Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File:                     A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier:          YiyIrP7R7KTOiYFWfww7eCZgsEXNQHH4aArzdDzbBKc=
Subject key identifier:   52:7C:10:A6:A5:04:A7:81:67:DD:95:44:C7:F0:32:B9:56:41:77:17
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer:       /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial:       0161C51F4960ECEBFE1F3FEE72FFF2B4A46B6381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number:          04C9
Signing time:             Sun 13 Apr 2025 01:02:54 +0000
Manifest this update:     Sun 13 Apr 2025 00:57:54 +0000
Manifest next update:     Mon 14 Apr 2025 03:17:54 +0000
Files and hashes:         1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: QXVY0lpbYuTYtrSt67NOEjtStwlnkfCFUKVfFJyI6uk=)
                          2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:61:c5:1f:49:60:ec:eb:fe:1f:3f:ee:72:ff:f2:b4:a4:6b:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
        Validity
            Not Before: Apr 13 00:57:54 2025 GMT
            Not After : Apr 14 03:17:54 2025 GMT
        Subject: CN=527C10A6A504A78167DD9544C7F032B956417717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:03:ef:e6:0a:1b:33:b6:f3:07:b6:ff:81:
                    42:2c:28:6f:4b:70:8a:75:58:0d:53:27:4d:ff:b1:
                    97:92:81:ff:0b:5a:51:5b:df:27:07:c1:bb:35:50:
                    b6:4b:f9:44:2d:f7:50:26:c5:47:35:83:ad:9b:a2:
                    58:0f:d6:15:16:6f:12:6c:a7:65:83:a2:fb:9e:5a:
                    49:89:ed:46:a1:a1:13:af:e4:e0:b5:49:be:59:d6:
                    50:fc:6d:3c:df:6a:9d:85:ea:a3:62:66:b9:17:bf:
                    a9:12:78:40:ca:70:fe:ae:13:41:6e:16:b2:5c:17:
                    8b:b4:a9:7b:bf:4d:56:6c:b5:c6:fd:e1:3f:16:39:
                    5c:92:9c:7d:22:a9:54:0a:b5:10:38:49:0f:bd:31:
                    2a:4e:dd:e8:b5:fe:4e:a3:7f:2d:c9:44:8d:7e:54:
                    0b:f9:34:ee:68:19:58:3a:69:0f:09:6c:e1:6e:bd:
                    32:10:44:23:30:a1:6d:cf:cc:e0:e0:9c:5e:02:a1:
                    46:2a:e2:70:39:94:f2:67:6a:45:a7:cf:5f:ce:41:
                    a2:5e:9c:f5:94:a9:65:22:d0:14:f8:53:53:19:f2:
                    40:93:12:86:d7:cf:b0:2d:03:e8:41:80:c1:a4:e3:
                    c1:43:28:0d:4b:c4:81:db:d6:ff:8a:34:0b:24:ae:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:10:A6:A5:04:A7:81:67:DD:95:44:C7:F0:32:B9:56:41:77:17
            X509v3 Authority Key Identifier:
                keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:39:ac:91:52:82:69:d8:ba:a7:98:9a:53:e2:50:07:12:2f:
         7d:2a:96:af:b6:1a:ea:6c:35:3c:72:32:16:0a:78:1e:ea:b2:
         60:21:eb:f5:6c:f1:f8:8d:15:64:24:04:54:9b:55:3f:a0:88:
         fb:b7:3e:ac:ed:73:e1:2c:6a:29:4a:69:82:ed:24:8f:7d:51:
         30:c5:f0:d7:95:17:e5:9a:36:73:a8:d2:b1:50:e3:76:e2:2c:
         0d:9b:49:5c:94:94:0d:8c:95:4c:f5:9b:a9:66:58:22:d8:1e:
         6c:d4:7c:06:2a:bb:0f:57:44:aa:e0:6d:35:e5:20:ee:db:f8:
         a7:78:b5:24:76:a9:ca:fb:52:00:57:cc:88:a5:2b:be:10:bf:
         af:cf:70:2d:da:bb:27:3d:ac:7b:bf:2c:17:dd:e7:19:5b:b5:
         3f:fb:05:29:45:61:ab:d9:1f:ec:11:8c:80:a1:5b:dd:16:7e:
         54:57:e2:7f:59:9a:00:92:b6:ae:19:36:4b:93:6d:ef:2a:56:
         f4:7e:2f:71:8e:39:73:d2:e7:9b:a8:13:77:56:83:74:f2:cf:
         27:31:33:d2:42:8c:8c:2e:53:d7:97:30:70:f4:9b:7c:a0:58:
         a0:e7:cf:64:36:80:49:c9:ed:25:71:d2:45:f7:4a:a2:1d:12:
         7f:01:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----