dc:1f:b1:dc:ef:66:15:
                    61:88:92:6b:8e:63:30:eb:d4:93:9a:e7:a1:3b:93:
                    02:ed:2c:e9:21:a0:f6:cc:d1:c8:de:b1:e1:29:fe:
                    72:9e:e4:42:66:37:25:2c:53:eb:9b:18:2a:7c:50:
                    08:3b:60:9d:71:48:77:0b:f2:4e:7f:ed:04:69:1a:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A3:09:AC:F7:75:E8:A8:29:60:CA:B4:8B:DB:78:32:83:E9:CA:82
            X509v3 Authority Key Identifier:
                keyid:F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:af:13:34:da:cf:98:55:c0:03:d1:3e:17:66:2e:45:89:
         aa:e2:ee:1f:55:51:97:be:70:ba:d3:45:9c:06:85:29:e4:bf:
         2d:b4:6e:57:c7:42:07:28:2c:28:ff:29:b9:8c:75:c9:ba:8f:
         56:66:b1:bb:1a:c0:60:e4:54:0f:c4:93:10:05:41:90:4c:b9:
         0f:8a:65:32:eb:56:50:93:c1:18:ee:3a:27:62:fc:c6:3b:5a:
         09:33:6b:25:09:1d:0a:67:f7:d1:ba:45:c8:ce:a2:e8:a9:5b:
         1b:b7:fe:69:6c:4b:ef:fa:c3:38:9d:a8:50:9c:c1:bd:25:cf:
         5e:19:9e:0d:37:a7:5c:79:10:a2:51:38:f0:3d:e3:1f:82:b6:
         ef:50:ea:3e:a3:a2:20:85:62:a2:0f:5a:2e:a6:b7:06:9a:7b:
         ff:d8:0d:b6:41:8d:03:27:a3:2d:da:3f:80:4f:3d:30:1f:78:
         30:bf:f8:7a:1b:bf:66:6b:29:c1:32:cb:0f:7b:26:c5:7e:b1:
         75:a2:52:9c:96:d4:7e:b2:1b:6a:31:5a:d8:33:75:80:1a:fe:
         f3:a1:d1:62:0a:1b:6e:1b:94:fa:78:2f:8d:7e:6c:80:98:ea:
         3e:7b:5e:02:10:8d:23:68:45:8e:12:4d:3f:26:f4:95:38:a8:
         69:49:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----