Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft
File:                     ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft (raw, json)
Hash identifier:          tROTlHvzWsz0jDKVfl2r/Jqko6D8lDaQub0kYdYS2ag=
Subject key identifier:   50:1C:D6:19:99:44:2E:A1:A4:D1:41:AE:CF:D5:FE:76:32:03:1B:18
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Certificate issuer:       /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial:       6ABC0EE4AF60BD20E8DB3F9C35D72C5AC6BD1F5A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft
Manifest number:          5C
Signing time:             Sun 13 Apr 2025 05:48:23 +0000
Manifest this update:     Sun 13 Apr 2025 05:43:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:52:23 +0000
Files and hashes:         1: 326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa (hash: 9NYGqo2Ls6hbV6+1P7vXYDKtF8hmmGEM+wvhFByd8+4=)
                          2: 326130613a363034343a363430393a3a2f34382d3438203d3e20323134323233.roa (hash: eCEK+yM9jVZwcza/zKNUCq6Q/P7RdirvvA3W3giolog=)
                          3: 326130613a363034343a363430383a3a2f34382d3438203d3e20323134323233.roa (hash: qtaVVllap8QfA9Nfp3H+glqc4pf+903yRwgdMDsmuxs=)
                          4: 326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa (hash: 9lwecFjUgWAR1jqPOIwIBIuw9i2A3sNTOuf6ZF50tpM=)
                          5: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl (hash: pPwU1RsPTMV67ARCD5rCtFC4QFXBrcQquY64A1ZByV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bc:0e:e4:af:60:bd:20:e8:db:3f:9c:35:d7:2c:5a:c6:bd:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
        Validity
            Not Before: Apr 13 05:43:23 2025 GMT
            Not After : Apr 14 07:52:23 2025 GMT
        Subject: CN=501CD61999442EA1A4D141AECFD5FE7632031B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:6e:c3:be:fc:5a:3d:9a:b3:5d:df:12:af:
                    3c:fb:d8:6a:28:36:49:a8:50:32:dc:1e:b8:ef:66:
                    41:1c:de:66:50:28:7d:be:b8:a9:82:30:fc:38:d1:
                    6c:bc:b2:0d:95:4f:48:07:4e:14:af:7b:79:c0:84:
                    ba:10:60:fa:fb:cf:07:72:ec:12:3b:a6:4d:8e:84:
                    50:23:75:35:82:23:be:40:22:ad:86:dc:7f:26:92:
                    75:ff:3b:83:3a:21:8b:f5:27:69:2b:29:d3:fa:da:
                    82:3d:d4:ae:94:27:52:76:b0:3c:03:7d:e1:5d:56:
                    3b:de:68:6c:bf:4b:a9:2f:3e:34:32:02:df:8b:47:
                    75:9f:75:ee:c0:c6:87:77:e4:85:f9:5e:fb:8b:dd:
                    d4:8e:f2:5b:ae:e0:a8:e0:7b:ce:6e:9f:85:ff:73:
                    ad:97:77:c1:9e:c8:6a:46:d4:f1:6e:a3:6d:f8:08:
                    b1:0a:a5:c2:87:87:2d:7e:e7:d5:89:cf:4e:e2:da:
                    36:05:4a:83:12:0c:ac:47:05:cb:ec:c1:ae:32:ae:
                    40:50:6e:cf:6b:49:a7:bd:a0:f9:26:d6:3f:67:9c:
                    ab:1c:d1:f0:82:d9:3e:49:5d:d1:d4:d0:db:57:39:
                    b3:3a:c1:de:7f:33:9c:45:94:c6:60:a6:cd:bf:d9:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1C:D6:19:99:44:2E:A1:A4:D1:41:AE:CF:D5:FE:76:32:03:1B:18
            X509v3 Authority Key Identifier:
                keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:d4:38:1b:9f:b8:ed:e1:08:e7:47:e6:69:e3:1a:f4:c7:
         c3:ad:98:4f:8c:4f:e2:4d:1e:0e:ef:88:5a:db:c0:1d:07:d6:
         f8:b8:c3:a0:4c:9a:2b:13:1c:be:5e:3b:91:ad:1b:87:f8:78:
         c0:cf:b0:8b:0b:bf:49:da:28:bc:60:40:c9:a4:5a:8c:84:3c:
         9d:21:0a:43:34:ec:c1:56:59:28:4f:b3:ff:20:bf:f5:4d:f5:
         61:2e:9f:97:95:23:20:eb:7a:77:a8:32:21:f5:f9:32:fd:92:
         f7:40:e3:15:7f:98:63:35:2e:9a:6f:cf:81:59:26:c9:6f:3b:
         60:83:c5:ab:6e:94:21:50:05:aa:77:65:3f:da:f1:ff:4e:96:
         5d:7f:a3:cb:10:4f:5f:c9:07:c5:7b:65:40:f3:a7:c2:aa:09:
         6a:ef:3e:1d:7a:58:55:f3:cc:0f:c1:eb:02:8d:ff:4c:41:e0:
         6c:1d:0b:0d:b5:3e:92:53:de:00:2c:ae:f5:fe:56:ff:cb:74:
         74:87:54:80:ac:3e:36:0b:58:cb:82:00:67:f6:7d:3f:f9:3b:
         32:46:d5:d6:ed:06:12:54:53:f8:20:d4:f9:76:71:b0:7d:43:
         74:f1:95:48:e2:9a:6e:b0:d2:ae:64:be:01:51:ad:2e:9e:02:
         a6:50:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----