Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
File:                     41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json)
Hash identifier:          aBEns77o35rr/kJ40q6AEGJ/ioWuKdyArFnyhVDJ79I=
Subject key identifier:   99:30:53:96:54:3C:08:AA:CA:91:73:4B:31:EF:7D:BF:E1:4F:4A:63
Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B
Certificate issuer:       /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B
Certificate serial:       5B7E8DBBEE0007506091508FF4A65270AF842E4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
Manifest number:          E9
Signing time:             Sun 13 Apr 2025 06:28:51 +0000
Manifest this update:     Sun 13 Apr 2025 06:23:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:02:51 +0000
Files and hashes:         1: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: yvh3UHrLjoEMrimwvBUcjDaMntLBMydBfC5cTS5quis=)
                          2: 326131343a373538353a3a2f34382d3438203d3e20323134343531.roa (hash: 1/nE4baiMVs2LRMXh5sGVXRwRPcJEy8duBZuI+RSScs=)
                          3: 326131343a373538303a623030303a3a2f34382d3438203d3e20323134343531.roa (hash: SuZwoUCzEEGoRhFnO51tkIZKxv3we3OJQ/xM024HKiQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7e:8d:bb:ee:00:07:50:60:91:50:8f:f4:a6:52:70:af:84:2e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B
        Validity
            Not Before: Apr 13 06:23:51 2025 GMT
            Not After : Apr 14 08:02:51 2025 GMT
        Subject: CN=99305396543C08AACA91734B31EF7DBFE14F4A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:d3:ad:ab:ec:80:24:52:f0:b7:8a:0c:4d:
                    23:87:28:29:0c:74:e7:d4:37:81:be:ec:f6:35:3b:
                    ac:ee:d4:1c:c4:d4:66:19:58:88:f1:6e:59:2c:84:
                    c6:bf:86:d6:db:2d:be:51:ed:80:49:78:c9:d7:2f:
                    60:5a:54:db:d6:d8:34:01:6f:9e:75:72:8d:ed:9b:
                    6f:44:cc:d7:5a:b7:56:6d:e8:30:45:60:d2:f3:3f:
                    fa:5e:b6:b3:72:d6:9b:e4:26:1d:9e:14:92:f6:dd:
                    05:b8:41:e3:95:af:45:6d:9c:4e:64:56:2b:9b:ac:
                    ff:42:b1:be:b4:aa:c2:3d:ff:9f:16:1c:e4:d8:b9:
                    47:a4:77:5d:ba:d9:7a:cb:ee:82:4d:3b:dc:78:17:
                    92:b9:38:a3:d8:2c:43:a4:dc:7e:99:dd:ab:fd:25:
                    38:61:6c:8f:b4:8d:92:0c:a1:36:a1:a4:e0:19:b2:
                    69:2d:dc:0c:49:2c:e2:65:c5:e5:f4:4b:fb:0e:66:
                    0d:66:0f:46:34:f5:53:38:5b:ed:4d:75:1c:44:b8:
                    93:87:c0:a6:f3:46:18:72:66:0c:e7:fc:ee:d8:d6:
                    89:0e:78:ea:bc:32:d6:79:8c:8f:79:ee:1c:ef:aa:
                    63:85:37:63:cc:78:f9:2c:af:50:be:79:df:72:3d:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:30:53:96:54:3C:08:AA:CA:91:73:4B:31:EF:7D:BF:E1:4F:4A:63
            X509v3 Authority Key Identifier:
                keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:86:8e:f7:84:56:84:8f:54:b6:82:7c:9f:5a:35:4b:81:89:
         bc:d7:95:d8:1a:45:93:d7:5e:36:9f:bd:7e:58:3d:1a:a7:33:
         ac:3f:68:7d:15:63:0e:80:1b:50:95:3e:03:12:8f:0f:40:6e:
         4c:21:5a:09:9f:bd:98:3d:41:25:93:88:f1:34:a6:68:87:ec:
         c7:65:31:41:4d:fd:d5:8f:be:80:87:7e:a2:ba:3f:bf:98:2a:
         34:6a:3d:2a:d1:bc:da:48:d1:d6:5f:c6:ee:d3:3d:a3:a0:7d:
         22:0c:49:33:8c:12:8b:ba:1b:c6:bb:05:9b:39:69:83:51:0e:
         76:83:b2:1e:fa:47:76:ae:47:ba:4f:91:17:41:a1:7c:1c:11:
         5d:74:08:97:fc:77:c4:a9:55:04:09:c3:2d:fe:8d:69:ae:44:
         2b:df:59:8b:f4:b1:24:d5:1c:48:6c:98:ff:d4:9e:6e:56:1e:
         1a:0f:20:df:3e:be:b4:0d:51:11:42:64:47:68:3e:36:d1:21:
         73:19:d3:15:90:0a:6b:fc:65:8f:60:41:ce:8a:f9:9b:35:aa:
         ce:59:13:cc:c6:3d:47:a1:58:b2:4f:89:9b:65:ad:30:2f:98:
         8c:a5:de:72:c8:c0:29:d2:2a:f7:14:a4:ea:af:c1:d5:74:91:
         e5:2a:b9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----