Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File:                     EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier:          zWT+giuB+xaG1OgJ6mCUenuKSbSmEISvVCoWlL2P7JM=
Subject key identifier:   3F:51:EC:AE:7E:6E:C9:8F:FB:3C:0A:96:15:D1:53:DF:13:C8:42:5B
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer:       /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial:       71F342E0779763FB65D9535687AC95F2BADE19EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number:          0306
Signing time:             Sun 13 Apr 2025 07:12:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:07:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:46:43 +0000
Files and hashes:         1: 3138352e35352e38332e302f32342d3234203d3e203536333637.roa (hash: EO5FUx9wp3K/AGFAPlrZs/bk9YuV/xgCtjavIzvd3sk=)
                          2: 3138352e35352e38332e302f32342d3234203d3e20323135333034.roa (hash: PnN+57bozSHdWFkbA1ybh7RNeGA5AtI46mBnx5Wb0e0=)
                          3: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: j3+PPY3FQhZGwHKYgNdXifow/rYlIkTLSfjk7/6pa8E=)
                          4: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: huwsUB31uBfbleT8W3liIVEEjjwoWiPQyT4oqqDXvCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f3:42:e0:77:97:63:fb:65:d9:53:56:87:ac:95:f2:ba:de:19:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
        Validity
            Not Before: Apr 13 07:07:43 2025 GMT
            Not After : Apr 14 07:46:43 2025 GMT
        Subject: CN=3F51ECAE7E6EC98FFB3C0A9615D153DF13C8425B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:1b:5b:c3:da:48:ac:5a:ef:a2:2c:e5:9d:
                    00:9b:33:d7:2f:b5:9c:66:50:0e:98:e6:71:fe:a6:
                    77:b8:6f:24:78:ad:28:e8:53:3d:36:7e:ef:d1:26:
                    d0:c4:35:69:38:ba:9c:bc:8b:db:40:59:3c:9a:1f:
                    ff:7c:7a:31:c9:8b:ac:16:83:53:f9:40:fb:0a:80:
                    01:c6:70:9b:70:2d:71:7f:c9:09:bb:43:e4:00:eb:
                    70:57:73:08:03:44:a6:ad:96:a2:24:c5:eb:a8:02:
                    9d:11:a2:22:36:ed:a0:13:16:a8:fb:1a:b1:5b:5f:
                    ff:b4:13:14:3e:46:73:62:df:3a:2a:e0:02:00:27:
                    44:c2:fa:80:dd:5a:59:fd:89:ac:21:fe:0f:a0:29:
                    d2:1a:6f:da:89:0a:5e:2d:78:72:c7:0a:33:cd:92:
                    62:56:dc:9b:6e:ab:8a:57:9f:d0:8d:9c:39:a6:e2:
                    d2:46:a0:7c:c6:81:0e:d1:78:0d:d0:4c:e5:58:ef:
                    6d:71:95:e9:51:14:81:f7:c1:eb:8e:5a:2d:41:98:
                    08:1e:9e:70:8e:3d:9a:5e:2d:bc:0a:ed:88:9b:05:
                    ff:bf:c1:4c:2a:e8:3f:35:0a:e4:c0:be:58:50:2d:
                    8f:06:c2:e9:bc:1a:9c:8a:67:1f:44:64:33:4f:99:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:51:EC:AE:7E:6E:C9:8F:FB:3C:0A:96:15:D1:53:DF:13:C8:42:5B
            X509v3 Authority Key Identifier:
                keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ad:8e:7c:37:ef:2d:25:59:9a:aa:71:4e:ef:0c:64:a3:6d:
         aa:b8:c1:f2:97:33:49:40:e2:d1:0e:42:72:ff:bd:03:43:10:
         23:4a:c7:b3:36:07:9c:f4:49:07:cd:30:a8:30:e3:eb:33:11:
         f7:a4:1b:60:d9:38:3d:be:e4:65:67:72:b4:64:7b:43:cb:8e:
         b9:f6:44:bb:9a:37:0f:86:dc:46:49:1b:35:e7:2e:37:1a:e5:
         4c:b5:07:e8:c7:8c:b4:4f:97:13:56:28:06:7e:20:9e:b8:bf:
         bb:d0:f6:25:ee:6a:d0:70:b9:cf:5d:b2:48:96:ef:2a:cb:e4:
         10:0d:26:1b:d7:77:3c:30:c7:54:8e:9c:d2:10:f5:2b:8c:5d:
         a7:b5:63:fc:a0:3f:1b:24:8f:09:9c:34:80:ea:f7:86:a4:00:
         06:4c:1d:49:01:13:eb:28:6f:cc:2e:2e:99:7a:99:e6:59:b5:
         3b:45:70:3c:ec:2a:d5:c1:ba:90:37:f4:03:52:69:0e:c3:da:
         f3:ae:25:a4:d2:27:24:82:0f:28:e2:c3:ff:64:cf:0b:a3:32:
         21:73:11:2f:97:4b:9b:8a:05:a6:74:db:b4:7d:11:a2:87:7f:
         bb:38:14:28:af:f8:4e:1e:c1:ea:fc:66:95:9d:ba:26:ad:34:
         92:8d:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----