Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
File:                     8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json)
Hash identifier:          sWgOhbpaX+Qk8plsfly934rz7n+np5AZ5zq3YsdWDPs=
Subject key identifier:   EA:A2:D9:0C:31:FB:CE:0C:49:85:D5:F0:1C:F2:6A:CC:71:DE:4B:B0
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Certificate issuer:       /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial:       21E4B7FC9EB9F9CEE053AD09E294565BA732ECE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
Manifest number:          03C3
Signing time:             Sun 13 Apr 2025 09:07:45 +0000
Manifest this update:     Sun 13 Apr 2025 09:02:45 +0000
Manifest next update:     Mon 14 Apr 2025 09:29:45 +0000
Files and hashes:         1: 3138382e3136342e3135382e302f32332d3233203d3e20323039323432.roa (hash: a8q0y7nvMPxAQTNauYzxQwFEB0FcxQ6k8ECPLkihDTg=)
                          2: 3138382e3136342e3135372e302f32342d3234203d3e203631333137.roa (hash: 1OXX2SrcK/gmhp0BoSKo0TlJRIbDJQHbnTI5VzAFuV4=)
                          3: 3138382e3136342e3135342e302f32342d3234203d3e203136323736.roa (hash: CSYWsES4pD37cXQNnf4UjazVxkggSvafg/VoS+NTVDg=)
                          4: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: MWX+IkfkhobKO9hdFtqezYI4bNHrKWsgEbaLXF1vmI4=)
                          5: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: D04ae2SRdtKJx7avocdxkHAFAepjsts9k/904EQDNhs=)
                          6: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=)
                          7: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: Zqg95JNQ7Tjc8CMis4303+CnonKl6jZjeNtUp3/4jl4=)
                          8: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e4:b7:fc:9e:b9:f9:ce:e0:53:ad:09:e2:94:56:5b:a7:32:ec:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
        Validity
            Not Before: Apr 13 09:02:45 2025 GMT
            Not After : Apr 14 09:29:45 2025 GMT
        Subject: CN=EAA2D90C31FBCE0C4985D5F01CF26ACC71DE4BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:a6:f3:61:f5:f8:e4:80:bb:54:a6:4a:be:
                    c9:db:66:fa:92:83:40:31:41:1b:ff:81:63:f5:c7:
                    54:af:9b:1e:b1:c8:5b:2a:95:6b:08:7b:f4:7c:41:
                    2b:ff:b3:2a:34:48:71:62:57:5a:63:6e:c8:4d:30:
                    19:29:a2:a7:b7:f7:0d:de:2a:28:c4:11:e6:f9:20:
                    1c:42:e8:a6:2b:ed:25:ec:db:ce:4e:7b:99:5f:38:
                    a4:a8:b3:c2:76:56:f9:2f:50:69:2d:92:aa:ab:f6:
                    fc:61:b5:b0:45:ac:e2:4d:9d:0e:b2:62:91:14:8c:
                    a1:83:b6:21:99:16:3d:6f:f1:c5:3f:e6:a8:70:34:
                    0a:54:e8:15:32:70:22:64:e3:56:83:37:7e:6c:49:
                    e4:2d:89:24:31:f7:56:f6:47:87:75:e6:56:fb:0c:
                    4c:db:6b:64:a8:e7:dc:28:68:16:04:d1:16:a3:01:
                    5c:fb:9a:c5:ca:a1:43:6b:71:39:2b:9a:22:95:96:
                    b7:7e:88:d5:b4:c8:96:b5:5b:11:2d:6a:b0:4c:27:
                    ed:61:cf:90:af:2e:29:02:b9:5f:f4:39:8c:52:60:
                    99:9c:81:c0:73:4a:4e:b9:88:8a:e5:0f:75:2d:74:
                    40:ae:e0:fd:2c:b5:a0:ad:a9:c9:ea:31:09:98:13:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A2:D9:0C:31:FB:CE:0C:49:85:D5:F0:1C:F2:6A:CC:71:DE:4B:B0
            X509v3 Authority Key Identifier:
                keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5e:29:c4:eb:ab:12:a4:90:00:a4:cf:71:99:fd:2c:26:de:
         3a:33:99:a0:7c:ef:96:42:1d:24:95:71:30:cf:88:49:df:6b:
         b8:af:b2:5d:23:e1:03:d7:40:b0:57:6a:9c:f2:21:1a:bc:f8:
         59:0f:87:05:fb:2c:b4:01:4a:93:12:32:6b:9b:24:c7:f4:9f:
         6a:f0:86:64:0a:5d:e8:34:05:29:23:a4:a1:b0:21:ae:02:dc:
         1d:24:cb:12:e2:ff:d2:9f:bc:95:d9:a2:b8:59:8b:82:35:73:
         55:80:25:a9:f0:d0:79:90:48:0e:86:ae:a3:32:93:f1:72:42:
         80:a3:c7:7b:37:b6:bf:4f:8f:8c:07:c4:04:e6:f5:fa:f1:82:
         ed:45:7a:1a:49:53:69:ef:fc:5e:fd:ed:57:f8:43:74:20:07:
         60:f5:44:48:a5:ab:69:2a:f0:68:31:17:64:eb:26:d4:a6:01:
         2d:3e:cf:bc:48:d7:1f:01:f7:4f:c9:61:05:e4:2e:8f:c7:1b:
         c5:f5:dd:3e:6c:0d:0f:43:55:93:57:2e:d9:cf:7c:a8:a2:cd:
         a3:11:6f:82:d2:d4:9d:c5:00:6e:e3:bc:7a:e4:d2:f8:76:c8:
         c0:f3:b7:35:26:fc:f3:94:e7:25:84:d2:94:8e:be:de:05:22:
         c0:b4:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----