Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft
File:                     FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json)
Hash identifier:          IIh/2rqZ94z/toR4Mt8vhuZcBvt04Z7pkzw3FiwSE9Q=
Subject key identifier:   43:BD:C3:04:0E:7E:24:33:84:BF:13:D3:BF:1A:09:AE:73:C5:9F:3A
Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B
Certificate issuer:       /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B
Certificate serial:       6EA4BC229057857029D33C87D169587BA5F7C213
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft
Manifest number:          03B7
Signing time:             Sun 13 Apr 2025 00:14:30 +0000
Manifest this update:     Sun 13 Apr 2025 00:09:30 +0000
Manifest next update:     Mon 14 Apr 2025 03:05:30 +0000
Files and hashes:         1: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: /u96+7uleK4KkcDI0DCfOWr2ex9LaowcfzPRwJYe1fQ=)
                          2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: /CFUhpNUUZNwoRgflpnALQIis6DpR20ZsBTAXpcqHGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a4:bc:22:90:57:85:70:29:d3:3c:87:d1:69:58:7b:a5:f7:c2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B
        Validity
            Not Before: Apr 13 00:09:30 2025 GMT
            Not After : Apr 14 03:05:30 2025 GMT
        Subject: CN=43BDC3040E7E243384BF13D3BF1A09AE73C59F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:36:27:b2:07:4a:76:1f:d8:20:2a:c8:85:
                    9f:96:9b:9e:20:f4:77:bd:2d:4c:5a:59:51:1c:c6:
                    1a:81:48:d8:d3:8f:f6:24:af:ce:50:ea:d0:f0:ae:
                    31:07:49:ba:df:25:f0:cc:45:1c:4e:4a:22:5d:d9:
                    e0:bb:48:82:19:3e:a5:09:11:8a:ba:21:88:7f:c1:
                    e2:a4:41:a2:26:34:de:ba:3e:c9:6c:fa:9d:78:7a:
                    61:ae:d9:ae:46:7d:74:89:0b:ce:60:ce:b2:32:83:
                    af:61:9a:7a:28:19:db:98:96:eb:f3:55:9e:ed:63:
                    46:fe:10:66:db:a0:16:a9:83:4a:33:24:d0:20:00:
                    ce:b1:2c:2c:39:92:54:aa:7a:9a:e1:e1:33:0e:93:
                    83:13:87:94:c4:18:23:7d:7e:b3:8f:34:aa:ea:46:
                    bb:02:c0:05:64:17:46:7f:3b:37:b5:b9:38:9f:92:
                    a6:38:15:7a:10:cb:97:3f:be:f1:b4:d7:52:72:48:
                    31:f5:4d:dc:16:de:60:6f:7c:7c:cb:16:7a:db:86:
                    d1:92:4b:01:d2:02:f2:f2:ad:b8:34:04:7e:27:e8:
                    be:96:98:40:41:7e:6c:80:de:09:de:2b:d0:91:ab:
                    27:06:5a:0a:2e:48:87:88:3a:c3:df:f0:3e:ad:de:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:C3:04:0E:7E:24:33:84:BF:13:D3:BF:1A:09:AE:73:C5:9F:3A
            X509v3 Authority Key Identifier:
                keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:82:17:b0:36:0b:cf:1b:c4:45:b3:8d:d4:b9:da:bd:15:a2:
         a1:fd:3e:a8:c4:e4:39:7f:92:21:0a:2f:c2:67:49:48:c7:43:
         39:9a:82:92:47:86:af:56:47:a1:7d:8f:51:55:ed:c4:2e:0c:
         30:20:68:54:56:6f:6d:9f:ad:32:00:f7:3f:47:12:83:ff:8d:
         4c:03:e0:70:0b:85:43:18:02:9c:56:72:10:e5:d3:07:5c:ff:
         01:1b:bd:9f:ba:48:6c:07:28:51:b0:ae:80:5e:ea:8a:86:0b:
         17:be:c2:52:46:13:d7:23:07:5e:39:6c:44:b9:c1:fc:e2:11:
         fd:75:83:16:d3:48:a4:bb:5a:7c:ba:e5:73:68:96:89:3f:1e:
         ba:0c:21:f6:d3:16:cc:bb:e0:6c:ab:30:d3:99:a4:8f:6f:a9:
         c4:ad:98:0a:10:00:a6:9f:6a:65:c5:4a:aa:6b:47:30:73:78:
         55:bb:94:c2:4b:14:a5:28:c7:27:5c:5a:1c:f1:9e:c6:ba:44:
         cb:0a:f7:33:68:a6:81:ca:ff:46:f1:bd:51:73:4f:63:fd:84:
         b3:75:47:0e:23:9f:0b:be:d0:22:60:aa:81:40:7c:3f:3c:68:
         8a:ac:1c:37:ba:10:5e:46:48:a2:46:f4:bb:4e:98:83:0e:aa:
         b0:ed:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----