Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft
File:                     B126634521E5E49C535FCBEC43BA2D922C30E136.mft (raw, json)
Hash identifier:          nXWDyl0g8PcALTQn0mrNiFAo2KufRFJhbQiFAUK8IBQ=
Subject key identifier:   56:7D:09:38:C2:92:6F:F5:B9:58:3E:47:EE:9E:F2:99:3A:AF:90:59
Authority key identifier: B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36
Certificate issuer:       /CN=B126634521E5E49C535FCBEC43BA2D922C30E136
Certificate serial:       0B28D21567E7D96A69CFFBBCCC4DECBA3166CC18
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft
Manifest number:          1D
Signing time:             Sun 13 Apr 2025 11:55:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:50:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:39:33 +0000
Files and hashes:         1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: wVp4YEv0t3dNFBj7z0WS+J9iHIKEQspXspUxf+IIu0Q=)
                          2: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: pIkMxK/vDEw873dkebmyQN4JOmiMolHB/gzzt1LQXbo=)
                          3: B126634521E5E49C535FCBEC43BA2D922C30E136.crl (hash: dSgu1otRb0/YlilpelENtIHc8w2j1uTzt3OfpF9meag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:28:d2:15:67:e7:d9:6a:69:cf:fb:bc:cc:4d:ec:ba:31:66:cc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B126634521E5E49C535FCBEC43BA2D922C30E136
        Validity
            Not Before: Apr 13 11:50:33 2025 GMT
            Not After : Apr 14 12:39:33 2025 GMT
        Subject: CN=567D0938C2926FF5B9583E47EE9EF2993AAF9059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:12:cb:cd:29:0f:bc:c7:29:cf:3c:cd:f4:
                    38:1f:7e:af:71:72:2e:70:05:e3:f7:13:ab:f6:94:
                    ab:d8:96:f9:c0:87:79:e8:2d:41:65:5e:28:d0:78:
                    8d:71:9f:a4:70:2e:af:0f:57:62:1f:80:2c:61:0a:
                    9e:99:49:d7:dc:91:78:8f:0b:b8:15:12:bb:90:e5:
                    cc:48:39:63:be:d0:fb:ed:30:60:03:58:38:4f:10:
                    a5:4f:07:1b:5c:38:bd:22:59:bc:9a:49:78:68:dc:
                    61:e3:55:9b:7b:de:f3:4a:45:69:60:6b:bf:66:a7:
                    8a:f8:45:78:c6:db:db:f0:88:62:ba:69:df:4f:d2:
                    50:e2:86:a5:8c:f3:33:e2:96:db:43:ca:6f:15:96:
                    23:88:1e:de:f2:63:6b:81:3e:68:39:3f:5a:ce:1b:
                    5e:9b:0b:54:16:b0:79:b0:26:33:36:52:8f:72:89:
                    32:4d:42:65:2a:eb:76:49:88:27:db:2a:e6:e2:3d:
                    b0:6b:df:45:a0:ac:31:93:24:07:be:f2:dc:96:fc:
                    e9:04:95:b6:60:e0:da:0b:c9:7f:20:85:2d:e9:d7:
                    ca:7e:1d:5b:d2:18:fd:a3:04:cb:84:2e:bb:61:fb:
                    95:9e:00:10:c8:27:67:10:56:2b:29:46:02:55:4d:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7D:09:38:C2:92:6F:F5:B9:58:3E:47:EE:9E:F2:99:3A:AF:90:59
            X509v3 Authority Key Identifier:
                keyid:B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:3c:f4:40:ce:18:71:1b:b4:af:a8:54:7d:60:ba:92:7e:
         1c:26:67:19:1f:7b:bf:46:91:b3:49:56:fe:3e:c5:f1:4f:3e:
         0b:89:e2:31:a7:8d:0f:c1:00:a8:ac:a0:71:54:9f:74:9b:77:
         e2:45:e9:49:46:de:c5:7c:34:00:4a:50:cf:8e:bd:5b:12:62:
         ae:9a:fb:70:60:9f:b4:19:56:ff:3d:98:8e:4c:30:b7:2c:5e:
         ed:37:f8:82:1e:b1:f7:20:e5:28:f4:8d:95:9f:6a:d2:7f:84:
         94:c8:cb:3d:18:ff:a3:6a:97:0a:d9:8e:fc:5e:28:93:17:ce:
         17:c7:3c:56:77:76:02:26:a6:1f:9f:37:7b:9f:c9:98:25:de:
         24:d5:22:53:b7:7b:83:95:77:19:d8:41:3a:0f:dd:4d:20:8b:
         d7:f2:21:bb:b6:9a:6b:cc:a2:58:e6:c0:d3:d2:44:cc:a7:fa:
         b5:7f:44:9a:fe:e4:92:6f:89:d6:9c:1d:0b:13:97:9a:74:ec:
         4e:7f:01:b5:3f:26:13:97:0f:1e:73:1e:aa:3f:31:5f:9d:5b:
         d7:ac:70:0f:8d:c4:46:f6:f7:ae:39:82:fd:4e:19:6a:da:0a:
         d2:d1:da:68:17:2f:a3:a9:b1:03:95:33:2c:be:11:b9:03:df:
         0b:4a:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----