Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          6V5RdX8er/pql389Kf51Ve7AhrlXk3qgjY/qQwpt0cU=
Subject key identifier:   2D:5E:25:23:53:0B:44:5C:96:33:89:A4:B0:89:9F:50:70:AB:20:44
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       59D7D6A2A31C63B338B304C442462F6AF8E424CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          01E0
Signing time:             Sun 13 Apr 2025 11:03:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:58:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:39:29 +0000
Files and hashes:         1: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: 1C8fIKlQUnAeCmyoK3V2NdUgsW/0q5NrpzLZYBb5TGM=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: F/X1j5VRm73/Y1gEGDucD3FEzBcK+kOwIujNHPTpvM4=)
                          4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: aHQLak9N9Oms5rgKvpLigAh2LZdfLoi6boC6n7PKDU4=)
                          5: AS198136.asa (hash: W+U8FE8wW4IM5Quak0Mq8eROawTLthMCIEUtXh+wJqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d7:d6:a2:a3:1c:63:b3:38:b3:04:c4:42:46:2f:6a:f8:e4:24:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 13 10:58:29 2025 GMT
            Not After : Apr 14 14:39:29 2025 GMT
        Subject: CN=2D5E2523530B445C963389A4B0899F5070AB2044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:c9:c5:86:9c:0d:a8:2b:22:0c:2d:56:4d:
                    49:d8:a2:1a:bd:e4:6d:c5:b5:fb:0b:5e:82:c5:ee:
                    52:e2:5c:c7:f5:ab:40:4e:15:da:51:a9:ad:48:fc:
                    ad:c0:c6:fa:e6:07:d8:52:1a:40:4f:25:8e:4a:d1:
                    8a:89:f5:49:73:98:34:57:ef:9c:d8:6d:e8:9c:5b:
                    8f:59:fe:3a:fa:3e:ce:ba:19:03:6b:7d:7a:3b:90:
                    f1:cc:6a:b1:5b:ce:11:44:61:9a:77:7b:8e:17:d7:
                    39:0e:72:29:9a:b0:d0:ce:c7:40:80:4a:35:8f:4a:
                    5a:44:2c:b1:cf:cb:1d:ab:76:3b:f8:4b:df:97:a0:
                    63:cd:31:3a:2d:cb:ff:e5:28:0e:0f:87:22:80:33:
                    30:2a:3d:50:43:ff:1b:6d:65:3b:ba:42:28:ce:68:
                    5b:d6:24:26:35:a7:e1:c1:80:ae:f6:f6:86:4a:84:
                    19:8a:22:99:2d:2b:80:41:90:cf:51:3e:34:b5:02:
                    ed:2c:db:08:4d:ab:9b:c2:35:26:4b:fd:67:ff:af:
                    94:6f:d3:0b:5e:5e:74:67:03:6c:af:96:c4:40:70:
                    0d:ba:8b:5e:6c:d5:4b:17:a7:48:ed:2f:74:1a:8a:
                    fb:a0:0b:3d:c3:92:a3:d3:6c:5c:93:5d:e4:5c:8f:
                    9f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:25:23:53:0B:44:5C:96:33:89:A4:B0:89:9F:50:70:AB:20:44
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5a:08:80:14:9d:9d:1d:5c:23:03:54:c7:ee:2c:71:48:9e:
         c7:2c:de:4f:5d:46:95:4f:06:5c:05:95:18:7f:e3:de:07:01:
         e0:26:9a:41:8a:fb:2e:5a:48:cc:7e:43:07:7f:e3:f3:52:74:
         74:9e:7c:bf:88:e6:21:b2:02:16:92:09:05:00:25:98:b5:ae:
         2d:4d:55:bd:82:e5:34:66:bc:ed:0b:d0:f4:0e:9b:c1:6d:b9:
         e9:52:0e:af:fc:e0:b5:15:5a:a7:ec:0a:49:e1:32:e8:f1:1b:
         40:1a:07:8f:1f:16:1a:bb:d4:e1:ef:05:f1:99:98:9f:ee:64:
         82:0e:3b:ec:67:88:c0:97:81:61:8f:e9:61:90:65:84:9e:c5:
         be:b8:c8:3d:27:a9:6f:3f:50:5b:f9:f1:47:5d:c9:eb:08:6b:
         44:7b:ad:45:0b:26:b4:61:d0:88:97:67:47:59:f6:54:a8:83:
         f9:1b:ad:55:8c:88:87:8d:be:80:1f:a9:21:32:18:f0:7d:36:
         6b:14:2d:10:bd:37:dc:9f:c7:14:c8:4b:a7:cf:f5:b1:30:bd:
         96:c9:24:63:c9:05:8b:1c:85:75:f2:68:81:ce:dd:58:dc:b6:
         f2:7b:89:d7:c8:26:55:16:0b:08:87:50:12:5b:4d:07:9f:bb:
         98:b3:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----