Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
File:                     8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json)
Hash identifier:          0Z1zqx7jCqSiLyhF6zAPCSyC7U8BjJ0zq5Sbd+YPR3w=
Subject key identifier:   B0:68:8C:21:04:F6:CB:27:88:49:B5:E5:DD:C4:34:7C:E9:80:F0:76
Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
Certificate issuer:       /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Certificate serial:       2C9F71B52F8E959DD4B2A958ED7C260E693FDE31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
Manifest number:          026D
Signing time:             Sun 13 Apr 2025 12:11:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:06:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:42:37 +0000
Files and hashes:         1: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: yY/lRzl5gnRHqPDCI9XTmjkP/VSTS3sUgvtQRFCF6ig=)
                          2: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: IJr5CBZ4iO0h6IlIR+qADhOt/NMtQJ1etkNPbekFk9g=)
                          3: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: amyqCToWlkncShbPoQ2pFwGosgXS9k+x9sD0wwW0zJ8=)
                          4: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=)
                          5: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: fDFzLRJv55AJspV5Qdp2D13EQBsvFd3texx23TY7/pw=)
                          6: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: WZdnhsf1tbcSVNSrkJIR05RIfLe917aOhwfRnEAl4rg=)
                          7: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=)
                          8: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=)
                          9: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: lWYjZQ5Ld8qxedFHjd1SYJ3EjXIlTQ1TnJV4koI7Bc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9f:71:b5:2f:8e:95:9d:d4:b2:a9:58:ed:7c:26:0e:69:3f:de:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
        Validity
            Not Before: Apr 13 12:06:37 2025 GMT
            Not After : Apr 14 14:42:37 2025 GMT
        Subject: CN=B0688C2104F6CB278849B5E5DDC4347CE980F076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:8a:e2:de:eb:d5:7a:d0:20:46:61:a9:56:
                    c8:98:95:7d:6c:8a:5a:0c:19:dd:35:4c:9a:44:e1:
                    6b:7c:c0:46:9f:e9:b9:72:a1:e0:17:ea:b4:0f:03:
                    75:65:db:64:e3:64:9d:23:41:c9:ad:af:72:f1:f2:
                    c2:b9:a6:61:49:c8:77:c5:b9:4c:a3:10:00:e8:aa:
                    62:cc:8a:0f:39:14:8c:b3:c9:c7:5d:27:52:d2:a4:
                    37:98:50:33:3f:6b:97:a5:36:93:3b:2c:07:4f:0e:
                    ac:e2:83:07:58:b5:75:f6:ec:9e:c4:56:38:86:a9:
                    d7:c3:5b:01:b8:2b:d4:d7:ef:95:6c:39:7d:92:84:
                    d0:c3:a5:78:a9:7a:aa:dc:ad:ca:06:a9:34:ae:d6:
                    f0:3c:c6:df:57:09:77:49:b6:07:0d:e3:d0:d2:21:
                    79:9f:cf:b3:b2:66:1d:a6:55:70:30:30:2d:f8:38:
                    75:4e:ae:f6:f5:81:fd:2b:84:5b:59:85:7f:eb:44:
                    87:86:87:bd:85:5a:a1:54:9c:19:31:d1:8b:5e:b9:
                    df:c0:6e:5e:bd:d9:70:9b:92:31:6d:d8:15:46:17:
                    e0:6d:f8:3f:32:9c:e7:1b:86:66:ea:2c:a9:85:e8:
                    11:85:89:70:58:7c:b0:a0:16:b6:60:49:40:45:76:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:68:8C:21:04:F6:CB:27:88:49:B5:E5:DD:C4:34:7C:E9:80:F0:76
            X509v3 Authority Key Identifier:
                keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:69:0a:02:ee:df:5a:a4:ab:da:8f:95:de:5a:51:dd:ef:c0:
         78:ee:fe:6b:b8:16:c9:7c:26:b1:45:08:16:d2:16:a4:94:fb:
         23:16:f2:aa:61:68:f1:da:60:c4:af:3e:4e:5c:56:4a:f5:80:
         98:c2:6e:c3:24:83:6b:ef:dc:f6:1d:6f:51:3f:af:2e:2b:e6:
         b8:e5:86:ca:60:6d:be:76:f1:3d:5d:1c:03:91:87:95:12:ae:
         c1:04:0c:1d:b5:1f:31:fc:74:51:1f:5c:69:8a:e5:53:f4:45:
         21:5b:56:cd:b6:e8:e4:ac:82:98:bc:73:d1:60:f3:aa:22:13:
         ee:43:01:dc:0b:66:ab:c8:74:2c:c5:8f:48:cf:f4:9a:e8:c1:
         ed:83:a9:4c:e6:eb:59:91:55:b4:d5:5d:bc:ae:09:dd:95:36:
         9f:99:4b:9f:8b:f0:b0:63:08:bc:a2:e6:da:6b:be:d2:84:97:
         51:85:ca:67:9c:90:a2:70:eb:82:06:6d:ca:16:25:7f:33:e3:
         78:44:16:3a:93:00:1b:64:8d:4c:d2:89:ac:c0:c9:4b:d0:d0:
         90:b0:74:b4:75:d2:6a:d6:72:c8:52:e8:10:fc:e8:8b:8c:42:
         55:55:33:48:59:c7:83:73:f5:3f:9a:5b:c2:c1:04:b8:05:44:
         4c:8c:86:54
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIULJ9xtS+OlZ3UsqlY7XwmDmk/3jEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5
NkZFQTRGMDAeFw0yNTA0MTMxMjA2MzdaFw0yNTA0MTQxNDQyMzdaMDMxMTAvBgNV
BAMTKEIwNjg4QzIxMDRGNkNCMjc4ODQ5QjVFNUREQzQzNDdDRTk4MEYwNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+Iri3uvVetAgRmGpVsiYlX1s
iloMGd01TJpE4Wt8wEaf6blyoeAX6rQPA3Vl22TjZJ0jQcmtr3Lx8sK5pmFJyHfF
uUyjEADoqmLMig85FIyzycddJ1LSpDeYUDM/a5elNpM7LAdPDqzigwdYtXX27J7E
VjiGqdfDWwG4K9TX75VsOX2ShNDDpXipeqrcrcoGqTSu1vA8xt9XCXdJtgcN49DS
IXmfz7OyZh2mVXAwMC34OHVOrvb1gf0rhFtZhX/rRIeGh72FWqFUnBkx0Yteud/A
bl692XCbkjFt2BVGF+Bt+D8ynOcbhmbqLKmF6BGFiXBYfLCgFrZgSUBFdpPdAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUsGiMIQT2yyeISbXl3cQ0fOmA8HYwHwYDVR0j
BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy
MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG
NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy
LzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJNpCgLu31qkq9qPld5aUd3vwHju/mu4Fsl8JrFFCBbSFqSU+yMW8qph
aPHaYMSvPk5cVkr1gJjCbsMkg2vv3PYdb1E/ry4r5rjlhspgbb528T1dHAORh5US
rsEEDB21HzH8dFEfXGmK5VP0RSFbVs226OSsgpi8c9Fg86oiE+5DAdwLZqvIdCzF
j0jP9Jrowe2DqUzm61mRVbTVXbyuCd2VNp+ZS5+L8LBjCLyi5tprvtKEl1GFymec
kKJw64IGbcoWJX8z43hEFjqTABtkjUzSiazAyUvQ0JCwdLR10mrWcshS6BD86IuM
QlVVM0hZx4Nz9T+aW8LBBLgFREyMhlQ=
-----END CERTIFICATE-----