Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
File:                     B6366F3DD14AC5399103961C30642E6779892C6C.mft (raw, json)
Hash identifier:          tH5A2t2hkD09OShMtHg5pUU6ClNbiONq7ZN6h9nGdu0=
Subject key identifier:   B3:75:6C:A1:DB:05:03:AD:CF:FF:C5:4B:C1:E1:DC:BE:17:B5:0A:6A
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       2F29CDFE9FF631AB4CC949803B454681AE53BA67
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
Manifest number:          015A
Signing time:             Sun 13 Apr 2025 11:36:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:31:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:35:05 +0000
Files and hashes:         1: B6366F3DD14AC5399103961C30642E6779892C6C.crl (hash: DBvjm//E+cbIWk9lbFTOXJwNlf1nv141Z3cOsEumZag=)
                          2: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: dd3FrIdYxmcCZ+0yiqqDqpbbY31J+y6oBOm7qM8H0EU=)
                          3: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: HcR8I97oYThFv0VpxMGU5cj9rhive5rP2rR8SXDiybY=)
                          4: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: NwxUM+Bu0lOfXqc/NSfMdy0y0UUCQqdUXqKBNCkgBgQ=)
                          5: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: Bbj3dkfLCLvHSBOV2mo0X/dvVWVRNeC0CCNXaIH1NSU=)
                          6: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: Fozivs5VK4pgLoGEsqoGlUwV1cuRecwfPaBUsSrDB4Y=)
                          7: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: /Rv6Qyd4oJNesSRg3hY6FH8XM9bnDURMSVi/jtj0pWA=)
                          8: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: viX/3SQM4nfUuWRAgbcq7qnkCzLamDSQbyAAFuwSt0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:29:cd:fe:9f:f6:31:ab:4c:c9:49:80:3b:45:46:81:ae:53:ba:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Apr 13 11:31:05 2025 GMT
            Not After : Apr 14 14:35:05 2025 GMT
        Subject: CN=B3756CA1DB0503ADCFFFC54BC1E1DCBE17B50A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:f4:99:7a:26:5d:bd:3e:ec:2b:7d:bd:b2:
                    e9:a6:ed:a4:6d:37:bb:9d:79:dd:8e:2e:f3:4b:70:
                    b9:57:a8:e3:2b:72:dd:09:a4:75:03:a3:39:6f:96:
                    ba:21:06:fa:a7:67:e5:67:bc:fe:1e:98:ea:c0:e7:
                    d0:ec:90:98:85:5c:b6:16:f7:61:95:fe:f0:00:12:
                    da:5b:6b:1b:98:67:c7:74:9b:15:bc:93:ee:1c:65:
                    4d:c3:c8:21:ed:06:be:7f:83:02:13:7d:31:a3:26:
                    b0:df:17:8e:ae:4d:37:56:2a:f3:26:6c:95:aa:d5:
                    e0:91:bb:c3:5f:e7:13:26:96:67:11:6b:4c:d7:9c:
                    6e:dc:af:84:1b:4e:01:90:58:82:8b:10:53:31:f2:
                    bb:ff:02:97:7d:b3:e5:1d:24:ac:0d:35:c0:ae:44:
                    d8:fb:48:f4:0f:17:6d:6a:09:d5:c3:32:b8:42:f4:
                    32:ea:68:67:54:8e:c7:5b:b4:65:15:e3:4a:9f:51:
                    01:e1:4b:1f:d9:fb:b5:dc:48:8f:16:a9:f4:05:cc:
                    ff:c2:7e:7c:2a:b2:d2:e6:6a:a9:11:46:3c:27:c9:
                    9c:fc:45:2a:88:40:86:89:10:aa:81:de:38:58:a6:
                    57:f7:8a:29:14:9b:9f:e5:b8:c9:71:f5:1a:4b:61:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:6C:A1:DB:05:03:AD:CF:FF:C5:4B:C1:E1:DC:BE:17:B5:0A:6A
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:47:74:c5:c8:d2:80:31:e5:d5:d9:83:1a:99:8e:5d:41:e7:
         1a:13:81:38:75:92:01:8d:18:2a:12:f9:03:b3:cf:2d:07:83:
         6c:b4:84:49:ba:4b:be:7a:23:34:a7:4e:63:82:73:7b:03:83:
         60:e3:25:5c:ae:e0:11:1f:70:7b:ad:46:9a:2d:a3:09:7f:51:
         3b:bc:49:2e:9a:43:fc:2f:25:59:a4:75:19:f2:af:69:80:f3:
         f6:45:3d:bc:ef:c3:fc:b6:de:2c:d3:d5:11:e9:23:ef:0c:a8:
         c5:5b:77:dd:68:27:48:db:57:a5:d5:57:ba:bb:a7:cc:1b:78:
         0f:70:60:16:2a:f9:91:8f:c4:df:77:8f:ea:9a:19:e3:12:5a:
         5f:1d:4b:c7:af:12:01:f6:b4:6e:83:94:52:d6:75:bd:6a:8d:
         93:ed:ef:41:94:9a:03:e8:ba:da:9e:c6:6b:f4:56:6e:59:cf:
         14:08:64:8c:61:96:f7:d3:a4:08:d2:88:68:dd:e5:bd:c3:a0:
         90:24:45:f0:f8:65:25:c6:61:1d:9c:4e:93:ce:c0:54:ea:35:
         51:8c:f0:d2:b5:52:8b:9b:f2:6b:39:60:a1:01:b9:5e:cf:e9:
         dd:e3:c3:e2:a7:ed:17:7d:38:8a:cb:67:80:c1:9d:8c:b4:5a:
         11:08:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----