Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.mft
File:                     68D097AFD88AEF3F10282F3218FC13F01A0DE486.mft (raw, json)
Hash identifier:          tsyAzWreKOxQoXfKVP8vLyPsnDUmcWTsf3HVdxcV4xE=
Subject key identifier:   9B:96:FA:5B:C6:8A:18:CA:56:F9:A8:C7:53:DB:15:1B:A4:35:59:C7
Authority key identifier: 68:D0:97:AF:D8:8A:EF:3F:10:28:2F:32:18:FC:13:F0:1A:0D:E4:86
Certificate issuer:       /CN=68d097afd88aef3f10282f3218fc13f01a0de486
Certificate serial:       2D30451B63859BE6B7414C363620B02D15D5DBA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNCXr9iK7z8QKC8yGPwT8BoN5IY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.mft
Manifest number:          025F
Signing time:             Sun 13 Apr 2025 02:37:42 +0000
Manifest this update:     Sun 13 Apr 2025 02:32:42 +0000
Manifest next update:     Mon 14 Apr 2025 05:27:42 +0000
Files and hashes:         1: 3138352e3230362e3235332e302f32342d3234203d3e203630373831.roa (hash: AMOOReO25pB/UyWle0jkXv+B6m1MTNWZ4+1w+73+7MY=)
                          2: 68D097AFD88AEF3F10282F3218FC13F01A0DE486.crl (hash: JbiuO4BfhRxEAKuVdidALYCG/cI7efjVwAGg4NyH21E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:30:45:1b:63:85:9b:e6:b7:41:4c:36:36:20:b0:2d:15:d5:db:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d097afd88aef3f10282f3218fc13f01a0de486
        Validity
            Not Before: Apr 13 02:32:42 2025 GMT
            Not After : Apr 14 05:27:42 2025 GMT
        Subject: CN=9B96FA5BC68A18CA56F9A8C753DB151BA43559C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:f5:76:60:e5:62:d3:a7:5f:62:46:a5:2a:
                    5c:bc:d0:28:f1:b7:c1:f1:56:86:75:6c:80:cb:84:
                    43:fd:39:d2:c6:f5:21:c2:5e:01:f1:d6:cc:44:83:
                    7b:f9:5e:dc:0b:72:70:97:c1:2c:8d:e5:6a:81:7d:
                    85:d8:ea:44:20:92:b7:4f:43:df:55:de:f8:99:d2:
                    19:c5:25:d7:19:2b:8e:76:19:9e:8c:a7:5a:3f:e3:
                    5e:1f:89:2a:0d:43:db:13:14:8e:66:e1:6c:d7:83:
                    e0:af:e0:53:9a:cb:21:81:66:ff:7f:bf:29:80:59:
                    d5:a9:80:d9:e8:17:cb:5a:dd:02:4e:3c:69:e1:88:
                    ad:7e:77:f9:0b:f4:1e:2b:e6:f7:d0:d3:8d:cf:f0:
                    23:43:dd:91:10:4d:50:42:75:5a:53:99:9b:41:38:
                    6f:80:3a:50:43:f2:e6:96:fa:08:22:9f:63:18:79:
                    bd:cc:5e:70:e6:22:a3:62:91:c7:dc:84:e1:6d:ca:
                    0b:22:bd:c0:85:eb:e3:d1:a0:49:6b:91:31:37:87:
                    58:cd:e6:6c:ef:1e:c8:2b:42:22:26:41:7d:66:9f:
                    6a:df:4b:5a:ef:d1:a6:1e:ad:52:e9:0d:3e:a6:be:
                    7e:92:2a:af:f0:94:10:07:9b:24:ad:09:55:77:7d:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:FA:5B:C6:8A:18:CA:56:F9:A8:C7:53:DB:15:1B:A4:35:59:C7
            X509v3 Authority Key Identifier:
                keyid:68:D0:97:AF:D8:8A:EF:3F:10:28:2F:32:18:FC:13:F0:1A:0D:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNCXr9iK7z8QKC8yGPwT8BoN5IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:aa:ca:27:09:2f:79:3a:04:d3:7a:f1:88:9e:4a:1b:b5:45:
         e3:de:b5:0e:23:42:c3:b2:3d:0a:11:21:d8:7f:d4:09:c7:98:
         f8:47:18:8f:4d:b6:e9:3f:b8:27:12:ff:3d:f7:52:c2:a0:8c:
         68:9e:3c:c0:8d:01:e3:74:32:75:7f:0e:2d:43:69:1a:06:6c:
         53:4c:36:f4:c1:b5:df:aa:1f:1f:42:17:db:13:ca:b2:91:e6:
         11:69:51:6a:44:03:a9:01:4f:7f:66:7c:d5:eb:b3:dd:b2:2f:
         ab:9c:46:16:5d:03:b5:ff:fc:b8:6d:ce:58:d3:d6:20:6d:f2:
         36:7f:50:84:75:03:da:a7:21:61:80:51:29:4b:24:cd:9b:18:
         c4:32:57:bd:a8:69:44:d9:32:c7:8a:e9:c9:8c:b0:e3:9a:e0:
         3b:58:64:cf:58:25:85:5a:c4:d4:09:4c:88:81:6d:4a:ca:86:
         49:84:82:83:86:77:5c:54:55:27:bc:dd:10:4d:87:ad:eb:2e:
         18:a5:0c:ee:3c:76:3e:e1:dd:9b:ba:db:a0:7f:27:c3:5f:e6:
         02:e5:f8:6c:54:4d:10:fa:dc:7d:04:c4:b6:f5:f0:21:ae:67:
         c8:a6:9c:21:2d:20:d3:51:f9:d2:2d:dc:1e:8b:88:cb:1a:68:
         45:d6:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----