Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft
File:                     3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft (raw, json)
Hash identifier:          yakaXnrkTV/sszn2UbNBXF4LNnclY1ho//LvngQzq0w=
Subject key identifier:   4D:B6:80:C5:B1:9C:1F:67:5E:69:E3:3B:22:13:88:57:61:98:9B:78
Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3
Certificate issuer:       /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
Certificate serial:       611F69E7B45BBE4812A4E8FA2D7FC522A6F60C97
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft
Manifest number:          AB
Signing time:             Sun 13 Apr 2025 04:05:07 +0000
Manifest this update:     Sun 13 Apr 2025 04:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 04:55:07 +0000
Files and hashes:         1: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: 5+vQb6lOPVb905YmSSgsG+hU/u4KZQA5Mhi2G2NVX+8=)
                          2: 326131343a373538343a346662653a3a2f34382d3438203d3e2036353137.roa (hash: xptTc8UfiLJf//oV4oJOzWfdwqREpi/ly50X2yQ1eVw=)
                          3: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl (hash: DbnvM4cSXBm8Znv2Cwe+uxeRoZ2MufwenLiwsPCl+PY=)
                          4: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: 2LuyqKKWcdoqL1q9FKGl+zX6qwvAs9rBA48b+Sgpn8w=)
                          5: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: o0e/YZFYgXWaWgJ9eaHmXBCXoGTSBaeTvlCQTDkm3+c=)
                          6: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: nIC6lswk91hjl6KPMQ+RZfHgO+0KGr/fDFoPo3gap1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1f:69:e7:b4:5b:be:48:12:a4:e8:fa:2d:7f:c5:22:a6:f6:0c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
        Validity
            Not Before: Apr 13 04:00:07 2025 GMT
            Not After : Apr 14 04:55:07 2025 GMT
        Subject: CN=4DB680C5B19C1F675E69E33B2213885761989B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:10:d3:7e:ca:e9:95:86:5e:86:00:5d:93:
                    5e:df:ce:09:8d:77:54:82:eb:34:76:92:58:95:d5:
                    71:28:ef:e2:c4:92:f2:8d:da:0f:b5:1e:b4:ba:c7:
                    f7:5e:54:e1:c2:c3:e1:0a:7d:c4:5a:8e:32:07:f5:
                    25:94:b0:54:33:87:38:0f:54:72:50:0d:0e:18:f1:
                    b8:c0:63:9c:78:78:2f:34:d0:d3:55:6d:3d:55:24:
                    e7:bd:32:4f:e1:3a:f3:f3:9d:76:98:f9:f2:37:6c:
                    0f:f7:6a:e2:f6:b3:c8:9d:6c:41:7f:a1:e2:14:35:
                    a4:27:78:3a:09:ed:af:71:0e:88:cb:b5:1e:50:30:
                    9c:cc:c2:fb:22:fb:83:d7:03:41:23:2b:27:70:2a:
                    46:79:4f:61:5c:35:5f:22:90:ee:be:7d:3c:0a:3e:
                    05:3f:19:15:22:2c:4f:7c:59:66:6a:44:e3:38:2d:
                    c6:43:4d:59:66:15:95:18:1b:94:bf:b3:97:f2:03:
                    a8:1e:e1:c3:e6:44:49:e6:70:43:5e:90:fb:82:71:
