Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
File:                     F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json)
Hash identifier:          u8JFbmHETtXIOLdSQEjGnSBFLj6k7Yw6Rx2/1YegZfg=
Subject key identifier:   A2:6F:6E:C6:FE:EA:40:07:D1:C1:14:D1:68:83:60:90:34:39:62:B8
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Certificate issuer:       /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial:       712EA5AC75151F36949D2AA06894E71A099CBD55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
Manifest number:          04C4
Signing time:             Sun 13 Apr 2025 00:27:51 +0000
Manifest this update:     Sun 13 Apr 2025 00:22:51 +0000
Manifest next update:     Mon 14 Apr 2025 00:29:51 +0000
Files and hashes:         1: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: u/op1Gb+lh53LhTdxSovsMBPfFi75dye37nTdYVQSh4=)
                          2: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc=)
                          3: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: FiZhudazdk4JOffpdS/pqIMSNyw9YSw6BPKKJ7nvy0Y=)
                          4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2e:a5:ac:75:15:1f:36:94:9d:2a:a0:68:94:e7:1a:09:9c:bd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
        Validity
            Not Before: Apr 13 00:22:51 2025 GMT
            Not After : Apr 14 00:29:51 2025 GMT
        Subject: CN=A26F6EC6FEEA4007D1C114D168836090343962B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:bb:11:5a:37:7b:fb:b9:7d:65:b7:49:81:
                    73:50:92:c8:62:d0:08:dc:b5:51:c0:c3:20:27:e2:
                    70:31:63:19:51:c0:a0:db:83:b3:d6:25:68:ea:c2:
                    74:e1:d9:81:67:08:50:f8:9e:d7:c9:11:66:6a:71:
                    f9:18:36:f3:20:3d:47:19:98:56:34:36:62:6b:d9:
                    ab:1f:d5:d9:93:cd:58:3c:52:c8:0e:a9:52:57:6b:
                    ef:39:98:92:6f:61:90:70:90:e9:21:a0:de:6a:6d:
                    f8:76:49:2e:74:8a:7e:9e:9c:f0:d9:a3:9f:e2:52:
                    b3:3d:b5:a2:01:83:d1:76:7b:14:63:b9:86:de:d4:
                    28:08:54:c6:0e:01:2e:8b:57:a3:12:14:1d:f1:4c:
                    ea:a4:ef:2f:f9:26:de:37:b4:e2:8e:33:9b:27:ea:
                    d0:1b:af:6e:ae:03:f2:e6:ee:f0:4e:41:58:8b:77:
                    b1:64:0f:02:30:92:36:96:ce:01:60:46:bb:25:b3:
                    f0:bd:62:68:9a:fa:45:4d:d4:62:69:48:d1:0a:18:
                    b5:45:54:14:2c:f1:80:c8:fa:c3:1a:eb:7e:66:97:
                    dc:fa:f2:02:6c:9a:89:bd:63:92:64:32:a0:76:70:
                    0c:cc:a9:53:96:32:bc:de:3e:e8:68:6c:e4:50:dd:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:6E:C6:FE:EA:40:07:D1:C1:14:D1:68:83:60:90:34:39:62:B8
            X509v3 Authority Key Identifier:
                keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:c3:7b:25:30:4a:de:22:2a:8f:ba:66:58:b7:a3:e0:ed:
         c9:2c:a1:75:68:da:19:27:be:16:ee:dd:bc:7c:be:b4:ec:58:
         f2:9b:49:86:5c:9b:97:ad:16:28:84:4f:c8:b1:d3:25:2b:96:
         b0:be:91:c9:b6:a7:84:3b:7a:70:0e:45:d0:e7:83:47:09:1c:
         65:11:84:2d:c3:7a:41:5b:a5:c5:3e:ac:45:5e:a5:b5:40:b6:
         2d:84:01:e2:3f:48:02:a6:2e:dd:27:cd:0c:3a:22:4e:db:54:
         2e:16:2c:8f:0b:07:0c:ec:49:82:22:7c:73:0f:12:e7:56:a0:
         4b:17:48:63:90:6a:71:7f:49:3c:a4:d7:3a:aa:4c:47:d0:c1:
         86:73:0b:4c:4b:48:f1:e7:a9:13:4c:69:cf:88:22:9d:cb:4c:
         24:d2:d8:33:48:2f:42:34:b9:86:e4:a2:19:87:ef:c4:83:5a:
         2c:95:d7:ff:87:b1:07:89:66:6f:cf:42:0a:df:c3:d5:ab:11:
         0f:a7:de:67:9d:1e:a2:17:91:af:2f:e8:fe:ed:2b:1f:d4:ae:
         5a:ba:31:26:df:94:34:40:81:3e:dc:4b:96:d0:d8:06:14:5d:
         4e:11:f5:7c:ec:89:6b:8a:6e:3d:31:a9:f9:dc:2e:43:ce:f4:
         dc:c9:c6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----