Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File:                     DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier:          FBV9ToF1S7VLq8TGxufcbUcEgiLxgBVA4akK92fx2Ek=
Subject key identifier:   AB:F0:01:3B:B2:B0:BB:E3:C8:9D:9D:AD:F5:34:FC:33:B8:79:76:EE
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       1C9024E8624482C9BF4FF7ED7277417EF44AC6BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number:          0132
Signing time:             Sun 13 Apr 2025 02:19:42 +0000
Manifest this update:     Sun 13 Apr 2025 02:14:42 +0000
Manifest next update:     Mon 14 Apr 2025 03:41:42 +0000
Files and hashes:         1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: zj3ckGloMOIODcQAMNA5/C+oA29Wlb1YNm8P863qyrc=)
                          2: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:90:24:e8:62:44:82:c9:bf:4f:f7:ed:72:77:41:7e:f4:4a:c6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Apr 13 02:14:42 2025 GMT
            Not After : Apr 14 03:41:42 2025 GMT
        Subject: CN=ABF0013BB2B0BBE3C89D9DADF534FC33B87976EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:0c:08:4b:71:d9:88:c6:49:da:36:a6:f3:
                    c9:5e:0e:3b:a0:d5:55:f6:84:ac:82:a4:92:a7:86:
                    42:97:30:d2:ee:fe:41:38:77:88:47:1c:a7:de:d9:
                    51:c1:c9:84:67:7c:64:1c:03:bf:dc:f2:2f:52:ef:
                    37:cd:38:87:89:97:e7:4d:a1:09:3f:58:4e:9a:67:
                    d2:6f:64:a3:67:af:7a:81:8b:78:78:f0:4d:a3:da:
                    66:78:ba:cf:57:96:1f:8d:e6:a0:92:b5:ce:5d:86:
                    b8:5e:77:e0:a1:5a:c6:e5:c0:e0:17:c8:5e:4a:50:
                    11:2b:e1:b1:7c:74:a2:d2:f8:54:23:79:81:ea:58:
                    4e:2d:4f:e8:44:03:4c:3f:aa:ac:d9:cf:da:c8:37:
                    3c:1e:72:72:01:1d:64:22:06:c6:38:1c:e2:a2:aa:
                    58:61:2c:98:a6:90:17:64:2b:f5:6e:02:01:2a:18:
                    50:b6:f2:44:e2:b8:d2:94:8b:fc:d7:16:a6:c5:f7:
                    53:77:04:b3:81:b2:7f:e7:63:82:0b:13:ed:52:e6:
                    ab:fc:8f:56:01:2d:d1:47:1e:1a:90:fb:82:06:4c:
                    2d:1b:4c:47:ed:84:51:67:aa:a4:c4:2d:d0:9c:fa:
                    2a:84:43:6a:f0:ab:65:4b:96:ec:9b:d1:69:4c:cd:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:01:3B:B2:B0:BB:E3:C8:9D:9D:AD:F5:34:FC:33:B8:79:76:EE
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a6:7f:ec:62:04:b6:da:24:12:5f:5c:12:b9:fb:3b:d8:a4:
         bf:ac:46:0a:43:05:a5:3c:15:41:3d:ba:80:e8:bc:05:6d:66:
         56:c0:ad:5b:56:bc:41:ae:41:98:84:6e:3a:bd:12:d0:73:e1:
         b7:5e:1e:30:88:02:a4:79:94:bf:f5:87:2d:2b:72:3b:b1:4c:
         97:fe:69:f3:00:cf:96:38:f3:59:c0:26:ec:94:19:a5:c3:79:
         20:bf:92:88:45:82:d3:7d:84:f5:a9:ee:75:d1:37:02:fe:ea:
         b5:ad:90:09:c0:a4:7b:cd:20:51:9f:63:3f:24:7d:3a:9f:9c:
         d1:ca:b2:40:ae:ea:07:a0:99:76:a8:3e:2a:9a:59:e6:b9:2d:
         bf:ed:00:67:68:d8:f1:6c:26:05:b1:f9:f1:1f:a8:83:29:7e:
         62:21:40:11:1b:a2:78:ae:03:bb:58:9a:da:d4:d2:e1:be:97:
         30:fc:5c:75:77:95:b3:a9:38:b8:f3:1a:53:9a:4d:c8:d6:41:
         ba:21:17:e7:e9:41:3d:c1:2a:db:a1:8f:63:d2:bb:c5:44:c2:
         77:2b:16:19:b2:73:94:cb:f6:7e:84:d2:a2:a1:d9:59:65:00:
         5e:d7:27:c4:31:95:3c:47:1e:34:cb:08:7b:77:c4:62:71:1d:
         0e:a2:70:84
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHJAk6GJEgsm/T/ftcndBfvRKxrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGFiN2UyMGJlYTVjY2I4NGY4MjZjNjRkYTE3NTdkMWRm
NWI2ZmY2MjAeFw0yNTA0MTMwMjE0NDJaFw0yNTA0MTQwMzQxNDJaMDMxMTAvBgNV
BAMTKEFCRjAwMTNCQjJCMEJCRTNDODlEOURBREY1MzRGQzMzQjg3OTc2RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMgwIS3HZiMZJ2jam88leDjug
1VX2hKyCpJKnhkKXMNLu/kE4d4hHHKfe2VHByYRnfGQcA7/c8i9S7zfNOIeJl+dN
oQk/WE6aZ9JvZKNnr3qBi3h48E2j2mZ4us9Xlh+N5qCStc5dhrhed+ChWsblwOAX
yF5KUBEr4bF8dKLS+FQjeYHqWE4tT+hEA0w/qqzZz9rINzwecnIBHWQiBsY4HOKi
qlhhLJimkBdkK/VuAgEqGFC28kTiuNKUi/zXFqbF91N3BLOBsn/nY4ILE+1S5qv8
j1YBLdFHHhqQ+4IGTC0bTEfthFFnqqTELdCc+iqEQ2rwq2VLluyb0WlMzV9hAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUq/ABO7Kwu+PInZ2t9TT8M7h5du4wHwYDVR0j
BBgwFoAU2rfiC+pcy4T4JsZNoXV9HfW2/2IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzAvREFCN0UyMEJFQTVDQ0I4NEY4MjZDNjREQTE3NTdEMURGNUI2RkY2Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJyZmlDLXBjeTRUNEpzWk5vWFY5SGZX
Ml8ySS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03
ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMC9EQUI3RTIwQkVBNUNDQjg0Rjgy
NkM2NERBMTc1N0QxREY1QjZGRjYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaZ/7GIEttokEl9cErn7
O9ikv6xGCkMFpTwVQT26gOi8BW1mVsCtW1a8Qa5BmIRuOr0S0HPht14eMIgCpHmU
v/WHLStyO7FMl/5p8wDPljjzWcAm7JQZpcN5IL+SiEWC032E9anuddE3Av7qta2Q
CcCke80gUZ9jPyR9Op+c0cqyQK7qB6CZdqg+KppZ5rktv+0AZ2jY8WwmBbH58R+o
gyl+YiFAERuieK4Du1ia2tTS4b6XMPxcdXeVs6k4uPMaU5pNyNZBuiEX5+lBPcEq
26GPY9K7xUTCdysWGbJzlMv2foTSoqHZWWUAXtcnxDGVPEceNMsIe3fEYnEdDqJw
hA==
-----END CERTIFICATE-----