Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
File:                     13DDCFA128DC141F076EB7B60F46359286489D55.mft (raw, json)
Hash identifier:          4MAmd6E5q8O/0sIOgDbhLmmezrJRDK/UbubsEW5vwH8=
Subject key identifier:   70:C7:59:27:DF:AF:69:56:22:48:B4:43:5A:C7:0B:76:44:29:83:E6
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       0EF7EB83AAC468169382447A93BDE679D3E21151
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
Manifest number:          02C1
Signing time:             Sun 13 Apr 2025 15:05:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:42:10 +0000
Files and hashes:         1: 326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa (hash: Xh/FfrHNt61Ngv7mgOC5frZltA6yLiEyKUkiFJ52seY=)
                          2: 326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (hash: CTODbkYlpnVaHyONgQ5egtKNh9v6t29vIyot4VVbKKM=)
                          3: 326130613a363034303a613130333a3a2f34382d3438203d3e20323033383433.roa (hash: 06tAnlm0i1jYu3D9mVMZ/IhYeCYC1xL7tDX2aImcRpw=)
                          4: 326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (hash: bikmWHpjPmXFeu6RdysBAjYypuerlP+G4LoSWyPysCg=)
                          5: 326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (hash: 8kE6bd3UIwVjGeLjsemhmEEHlGKhtuqOlLO98xqUvuU=)
                          6: 13DDCFA128DC141F076EB7B60F46359286489D55.crl (hash: a3/YaNZ3HnOYtJTwXwIemFgXlhcZfgReKnIRlJwgrRw=)
                          7: 326130613a363034303a613130383a3a2f34382d3438203d3e20323033383433.roa (hash: nYmPrk/p3XSTF2XANQcl/CgW4KrSzA7liFnUdw6bGF8=)
                          8: 326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (hash: PFv1w1/dhOLCzfwqwLHBj015XxebsCk8UvpgNeKoqdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:eb:83:aa:c4:68:16:93:82:44:7a:93:bd:e6:79:d3:e2:11:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Apr 13 15:00:10 2025 GMT
            Not After : Apr 14 15:42:10 2025 GMT
        Subject: CN=70C75927DFAF69562248B4435AC70B76442983E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a5:63:c3:87:55:4e:9e:9b:e0:ca:de:ec:05:
                    38:16:14:f1:62:3a:8c:b7:cd:bb:4d:71:96:79:24:
                    07:33:4e:f6:4d:9d:6f:c2:05:71:8d:a3:0c:6f:19:
                    70:05:27:20:ee:b9:07:50:0a:bf:41:45:67:20:fe:
                    29:77:24:25:f5:b0:6b:72:5a:5a:f1:a0:25:f3:50:
                    f2:87:3d:62:76:ba:62:86:28:62:58:a6:c3:fc:0c:
                    38:74:ac:81:41:bd:8e:82:3f:d0:72:46:a7:86:92:
                    ac:76:cd:1e:08:16:0d:aa:51:0f:80:c5:97:04:fa:
                    9d:b5:53:78:13:5d:86:ef:dc:52:bc:02:2d:fe:1d:
                    2f:73:ce:d1:a2:6d:81:60:bb:dd:08:c7:24:f9:b6:
                    5d:f8:3b:f7:3b:ef:15:f1:66:c4:ed:f0:64:2a:b7:
                    b2:f1:60:f5:ea:1f:56:38:57:41:72:f4:65:21:aa:
                    b2:e1:9a:e5:58:c6:fb:30:1f:6a:da:a9:21:eb:24:
                    76:eb:ea:b1:50:9a:3e:09:9a:50:e8:8c:8b:8d:da:
                    79:fe:39:93:af:e9:fe:5f:39:77:53:01:e8:76:42:
                    a6:81:9f:c5:1e:f7:80:83:6b:f6:fd:aa:df:17:f4:
                    7b:01:23:53:1b:0a:11:3d:22:ce:ec:de:f1:6b:7a:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C7:59:27:DF:AF:69:56:22:48:B4:43:5A:C7:0B:76:44:29:83:E6
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:c7:1f:82:77:1c:6f:41:b4:9c:f5:7c:5e:db:a7:bf:99:
         83:b1:12:20:63:77:dd:cf:5e:41:3c:03:7b:bd:65:8b:8b:3f:
         c8:f0:f3:ac:1a:90:72:24:c4:f6:f8:14:dc:1f:a6:ff:0d:f1:
         8b:19:1f:f0:f9:5d:68:c2:9c:a1:82:b9:22:d3:b4:61:8e:62:
         22:c3:c9:19:09:f4:0b:c1:c5:32:a8:f0:f2:ae:ae:49:d1:73:
         88:0a:a8:d0:9e:0f:1c:4b:51:8c:41:1b:a1:16:a5:55:4e:6d:
         0d:9d:44:fc:59:0e:3b:09:d0:4f:bf:a2:b5:e6:1d:52:66:6c:
         ab:5b:6c:2f:26:0e:9b:a3:7d:c1:76:eb:cf:0d:a2:17:ac:bf:
         53:8c:bd:c3:c3:2f:74:eb:11:ed:a1:20:cc:35:37:5d:06:70:
         40:91:4e:46:98:da:53:30:c0:cf:0e:fc:92:4e:67:da:97:08:
         2c:ab:6a:ea:84:3a:56:b0:b0:0b:2d:93:b0:5e:2f:50:60:d1:
         ef:4d:10:48:df:da:04:35:e0:46:f3:32:10:aa:85:44:e7:48:
         7c:3f:6a:e4:84:83:b6:cb:29:32:79:6a:ae:e6:84:ca:a1:4d:
         57:00:0c:00:24:eb:ac:ed:fb:fe:5f:e5:d6:06:fb:6a:54:42:
         71:78:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----