Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
File:                     0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json)
Hash identifier:          55fctnV5Ja8LK6L9pHJatmxROkIzumUQAe6R0H6XxC0=
Subject key identifier:   20:CC:DF:02:BF:3A:55:00:69:D0:7D:32:AB:57:81:47:98:CB:21:8B
Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
Certificate issuer:       /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
Certificate serial:       2AF856399F80422B18E7326FC9A9D2B43E921A40
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
Manifest number:          014F
Signing time:             Sun 13 Apr 2025 09:26:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:21:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:14:10 +0000
Files and hashes:         1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: qXYSNIdB9AuOetMqFscxPFcAQZGJfYI8ku9Ij4ilIjY=)
                          2: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: WAEDCXUcEyZrm+AiMC7S/4c05J5m88q64rRSqxpIjho=)
                          3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: GOSro5bSH04/LhFcp3jWcxc9uL2by5TiBmqbWGnAjdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f8:56:39:9f:80:42:2b:18:e7:32:6f:c9:a9:d2:b4:3e:92:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
        Validity
            Not Before: Apr 13 09:21:10 2025 GMT
            Not After : Apr 14 13:14:10 2025 GMT
        Subject: CN=20CCDF02BF3A550069D07D32AB57814798CB218B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:2c:cf:fb:6a:91:8a:62:38:9c:1b:5b:b3:
                    90:87:b9:a0:c4:99:f7:2e:3f:f8:d4:4b:df:a2:b4:
                    dc:49:b8:96:80:76:74:d6:c3:58:53:75:10:e0:5c:
                    c2:5a:6b:84:b8:4c:0d:13:d3:cd:f4:5f:ce:06:10:
                    d6:f2:c5:6b:46:50:97:9f:93:a9:00:cb:84:70:fc:
                    0d:fe:8d:88:7b:ba:f4:a4:3c:7a:ed:e0:99:e7:7f:
                    92:d3:42:59:8a:8e:f5:35:8c:1c:2e:da:4d:42:2b:
                    d2:f1:42:75:4b:3f:58:17:bb:aa:f6:a8:78:1c:d2:
                    20:2c:4a:68:ca:b0:fe:64:38:2e:f0:7d:0d:8c:7a:
                    7c:36:ec:4a:d2:2e:8c:f3:0d:26:d4:89:bb:2e:65:
                    5c:3d:4e:71:70:89:de:3b:ff:b7:cb:9f:71:b6:6f:
                    4c:75:10:d8:57:5d:43:68:c7:c8:42:fc:9e:50:fb:
                    9c:a7:c1:d2:f4:6e:85:65:53:8a:d4:83:32:85:7f:
                    11:46:4d:3c:76:64:d9:a3:e1:09:e0:ac:69:0b:fc:
                    36:a5:72:11:ef:8d:23:66:eb:25:4c:fa:52:dd:bd:
                    5e:37:70:b3:26:c7:4c:ad:62:e4:d8:aa:81:45:2a:
                    b8:bf:c5:d2:24:7b:2a:de:ce:94:d2:6d:0d:3a:72:
                    da:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CC:DF:02:BF:3A:55:00:69:D0:7D:32:AB:57:81:47:98:CB:21:8B
            X509v3 Authority Key Identifier:
                keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e1:26:4a:07:2b:c2:81:3c:e4:90:57:27:74:80:ef:6d:b9:
         50:57:5d:67:0d:8c:21:31:2f:49:ce:ce:26:17:e1:0c:ff:f2:
         a8:3f:16:19:84:61:ea:d5:ee:1c:4e:d8:1b:1c:d6:76:a5:08:
         3e:79:44:b9:89:6a:dd:1d:45:24:f7:dd:ad:e2:b8:b3:c3:37:
         bc:9a:29:7f:86:0f:97:8b:af:28:e0:e0:d7:af:30:92:38:ba:
         df:db:25:16:5d:70:06:ef:be:b0:d2:b7:5a:ec:95:74:24:77:
         8e:19:74:11:a5:55:2d:9d:9b:f0:5b:34:e0:f6:72:d6:f2:2c:
         2a:34:66:36:df:11:e2:41:90:47:65:16:59:35:58:01:ca:a3:
         7f:7a:77:4d:54:34:c4:53:ef:98:9e:99:d3:b3:c4:fc:fc:8d:
         b4:42:fb:5c:ca:dd:0c:8d:b6:f8:98:a6:95:03:03:71:6c:49:
         a5:90:4c:ed:61:48:c1:a9:8a:74:af:b0:46:8d:26:c1:5d:49:
         7b:41:7b:b4:f5:d5:17:1b:06:4e:0c:50:b7:6e:ae:c2:fd:38:
         17:ce:5e:b2:92:f1:02:84:cc:84:6d:dc:72:f1:d0:ef:ac:3a:
         90:ca:27:66:1e:b4:be:d0:a3:50:1d:1d:00:f6:14:5d:c3:84:
         7b:40:20:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----