Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File:                     3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier:          EaX50jfCl4RoHNQyDcRvOAGlI1m0od9+Sha/Xm5j+XQ=
Subject key identifier:   78:AF:9E:48:81:95:78:8B:3F:8A:67:6E:6F:AE:28:C7:BA:3F:FE:A0
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer:       /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial:       460BD733BCA60F1930E76B427E6BAB19A3C2A677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number:          02E4
Signing time:             Sun 13 Apr 2025 01:03:15 +0000
Manifest this update:     Sun 13 Apr 2025 00:58:15 +0000
Manifest next update:     Mon 14 Apr 2025 01:43:15 +0000
Files and hashes:         1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: gfOXNRhGvY8X5Pqf4PYRMQN4UI3ok0HBZwBHkdaFB0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0b:d7:33:bc:a6:0f:19:30:e7:6b:42:7e:6b:ab:19:a3:c2:a6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
        Validity
            Not Before: Apr 13 00:58:15 2025 GMT
            Not After : Apr 14 01:43:15 2025 GMT
        Subject: CN=78AF9E488195788B3F8A676E6FAE28C7BA3FFEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:4e:2e:d0:1e:5c:e7:08:14:0c:7e:4f:88:
                    f6:b6:06:60:39:3f:49:bd:db:a3:29:fa:fb:4a:32:
                    a7:5d:90:9c:f7:d6:e3:10:ac:57:27:5e:16:e7:44:
                    d8:31:c1:8f:f9:1b:dd:5a:b9:2b:15:68:df:32:8c:
                    e0:af:90:cf:0e:6d:08:b3:ee:a2:99:33:a7:2b:15:
                    2f:d4:a3:f6:0a:fe:02:45:fa:f6:b8:35:7e:ca:71:
                    eb:8e:71:d9:8c:47:e0:14:f8:90:a4:f2:ed:ad:d7:
                    63:c7:69:72:1f:69:a2:0d:1f:26:37:4e:ec:5b:bd:
                    58:10:ff:96:ac:19:08:dc:6d:48:71:51:33:5a:f0:
                    10:24:e7:a4:0c:0a:44:34:53:c2:19:88:e0:6e:6d:
                    10:26:a6:a7:f8:9c:6b:d7:be:8a:e7:c7:ed:14:22:
                    2c:41:8a:00:6a:c4:ab:fd:0b:08:5d:c0:cb:b9:1e:
                    ca:ac:a7:12:69:79:2d:b4:82:f3:52:c9:ae:0e:73:
                    d1:8f:48:ad:18:f3:09:83:22:cf:bd:eb:15:ab:42:
                    6d:bb:99:dd:43:a7:59:3d:4d:6a:be:a5:58:16:66:
                    a5:ad:1d:96:16:8b:cd:51:50:6f:60:08:a0:7c:58:
                    49:17:95:b2:5c:49:9f:f0:59:02:71:60:16:95:b3:
                    eb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AF:9E:48:81:95:78:8B:3F:8A:67:6E:6F:AE:28:C7:BA:3F:FE:A0
            X509v3 Authority Key Identifier:
                keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:42:1a:96:f6:0a:14:39:3f:f5:f7:67:30:8b:cb:a8:d5:54:
         f9:00:81:88:46:4c:13:e1:e7:3c:15:a4:ba:2b:08:bf:cd:90:
         56:b5:ab:a5:56:a9:a5:20:2c:ca:ea:9b:e3:1e:a5:f6:bb:90:
         82:22:01:b5:20:1f:dd:55:bc:ce:1b:0a:19:fc:f5:ae:c8:7c:
         94:9f:80:c3:20:d8:ed:3f:76:99:9c:f5:e9:d4:d2:35:09:7b:
         a5:db:c3:7f:76:1c:48:2e:60:32:a3:56:92:1b:d9:92:fc:cb:
         41:fe:7e:c4:4f:89:7e:f4:03:6a:50:11:02:bf:2e:53:b5:7d:
         0c:de:f2:42:c3:42:37:8d:34:27:09:d7:6a:29:46:85:db:06:
         a8:b5:d5:d4:96:16:5c:c9:78:50:1a:47:5c:e0:01:03:6c:06:
         57:38:69:00:22:d2:66:c0:e7:bf:7e:1d:f2:bf:2d:ec:46:e7:
         82:1a:24:a7:4c:b6:52:a1:05:1c:a2:dc:c4:04:14:7a:f1:35:
         56:d9:da:92:4e:36:6d:05:92:0f:82:73:f2:35:cb:62:3f:4b:
         eb:95:2e:ba:88:4f:87:eb:5d:3e:8b:65:f4:06:6e:ff:0b:ac:
         99:d9:1a:0c:1c:39:07:f9:31:be:a0:5a:f2:c6:23:4c:61:15:
         b2:13:c4:ef
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURgvXM7ymDxkw52tCfmurGaPCpncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxMWIzZTZkYWU4ZTBkMWIxNmQ1YmRhZmNkYTNkODM3
MGZmM2JmNDAeFw0yNTA0MTMwMDU4MTVaFw0yNTA0MTQwMTQzMTVaMDMxMTAvBgNV
BAMTKDc4QUY5RTQ4ODE5NTc4OEIzRjhBNjc2RTZGQUUyOEM3QkEzRkZFQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSrE4u0B5c5wgUDH5PiPa2BmA5
P0m926Mp+vtKMqddkJz31uMQrFcnXhbnRNgxwY/5G91auSsVaN8yjOCvkM8ObQiz
7qKZM6crFS/Uo/YK/gJF+va4NX7KceuOcdmMR+AU+JCk8u2t12PHaXIfaaINHyY3
TuxbvVgQ/5asGQjcbUhxUTNa8BAk56QMCkQ0U8IZiOBubRAmpqf4nGvXvornx+0U
IixBigBqxKv9CwhdwMu5HsqspxJpeS20gvNSya4Oc9GPSK0Y8wmDIs+96xWrQm27
md1Dp1k9TWq+pVgWZqWtHZYWi81RUG9gCKB8WEkXlbJcSZ/wWQJxYBaVs+vrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUeK+eSIGVeIs/imdub64ox7o//qAwHwYDVR0j
BBgwFoAUNhGz5tro4NGxbVva/No9g3D/O/QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNj
MWE4LzUvMzYxMUIzRTZEQUU4RTBEMUIxNkQ1QkRBRkNEQTNEODM3MEZGM0JGNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05oR3o1dHJvNE5HeGJWdmFfTm85ZzNE
X09fUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NmJkOTJmMS00
MTViLTQ3NjUtOGExNi1kYmZjNDU5M2MxYTgvNS8zNjExQjNFNkRBRThFMEQxQjE2
RDVCREFGQ0RBM0Q4MzcwRkYzQkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikIalvYKFDk/9fdnMIvL
qNVU+QCBiEZME+HnPBWkuisIv82QVrWrpVappSAsyuqb4x6l9ruQgiIBtSAf3VW8
zhsKGfz1rsh8lJ+AwyDY7T92mZz16dTSNQl7pdvDf3YcSC5gMqNWkhvZkvzLQf5+
xE+JfvQDalARAr8uU7V9DN7yQsNCN400JwnXailGhdsGqLXV1JYWXMl4UBpHXOAB
A2wGVzhpACLSZsDnv34d8r8t7Ebnghokp0y2UqEFHKLcxAQUevE1Vtnakk42bQWS
D4Jz8jXLYj9L65UuuohPh+tdPotl9AZu/wusmdkaDBw5B/kxvqBa8sYjTGEVshPE
7w==
-----END CERTIFICATE-----