Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
File:                     4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft (raw, json)
Hash identifier:          qksDS/uNd8/mhQNOiLriN0387sukPsCf53oNSBinQ8k=
Subject key identifier:   0F:FC:2B:83:AA:42:B4:A3:9A:B1:DA:77:37:DF:44:E4:C7:3F:CA:F9
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Certificate issuer:       /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial:       08B36145C5C99453E9BBFB507D9FCA7643E0C47F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
Manifest number:          51
Signing time:             Sun 13 Apr 2025 10:46:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:41:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:26:34 +0000
Files and hashes:         1: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: 4Gi+kIIUqV5pUjirmODz+ut3Qk0c/1o7NqIqNMEHsSc=)
                          2: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: te+8Q1RQF+/El0aKCot2iG7DWX0UbXJkKUaUr9PfYwE=)
                          3: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: J8io8U0XPUuDsKGS242FyC3RGJyS4nfWqlR7rVI4fs4=)
                          4: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl (hash: +LBqaxpGtycpvaHV1M/tu/SlFVZ2GFmmad210TlbFBE=)
                          5: 326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa (hash: nMz8R5yRV0NhDshW9eqtH+q8ysKGUihhxh8s0gmqFl4=)
                          6: 326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa (hash: McKOo0wjCF+L16RdYNwznvhAMt5vLhEjMFMiKNyOz1k=)
                          7: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: QHn6tZLY5zwuhSPqOA8QQMb0D6GsyTP/mqBIqGqENAM=)
                          8: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: fR50iWKN91zeMKObuJZ1eZa1Tl9ML9P7Lc9Jyq3bDSI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b3:61:45:c5:c9:94:53:e9:bb:fb:50:7d:9f:ca:76:43:e0:c4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
        Validity
            Not Before: Apr 13 10:41:34 2025 GMT
            Not After : Apr 14 12:26:34 2025 GMT
        Subject: CN=0FFC2B83AA42B4A39AB1DA7737DF44E4C73FCAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:94:35:4e:51:68:09:ed:16:49:e9:c0:87:
                    23:b3:e5:02:d9:d4:0a:94:e4:19:8d:b3:e2:12:a8:
                    5a:90:9f:33:cd:83:90:12:07:10:3d:95:bc:60:e0:
                    63:4d:12:e0:32:12:64:22:6b:da:82:f8:35:65:44:
                    00:f7:cf:b6:5c:99:c2:46:66:8f:53:62:b6:c9:2f:
                    f3:95:7e:64:9f:14:2a:e0:7f:ec:25:07:c8:18:69:
                    83:37:6d:ad:a4:9c:19:de:41:96:9d:53:15:aa:1f:
                    49:38:1e:10:96:f8:44:a7:f2:83:d0:96:d2:76:81:
                    c5:e8:53:f4:31:74:13:61:78:d5:a0:78:b2:85:32:
                    1f:6e:71:95:80:f5:3a:d2:cb:fc:7d:4a:f4:77:fe:
                    c5:5f:fb:38:3a:ef:fe:01:92:d9:e5:f6:d9:70:ce:
                    ad:71:68:d3:9d:51:a9:d5:89:6f:e9:f6:6a:07:20:
                    ea:ca:ae:ea:30:77:b5:96:f4:2e:12:57:7e:f6:71:
