Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
File:                     7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json)
Hash identifier:          2A/8dJqynyhMxHbBRBpr1neQ2j8TAhv7y6KRXmzN588=
Subject key identifier:   C2:B0:3F:57:1C:51:37:0C:95:0D:8A:1F:DE:46:80:D6:1D:C1:6C:F0
Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
Certificate issuer:       /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Certificate serial:       3439B0D3C671BDE243B10455B2D57710076C4751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
Manifest number:          35
Signing time:             Sun 13 Apr 2025 04:18:19 +0000
Manifest this update:     Sun 13 Apr 2025 04:13:19 +0000
Manifest next update:     Mon 14 Apr 2025 04:46:19 +0000
Files and hashes:         1: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: AiP13DNBwIkSFzdQdSir0FYGd4okcKOcyfxhs/nt0mM=)
                          2: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: e607KcfFdnTVYdF+DN+SuEIO4a99akytDXly36lPdYg=)
                          3: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: bGsR+5RlWB67shIeVpz1QNwpCAPKyIXgoOV7T0RQXx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:39:b0:d3:c6:71:bd:e2:43:b1:04:55:b2:d5:77:10:07:6c:47:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
        Validity
            Not Before: Apr 13 04:13:19 2025 GMT
            Not After : Apr 14 04:46:19 2025 GMT
        Subject: CN=C2B03F571C51370C950D8A1FDE4680D61DC16CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:a7:f4:83:46:1e:a9:37:8d:ef:e6:4f:b0:
                    fb:29:4c:bd:1d:99:04:3a:37:39:4a:fb:a6:ed:39:
                    c1:04:2b:7c:6c:79:77:ba:e0:0c:b1:4e:dd:0e:32:
                    ff:10:97:83:8d:21:79:64:c1:21:3f:54:cd:a0:f8:
                    7f:ab:48:dd:2f:2b:59:13:68:a0:09:83:b1:8d:53:
                    96:2d:06:ba:e6:8c:a9:3e:9b:42:de:33:50:8a:09:
                    84:c8:b8:62:b5:74:c9:16:30:5a:2c:e0:55:5f:f3:
                    a7:48:7f:c0:de:64:18:2a:3a:3a:2f:82:5d:80:b3:
                    cb:51:8d:e6:3f:8b:a8:38:26:7e:dc:42:5a:97:d6:
                    4c:5a:5e:a0:f5:6f:43:36:2b:58:ba:1c:c4:07:c1:
                    9a:1f:48:17:fc:d4:31:ac:14:a9:ad:9c:1a:e6:7b:
                    95:65:c4:d1:df:d0:de:db:cf:18:ff:7b:8c:f4:3c:
                    9e:59:23:94:f0:22:59:73:aa:c0:3f:4f:3c:4f:c1:
                    24:20:80:d5:bc:87:11:a1:ec:9c:65:0c:25:9e:9e:
                    04:98:0a:ce:a5:11:0f:4a:3b:bd:3a:c1:7b:e4:eb:
                    85:e5:83:26:b1:0f:ba:12:60:62:59:08:f1:d3:8a:
                    a2:dd:8d:c1:a6:50:48:a8:97:79:29:7b:54:19:9a:
                    6b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B0:3F:57:1C:51:37:0C:95:0D:8A:1F:DE:46:80:D6:1D:C1:6C:F0
            X509v3 Authority Key Identifier:
                keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:5a:a8:ea:cb:f0:f3:38:4c:07:4f:1a:df:29:8f:df:d5:
         40:2b:37:72:65:26:ea:13:97:b5:c8:7e:08:f7:87:0f:1e:2d:
         82:b6:39:42:58:30:07:cd:ae:48:38:f9:bd:91:6c:21:8d:26:
         24:b2:62:cf:5b:1a:18:d0:89:c0:ed:84:12:d2:21:f5:9e:38:
         d0:7d:cb:3a:38:4c:cc:1a:f0:bc:50:d4:be:54:7e:a9:8f:f0:
         4d:d9:a5:8e:48:a7:fa:e0:a3:1e:0a:56:8e:01:f8:e9:b2:ad:
         ec:15:d5:12:a3:07:f6:03:e3:b1:45:4a:51:bb:18:c4:62:4b:
         31:bd:fc:51:41:a0:11:c2:94:02:01:af:bc:53:1c:47:8b:88:
         3f:ee:ad:18:d3:12:a3:60:f8:c5:8e:39:26:7a:98:d5:f9:cf:
         29:9b:ee:59:5f:d6:4f:5c:71:5c:ed:cf:ed:44:99:6d:c6:c5:
         62:ba:68:2a:5d:9b:72:8c:fd:ee:f1:e8:a1:2f:7b:d7:07:c4:
         1b:12:1b:26:47:6b:89:07:e2:2b:f3:6f:8e:95:b7:04:8c:64:
         e8:43:06:4b:b9:3e:4a:26:22:e8:db:61:32:28:23:c5:27:0d:
         47:2d:16:11:d7:11:00:b3:ac:16:f4:81:06:d9:ad:9e:6e:38:
         61:96:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----