Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File:                     6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier:          g7qVsFUDF2WcEocsB0daJo+iSWNfQ2y5dB4GI4/qUzE=
Subject key identifier:   BF:D7:76:E8:7E:81:B8:40:58:DD:F0:CC:B4:39:06:E8:82:BE:E7:6B
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer:       /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial:       3EECBF620362019D3CD617F95CEDDA3CF09ADBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number:          0250
Signing time:             Sun 13 Apr 2025 14:32:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:27:45 +0000
Manifest next update:     Mon 14 Apr 2025 16:23:45 +0000
Files and hashes:         1: 3138352e33312e3230322e302f32342d3234203d3e2037303138.roa (hash: iL7YLdjFSsy+StKeV2OynMplvfVvVqa5nzn9JGMln1g=)
                          2: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: NUn8aIBwMe8NOQ46vp3UoCbf5frmlT1NQk7l3RoU+4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ec:bf:62:03:62:01:9d:3c:d6:17:f9:5c:ed:da:3c:f0:9a:db:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
        Validity
            Not Before: Apr 13 14:27:45 2025 GMT
            Not After : Apr 14 16:23:45 2025 GMT
        Subject: CN=BFD776E87E81B84058DDF0CCB43906E882BEE76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:53:b0:67:ad:e4:c3:3a:fa:31:3c:cc:10:
                    a9:61:77:38:67:01:52:49:e7:74:34:dc:91:ad:b3:
                    d3:76:c3:28:7c:b2:25:32:f3:02:b7:7e:d7:bd:b4:
                    e9:1c:03:53:73:c2:e1:8b:02:c8:21:7d:c7:dc:e8:
                    50:1a:fc:e2:7d:30:f3:cb:ed:7a:26:6c:34:91:58:
                    74:6d:7c:4f:f8:13:a5:4c:b6:6a:2c:b5:b2:3a:b5:
                    98:84:4c:0b:bc:4e:6b:fd:b6:31:0c:54:5b:a6:b5:
                    e6:ca:61:f3:38:a6:30:01:36:06:20:7c:db:8b:d8:
                    cf:e1:f0:48:2b:c8:41:7d:b0:4a:3c:ce:5d:f7:dc:
                    c2:51:e9:6d:38:6f:41:53:7b:16:5a:60:f7:29:07:
                    78:11:f9:8b:ad:8d:81:37:33:aa:0f:fc:62:3c:9d:
                    30:88:93:26:1f:b5:6e:ca:9d:60:f4:19:11:e7:e9:
                    8f:cf:6e:0b:ba:6f:c8:29:91:92:92:12:82:16:d6:
                    9d:1c:3b:0c:b0:2a:43:58:3a:db:ba:ae:65:bb:02:
                    10:12:4b:60:f3:29:e1:ac:2c:2f:d0:0f:4a:e4:fd:
                    b8:86:05:f2:97:54:bd:83:53:7f:c0:f0:39:38:0a:
                    a1:25:46:bf:8d:42:24:17:e1:72:60:00:27:0d:3e:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:76:E8:7E:81:B8:40:58:DD:F0:CC:B4:39:06:E8:82:BE:E7:6B
            X509v3 Authority Key Identifier:
                keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a7:ec:f5:bd:ca:0b:c4:3b:b3:56:f9:0a:fe:a9:45:09:3c:
         c3:92:b2:05:47:71:52:cc:0b:f1:c3:46:a0:5c:59:94:61:fa:
         a3:dd:63:fa:42:f8:19:66:01:30:57:60:0b:09:67:43:d8:28:
         f7:b1:25:9c:01:91:34:b2:e0:9c:9b:ce:4e:a3:fb:f3:ab:50:
         33:cd:c6:c4:a0:1d:cd:5e:ef:12:76:71:cd:ad:30:8b:2c:2b:
         f2:0a:60:2e:1b:eb:b7:a9:ee:fc:d7:82:70:75:da:63:7e:34:
         4f:bd:5c:05:03:9e:51:73:2f:c6:50:d9:fd:fc:68:9b:c6:c1:
         97:ee:0b:d6:42:35:6e:ae:c9:a9:f0:7a:7d:2b:17:20:f1:b6:
         03:7f:0d:bd:a2:a5:41:7c:f7:e4:c5:c2:fc:00:bf:78:d9:ff:
         3f:ca:f8:06:0b:c6:71:ec:f6:c9:80:d2:84:7e:9b:3e:f0:f9:
         d1:18:28:3b:83:b6:6c:26:71:11:8d:fe:81:dd:af:60:60:db:
         6e:64:37:5a:73:6a:de:2c:41:26:4e:b8:3d:81:e8:96:c6:62:
         c1:39:00:77:c1:d5:45:52:25:1e:b0:50:fb:43:39:23:38:bb:
         1f:7a:d1:66:5e:cf:ce:ae:e3:82:a6:15:f4:f8:cd:f7:41:7d:
         8a:19:0e:f5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPuy/YgNiAZ081hf5XO3aPPCa29kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ2NDA0NWRhNWJlZDA2ODdkMTVjYmRhNjdhMDRlYjg3
YThmYjAzZTAeFw0yNTA0MTMxNDI3NDVaFw0yNTA0MTQxNjIzNDVaMDMxMTAvBgNV
BAMTKEJGRDc3NkU4N0U4MUI4NDA1OERERjBDQ0I0MzkwNkU4ODJCRUU3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfFOwZ63kwzr6MTzMEKlhdzhn
AVJJ53Q03JGts9N2wyh8siUy8wK3fte9tOkcA1NzwuGLAsghfcfc6FAa/OJ9MPPL
7XombDSRWHRtfE/4E6VMtmostbI6tZiETAu8Tmv9tjEMVFumtebKYfM4pjABNgYg
fNuL2M/h8EgryEF9sEo8zl333MJR6W04b0FTexZaYPcpB3gR+YutjYE3M6oP/GI8
nTCIkyYftW7KnWD0GRHn6Y/Pbgu6b8gpkZKSEoIW1p0cOwywKkNYOtu6rmW7AhAS
S2DzKeGsLC/QD0rk/biGBfKXVL2DU3/A8Dk4CqElRr+NQiQX4XJgACcNPmYxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUv9d26H6BuEBY3fDMtDkG6IK+52swHwYDVR0j
BBgwFoAUZGQEXaW+0Gh9FcvaZ6BOuHqPsD4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ViYzUzM2YtN2YzMS00YmQ2LTg3NGQtZTczNmU5ZmRl
NWJkLzAvNjQ2NDA0NURBNUJFRDA2ODdEMTVDQkRBNjdBMDRFQjg3QThGQjAzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pHUUVYYVctMEdoOUZjdmFaNkJPdUhx
UHNENC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83ZWJjNTMzZi03
ZjMxLTRiZDYtODc0ZC1lNzM2ZTlmZGU1YmQvMC82NDY0MDQ1REE1QkVEMDY4N0Qx
NUNCREE2N0EwNEVCODdBOEZCMDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6fs9b3KC8Q7s1b5Cv6p
RQk8w5KyBUdxUswL8cNGoFxZlGH6o91j+kL4GWYBMFdgCwlnQ9go97ElnAGRNLLg
nJvOTqP786tQM83GxKAdzV7vEnZxza0wiywr8gpgLhvrt6nu/NeCcHXaY340T71c
BQOeUXMvxlDZ/fxom8bBl+4L1kI1bq7JqfB6fSsXIPG2A38NvaKlQXz35MXC/AC/
eNn/P8r4BgvGcez2yYDShH6bPvD50RgoO4O2bCZxEY3+gd2vYGDbbmQ3WnNq3ixB
Jk64PYHolsZiwTkAd8HVRVIlHrBQ+0M5Izi7H3rRZl7Pzq7jgqYV9PjN90F9ihkO
9Q==
-----END CERTIFICATE-----