Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File:                     CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier:          VRI8aJo74pxpsjXOAl6+4Nafkd4GFGBv6D9L+/3IDT0=
Subject key identifier:   A8:85:E4:59:78:C2:D6:B8:EC:07:32:58:C6:78:5D:A7:5C:26:38:99
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer:       /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial:       4E8FDDACB9A328D5C53A65833EB254310995DB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number:          A2
Signing time:             Sun 13 Apr 2025 13:47:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:42:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:57:45 +0000
Files and hashes:         1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: YJXP7hrbcNnlbZGYl+Lq/3KaNusd8xWfy3kGeAeZVww=)
                          2: 38352e3139332e37372e302f32342d3234203d3e20313337353137.roa (hash: ANBAip94aJgKBvYU6JmgV2jssU1VZukeD0JC5Y7qLUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8f:dd:ac:b9:a3:28:d5:c5:3a:65:83:3e:b2:54:31:09:95:db:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
        Validity
            Not Before: Apr 13 13:42:45 2025 GMT
            Not After : Apr 14 14:57:45 2025 GMT
        Subject: CN=A885E45978C2D6B8EC073258C6785DA75C263899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:9c:7b:60:d8:b6:25:e9:13:30:21:57:52:
                    ce:0b:93:1e:6d:51:2c:0f:f2:40:fb:d7:65:9d:bd:
                    f2:01:f4:dc:2c:97:35:e9:55:82:b4:95:4d:4c:c4:
                    9d:55:a5:8e:02:75:d3:39:e6:78:a3:7c:68:28:d8:
                    cd:cb:08:58:02:14:23:ec:c4:79:1d:a4:f0:9e:72:
                    ae:1c:38:8d:d2:4a:a1:cf:dd:03:56:e7:7b:83:06:
                    61:3b:ed:32:f2:3d:8f:ea:49:39:a2:9d:c4:ed:7b:
                    48:5f:0b:3f:70:14:98:1a:aa:82:16:92:06:9c:81:
                    08:23:e0:06:db:be:53:05:1d:8b:b9:84:c5:72:36:
                    3b:a9:98:b8:e2:38:91:8c:53:ee:f9:b5:7f:52:87:
                    b8:0a:5f:e0:0e:13:62:52:a8:b3:84:12:ce:d3:10:
                    55:59:6a:55:96:94:bf:72:c1:5f:95:2f:4a:f1:cb:
                    75:f5:a1:e8:ef:07:af:c4:80:81:39:a8:78:1f:b0:
                    fb:32:a8:85:28:7d:2e:3b:9c:af:75:08:1d:3a:ef:
                    28:c0:50:79:8c:9a:67:a2:d0:7a:e8:fd:9f:b1:2c:
                    7e:e3:3b:e6:cf:9c:bb:9b:c9:d9:f6:70:73:c9:3d:
                    f7:3f:1b:7a:1c:31:2c:5f:ad:47:6c:71:32:76:bb:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:85:E4:59:78:C2:D6:B8:EC:07:32:58:C6:78:5D:A7:5C:26:38:99
            X509v3 Authority Key Identifier:
                keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:5a:ff:67:17:90:78:a6:84:aa:18:ba:07:bc:31:53:87:
         c8:0a:8c:65:a1:19:e9:55:5d:d4:b7:3e:01:d1:b9:50:06:c3:
         55:8b:d6:83:12:eb:01:46:53:e8:90:c7:e2:17:9d:d0:1a:f2:
         59:54:e8:9f:01:0a:46:da:89:30:b2:a1:5a:e4:60:30:54:f4:
         16:0f:da:14:08:25:b2:69:49:b7:b1:61:68:1a:ac:db:d5:0e:
         ff:c6:b4:87:0f:c3:da:00:44:25:3b:ca:14:4a:3f:a6:c0:23:
         ca:f6:ae:a9:6b:63:05:a9:95:66:d6:e2:90:af:80:d2:e7:d5:
         5a:51:96:be:87:d2:4b:25:64:9b:31:87:f6:2b:e0:6d:56:4d:
         1d:52:81:01:3d:64:b4:f2:c2:91:aa:ed:fd:88:77:14:1b:50:
         0b:16:70:d6:fd:72:da:06:da:87:24:54:42:c6:3f:32:02:6e:
         e3:b3:e2:be:12:dc:f2:40:ce:65:30:34:f8:3d:3c:87:2b:3d:
         71:92:e5:d1:b2:57:f4:ae:24:eb:90:fb:a8:15:26:fc:72:2d:
         f8:fb:0e:62:81:74:46:46:2f:9d:87:ca:27:c4:86:e9:45:bb:
         63:a2:6b:f2:e9:f0:3b:6c:67:95:f3:bf:74:22:a5:98:d9:21:
         a7:be:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----