                    96:90:6e:66:e5:1f:50:8f:9c:c0:3e:6a:e5:43:06:
                    d6:0a:0e:a9:0d:5f:cd:d5:31:64:58:63:d7:f6:1b:
                    dd:89:57:0b:21:c4:87:61:65:bd:62:30:1a:07:ea:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B6:80:C5:B1:9C:1F:67:5E:69:E3:3B:22:13:88:57:61:98:9B:78
            X509v3 Authority Key Identifier:
                keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:73:19:f5:59:aa:6b:46:fa:2e:d9:3e:1d:bf:75:92:27:04:
         1e:ba:d4:f9:2c:13:c8:94:41:ad:56:ca:f7:4b:16:d6:ab:6e:
         56:ea:94:b3:d2:8e:39:43:62:52:1f:ee:33:f7:e4:57:7f:07:
         fc:ae:ca:ac:bd:32:6e:75:34:a1:4e:16:fe:6d:bb:76:99:29:
         c6:76:d5:d9:2a:b7:70:a2:8b:7e:89:77:09:f9:cf:b7:3c:e8:
         d2:d1:e1:ee:c8:0d:8f:4d:83:49:2e:1a:7d:60:05:0c:3b:15:
         a1:07:48:54:ca:b4:8b:41:ba:14:73:a6:c5:00:13:75:13:9e:
         ec:b2:62:42:c9:58:fb:ac:32:6c:70:21:19:6f:83:4a:20:49:
         42:34:9d:f4:2d:69:1b:85:c7:fb:8d:ef:c9:5d:40:4e:a6:14:
         10:0e:44:f7:4b:ed:17:b5:d0:4e:d9:98:1c:dd:07:fc:77:32:
         5f:26:42:4b:2b:e0:81:de:6c:26:4d:ac:e9:a0:e3:26:d0:3e:
         15:ed:f9:2d:f1:ce:69:0e:e8:da:ec:5f:7b:84:db:bc:90:30:
         58:84:7b:f5:a0:63:51:40:8b:16:3f:6a:a7:cb:e9:4d:79:ee:
         e1:10:2f:c8:c5:c3:b5:b1:c0:4a:86:ab:eb:ea:b8:8f:e9:70:
         19:e0:f4:2f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUYR9p57RbvkgSpOj6LX/FIqb2DJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4
MkExMjJFMzAeFw0yNTA0MTMwNDAwMDdaFw0yNTA0MTQwNDU1MDdaMDMxMTAvBgNV
BAMTKDREQjY4MEM1QjE5QzFGNjc1RTY5RTMzQjIyMTM4ODU3NjE5ODlCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKhDTfsrplYZehgBdk17fzgmN
d1SC6zR2kliV1XEo7+LEkvKN2g+1HrS6x/deVOHCw+EKfcRajjIH9SWUsFQzhzgP
VHJQDQ4Y8bjAY5x4eC800NNVbT1VJOe9Mk/hOvPznXaY+fI3bA/3auL2s8idbEF/
oeIUNaQneDoJ7a9xDojLtR5QMJzMwvsi+4PXA0EjKydwKkZ5T2FcNV8ikO6+fTwK
PgU/GRUiLE98WWZqROM4LcZDTVlmFZUYG5S/s5fyA6ge4cPmREnmcENekPuCcZaQ
bmblH1CPnMA+auVDBtYKDqkNX83VMWRYY9f2G92JVwshxIdhZb1iMBoH6tRNAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUTbaAxbGcH2deaeM7IhOIV2GYm3gwHwYDVR0j
BBgwFoAUOjvhTQho455D4ntYVnbfW4KhIuMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk
NDdhLzEvM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4MkExMjJFMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zQTNCRTE0RDA4NjhFMzlFNDNFMjdCNTg1
Njc2REY1QjgyQTEyMkUzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8xLzNBM0JFMTRE
MDg2OEUzOUU0M0UyN0I1ODU2NzZERjVCODJBMTIyRTMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7cxn1
WaprRvou2T4dv3WSJwQeutT5LBPIlEGtVsr3SxbWq25W6pSz0o45Q2JSH+4z9+RX
fwf8rsqsvTJudTShThb+bbt2mSnGdtXZKrdwoot+iXcJ+c+3POjS0eHuyA2PTYNJ
Lhp9YAUMOxWhB0hUyrSLQboUc6bFABN1E57ssmJCyVj7rDJscCEZb4NKIElCNJ30
LWkbhcf7je/JXUBOphQQDkT3S+0XtdBO2Zgc3Qf8dzJfJkJLK+CB3mwmTazpoOMm
0D4V7fkt8c5pDuja7F97hNu8kDBYhHv1oGNRQIsWP2qny+lNee7hEC/IxcO1scBK
hqvr6riP6XAZ4PQv
-----END CERTIFICATE-----