Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft
File:                     1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft (raw, json)
Hash identifier:          SMzr7xnU0Tb9PJ6lve4nXFT6i5TfA2DroM4QxVDinO4=
Subject key identifier:   D1:B5:83:8E:33:3E:3C:A4:18:A4:C6:08:F8:A3:82:99:4B:CA:35:48
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Certificate issuer:       /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial:       6D7CEEEA9288FFCCAD409C7F9D7ED3D04798A34A
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft
Manifest number:          02D1
Signing time:             Sun 13 Apr 2025 06:19:13 +0000
Manifest this update:     Sun 13 Apr 2025 06:14:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:27:13 +0000
Files and hashes:         1: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: E/OJJsH8vRLWk7ObLOrajKk/aVne0/9cuXNyPD2i5xg=)
                          2: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: R8rTJIYEOHmNtQ+W65HlVcJr9EAiC7WNdRoszOqVDfk=)
                          3: 326130353a646663313a383531313a3a2f34382d3438203d3e20323136343535.roa (hash: Lfg3mHt7cy+TUJoGs7HICBQr97boLuR2prHw+KIv6RY=)
                          4: 1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl (hash: mB15PQW+boB0OZ2RZi+ApX15jFTfqsjPElLi/p6cy6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7c:ee:ea:92:88:ff:cc:ad:40:9c:7f:9d:7e:d3:d0:47:98:a3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
        Validity
            Not Before: Apr 13 06:14:13 2025 GMT
            Not After : Apr 14 07:27:13 2025 GMT
        Subject: CN=D1B5838E333E3CA418A4C608F8A382994BCA3548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:83:b7:59:9d:52:c9:d5:f3:c1:2b:8c:f8:
                    7a:20:c2:d7:23:73:8c:4a:9f:12:2c:85:82:21:1f:
                    34:96:cf:13:8f:b5:1e:3c:01:9b:a7:52:5e:5e:8e:
                    60:7b:27:41:fe:43:2a:72:d1:4f:1d:e2:0e:a5:83:
                    4a:41:95:6e:ef:aa:85:5a:c7:9f:9b:e7:94:64:29:
                    e4:74:42:f6:56:fd:14:d0:8c:47:8b:8c:9f:52:8a:
                    0a:44:de:53:e3:79:31:ed:bb:ec:e1:0a:37:bc:5a:
                    72:eb:a5:1b:02:1f:6f:00:7e:05:41:78:c5:92:8b:
                    71:b7:02:62:41:fd:53:06:5d:7d:eb:6e:8c:44:a5:
                    d3:f2:7c:8b:4f:ce:7a:d9:66:2c:68:ac:80:89:6b:
                    f5:58:b1:6d:f8:1a:24:88:9e:6c:a1:d4:45:ae:24:
                    98:80:80:20:56:b3:15:b3:3c:39:6e:03:e3:ef:6e:
                    48:7d:6a:0e:00:59:52:7d:68:98:29:04:3d:79:2c:
                    17:ab:24:8e:51:ee:2f:05:4c:af:08:12:4c:f5:2e:
                    5c:e4:fb:d9:a0:a4:ad:61:65:8d:70:78:50:85:84:
                    43:04:15:d3:7d:a5:d1:b6:a3:e7:94:e7:4e:0f:21:
                    49:b0:87:15:53:6a:a9:1a:b5:3b:c8:e4:b2:90:85:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:83:8E:33:3E:3C:A4:18:A4:C6:08:F8:A3:82:99:4B:CA:35:48
            X509v3 Authority Key Identifier:
                keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2e:26:4e:81:73:e3:ce:79:10:53:33:23:3f:fb:67:a5:86:
         41:c8:2e:df:b7:5e:67:54:76:fc:5d:da:20:63:79:a0:13:f2:
         e6:07:f6:9b:1c:f7:71:2a:8d:b2:d5:76:30:98:ea:69:e0:d8:
         d3:b3:3e:ff:e5:ab:b7:3f:00:9e:11:66:e1:7f:10:d5:82:d3:
         ae:40:1d:f0:10:e0:65:1a:c3:c7:12:a4:1e:dc:34:2b:8c:ab:
         0f:f1:fe:4a:e2:01:02:aa:13:23:fc:e9:1c:92:ed:d6:7f:47:
         50:48:06:b9:80:ed:a7:af:0d:2f:19:96:47:32:8e:04:24:3b:
         a8:a9:25:d8:89:45:7f:f2:c0:a5:60:5f:0b:62:a4:bc:11:89:
         3e:17:e5:79:05:24:e9:6f:48:b6:82:bc:50:e0:68:25:0c:6c:
         69:de:33:9d:c2:cc:29:56:9d:02:39:0b:af:4c:59:b3:3b:40:
         9a:54:87:3e:c6:bc:5d:db:48:13:f4:f7:91:43:32:f6:86:a9:
         9d:29:bc:dd:63:d8:0b:1e:db:89:64:7f:5b:ec:46:0c:38:37:
         2b:b5:d8:41:23:a2:fc:ab:e1:d7:16:ad:e4:eb:86:49:7e:8a:
         60:d7:d5:16:9a:c3:9c:27:26:e7:fa:2d:c6:05:11:b6:8b:99:
         41:b5:9c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----