                    43:09:b7:a3:d3:ca:0a:df:a2:70:50:45:ae:a5:09:
                    9a:c1:bf:d6:30:e3:0e:67:6d:a5:a4:e0:53:57:97:
                    fd:30:7b:78:dd:ba:c3:5f:70:2f:4e:ab:fa:58:5d:
                    ae:64:3e:64:0c:19:cf:3a:15:9c:82:34:4d:44:a9:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FC:2B:83:AA:42:B4:A3:9A:B1:DA:77:37:DF:44:E4:C7:3F:CA:F9
            X509v3 Authority Key Identifier:
                keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:02:ba:88:38:f6:51:2e:1a:25:0b:19:26:c6:5d:a9:3b:
         8f:41:a1:6d:09:30:c8:f2:9c:b5:ef:6b:b7:5d:11:77:f4:8c:
         00:97:1f:17:cf:e1:b8:ee:96:83:fa:9a:96:74:8a:a3:90:f0:
         0f:93:bf:4b:26:84:c0:78:72:af:ad:09:e1:7c:5f:1c:15:d8:
         69:b3:cb:11:f0:af:58:b8:e7:6d:1d:2c:fd:79:1e:87:a4:b3:
         22:e9:7d:5e:68:9e:61:24:ff:cb:32:fa:69:44:15:fe:5a:73:
         e5:33:16:2e:6a:7f:95:57:76:f5:bd:d2:00:3a:d3:44:f1:37:
         ea:f3:eb:be:a6:e4:03:cd:b9:bc:aa:fb:f8:88:45:9b:88:68:
         63:c0:32:9c:8d:71:46:fa:b2:61:4a:18:a9:28:aa:5a:a7:84:
         47:52:b2:b1:41:4c:a0:d4:c5:d9:7d:0c:c2:3b:84:01:6e:1a:
         00:bf:27:c1:eb:5c:75:81:d7:bb:59:9f:e7:e2:05:5a:24:23:
         5e:17:d6:57:d2:7f:16:b3:3f:d1:b3:b5:d5:54:c5:aa:e8:0c:
         ec:a3:be:57:10:db:1b:93:fb:df:7e:1d:cb:f1:a6:67:b1:70:
         6b:a2:5e:62:55:8b:7b:ee:40:38:e0:1c:1d:b5:d8:f1:bb:28:
         f4:6c:38:11
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUCLNhRcXJlFPpu/tQfZ/KdkPgxH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYy
NEVEMkJCQzAeFw0yNTA0MTMxMDQxMzRaFw0yNTA0MTQxMjI2MzRaMDMxMTAvBgNV
BAMTKDBGRkMyQjgzQUE0MkI0QTM5QUIxREE3NzM3REY0NEU0QzczRkNBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLG5Q1TlFoCe0WSenAhyOz5QLZ
1AqU5BmNs+ISqFqQnzPNg5ASBxA9lbxg4GNNEuAyEmQia9qC+DVlRAD3z7ZcmcJG
Zo9TYrbJL/OVfmSfFCrgf+wlB8gYaYM3ba2knBneQZadUxWqH0k4HhCW+ESn8oPQ
ltJ2gcXoU/QxdBNheNWgeLKFMh9ucZWA9TrSy/x9SvR3/sVf+zg67/4Bktnl9tlw
zq1xaNOdUanViW/p9moHIOrKruowd7WW9C4SV372cUMJt6PTygrfonBQRa6lCZrB
v9Yw4w5nbaWk4FNXl/0we3jdusNfcC9Oq/pYXa5kPmQMGc86FZyCNE1EqXinAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUD/wrg6pCtKOasdp3N99E5Mc/yvkwHwYDVR0j
BBgwFoAUQ4ivYpxwLdqI+muyqVXbjyTtK7wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzQvNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYyNEVEMkJCQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5
ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJB
OTU1REI4RjI0RUQyQkJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi80LzQzODhBRjYy
OUM3MDJEREE4OEZBNkJCMkE5NTVEQjhGMjRFRDJCQkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBL9QK6
iDj2US4aJQsZJsZdqTuPQaFtCTDI8py172u3XRF39IwAlx8Xz+G47paD+pqWdIqj
kPAPk79LJoTAeHKvrQnhfF8cFdhps8sR8K9YuOdtHSz9eR6HpLMi6X1eaJ5hJP/L
MvppRBX+WnPlMxYuan+VV3b1vdIAOtNE8Tfq8+u+puQDzbm8qvv4iEWbiGhjwDKc
jXFG+rJhShipKKpap4RHUrKxQUyg1MXZfQzCO4QBbhoAvyfB61x1gde7WZ/n4gVa
JCNeF9ZX0n8Wsz/Rs7XVVMWq6Azso75XENsbk/vffh3L8aZnsXBrol5iVYt77kA4
4Bwdtdjxuyj0bDgR
-----END CERTIFICATE-----