Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft
File:                     A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json)
Hash identifier:          NYuRQ5fgM6z51ovabMHFNn05vEsV62V232xYiCMr5Us=
Subject key identifier:   57:A6:5E:75:1C:76:01:33:68:F9:DA:53:FD:B8:B2:9F:B1:3A:BA:08
Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5
Certificate issuer:       /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
Certificate serial:       2E0006BE30DDE8746EAA02CA447B75917B651511
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft
Manifest number:          02CD
Signing time:             Sat 12 Apr 2025 23:59:13 +0000
Manifest this update:     Sat 12 Apr 2025 23:54:13 +0000
Manifest next update:     Mon 14 Apr 2025 01:19:13 +0000
Files and hashes:         1: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: z8C+xL+V4mvffDmIFmqtxZ+lgb64lxzBZeQv1/L5SA0=)
                          2: 326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa (hash: WgAgPO7m2PRtW/hhLgCh/LUbstT+o0+84QgZ+UQ8JTY=)
                          3: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: qaHIJSPkxJsqQxmrUEOF/0vyCpR/vYUBJ2KiKF+IkLk=)
                          4: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: Ba5xfWqOndYVE5HvV9FAMJv5ExmemcLNBu1Yv2cHUgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:00:06:be:30:dd:e8:74:6e:aa:02:ca:44:7b:75:91:7b:65:15:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
        Validity
            Not Before: Apr 12 23:54:13 2025 GMT
            Not After : Apr 14 01:19:13 2025 GMT
        Subject: CN=57A65E751C76013368F9DA53FDB8B29FB13ABA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:d5:16:8d:9d:53:42:79:57:8e:a2:0e:18:
                    5b:f4:7d:e0:c2:fe:ec:b0:53:49:56:35:b1:d3:c5:
                    60:46:e1:0f:82:40:7a:73:fe:a7:0f:36:41:a3:ae:
                    46:44:24:f1:a4:0c:66:db:f4:22:fe:85:78:de:75:
                    5c:23:5d:d3:07:20:d2:d1:d4:b3:7a:40:c3:06:1f:
                    72:b5:d8:34:84:a0:55:35:a8:5b:f1:ae:93:39:2e:
                    6d:52:55:11:60:bf:bb:94:9f:c4:c3:f6:f3:57:06:
                    4d:97:48:6c:4f:9b:12:e0:a2:a5:7b:c5:e8:42:d0:
                    60:43:13:4d:c0:25:5d:6a:8b:d3:2e:1f:34:2c:bf:
                    64:d1:ae:f9:bb:11:44:f2:3d:fc:84:9b:df:7d:67:
                    9d:79:70:8b:37:31:9d:c3:67:5b:7c:f9:83:3f:d9:
                    c4:4d:ba:af:df:30:46:1d:24:10:ce:da:d9:f6:fb:
                    11:d8:69:d8:2d:13:d1:e5:0a:c6:fa:34:df:c5:c0:
                    0d:76:4d:cf:e6:bc:26:5b:e6:41:0c:30:cb:25:aa:
                    b3:d0:ab:a6:4a:67:48:dd:d4:28:bc:dc:b8:90:fd:
                    b8:9c:36:1d:aa:4f:fc:2a:99:51:63:f2:18:ed:02:
                    a8:fe:ba:79:01:d1:12:66:8f:b4:d1:35:10:af:2f:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:5E:75:1C:76:01:33:68:F9:DA:53:FD:B8:B2:9F:B1:3A:BA:08
            X509v3 Authority Key Identifier:
                keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:07:0e:51:0e:d6:61:4f:8a:2e:16:3e:ba:d5:59:e0:c3:fa:
         db:7c:74:44:49:06:8d:b9:c2:90:e0:3e:69:18:d8:84:96:54:
         23:c5:12:a7:41:86:14:2b:d8:70:50:43:e1:03:a9:0e:53:33:
         4d:6e:cb:35:06:1d:f1:28:e6:3b:b1:a2:c4:6d:7f:c2:e0:61:
         ec:6c:fd:7d:0e:c6:7c:9b:9e:27:03:17:71:a5:0e:c5:fe:5d:
         62:f7:02:90:70:c7:b0:97:7a:18:da:1c:f9:86:3e:f8:4b:e8:
         d4:95:66:fe:ca:68:92:04:ea:76:99:77:67:89:f5:b6:64:af:
         81:e8:52:ff:2c:5d:a4:d7:5f:84:7e:36:60:98:bd:77:9e:e7:
         58:00:a1:59:07:6d:74:eb:44:fa:78:3c:22:be:7c:d4:8b:db:
         33:c0:b3:a8:9e:bb:55:4a:ce:5c:56:66:46:cd:13:72:36:a1:
         c6:78:5c:4f:e4:96:d8:ad:b2:3e:0b:4c:41:c6:2b:6c:cf:43:
         ff:b5:fc:09:d7:13:9c:bd:77:e2:0e:0c:12:a1:15:06:c6:c8:
         44:f4:57:76:ab:7d:38:73:f0:62:ad:25:a3:03:08:25:55:7f:
         bc:44:f8:3d:d5:6e:dd:96:23:63:fe:86:b6:c0:85:3e:df:20:
         44:ae:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----