Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
File:                     5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json)
Hash identifier:          /wX2m8j8AV8ZzQyWcj3JKoOuH1eON+V1WgzCZkZc6J4=
Subject key identifier:   A2:9D:2F:CC:42:93:E0:8D:A7:89:41:47:97:61:0C:F8:0E:E8:66:B2
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Certificate issuer:       /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial:       3D18CBE1C5CCFB26141A84A8B46B3B3F41B6C757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
Manifest number:          0460
Signing time:             Sun 13 Apr 2025 12:47:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:42:45 +0000
Manifest next update:     Mon 14 Apr 2025 16:04:45 +0000
Files and hashes:         1: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: EYMH7CjdMy9JP9JNDcl6zZaDx4KYYmlLE/oQCuakPqQ=)
                          2: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: 36SJwMwQnc5Z6CaXgIV9Q5f7SC9VmcHf8jjJMOMqEFE=)
                          3: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=)
                          4: 38332e3135302e3231362e302f32342d3234203d3e203630353538.roa (hash: JKcEyzkTVqyttDFURXSxmaVQ+BAZuAcc4gW4DE+3N8E=)
                          5: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: 57aAYCaE5TgSVJlVlCOXKPFo7D7BRt8yiBp9fnzIrpI=)
                          6: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=)
                          7: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: MH5ZlygNgb75dQQWQsP86UEHzDXise8P11hKvwPLy94=)
                          8: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: woOa8XrslJUNd/zhwfkw+8SfH4VdemvQujuqkpyzwss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:18:cb:e1:c5:cc:fb:26:14:1a:84:a8:b4:6b:3b:3f:41:b6:c7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
        Validity
            Not Before: Apr 13 12:42:45 2025 GMT
            Not After : Apr 14 16:04:45 2025 GMT
        Subject: CN=A29D2FCC4293E08DA789414797610CF80EE866B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:38:15:3a:d3:fd:9e:9e:b7:db:7f:e9:b8:
                    02:d5:1e:34:44:ed:35:b4:3b:cf:6c:78:47:d1:43:
                    9e:ab:d1:ca:47:92:2d:02:a8:d7:fc:7d:00:64:30:
                    e3:ef:b5:91:87:3b:6c:40:17:5f:2c:82:30:7d:19:
                    37:dd:ae:c7:de:fa:72:16:db:67:6d:d8:b7:a0:2f:
                    97:4f:8d:8c:61:3b:3d:d6:21:56:a8:ab:4c:5b:11:
                    14:bd:55:df:be:7a:03:0f:2d:5b:3b:fd:6b:97:3d:
                    0a:3b:2e:7b:ec:26:87:9c:e8:d1:b1:d2:a4:f9:49:
                    f3:33:ad:cc:ac:e5:82:0e:d5:d7:d6:29:e4:9a:4d:
                    a9:9a:30:4e:60:87:35:50:5b:d3:24:eb:39:3f:45:
                    44:1b:83:5b:e2:4e:90:43:c9:40:e9:7a:60:89:ba:
                    39:ca:e3:8d:68:d8:66:a0:8e:b5:5b:72:bd:1d:4e:
                    9b:79:0c:c6:6e:a2:3a:d6:38:b2:22:f1:cd:af:2e:
                    39:b3:4c:14:85:71:56:07:b4:68:88:6b:ad:e1:a0:
                    87:c0:93:b7:a8:d3:93:46:ac:63:a3:ab:b3:40:4f:
                    44:37:6c:77:85:39:65:a0:56:b3:d1:6a:dd:33:42:
                    21:7b:04:54:c7:da:0e:fb:7c:16:93:a5:23:c4:f7:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9D:2F:CC:42:93:E0:8D:A7:89:41:47:97:61:0C:F8:0E:E8:66:B2
            X509v3 Authority Key Identifier:
                keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:94:39:4d:40:20:a9:b6:47:97:9b:20:53:97:4e:88:34:
         6c:00:ab:b5:c4:bc:32:10:8f:4a:62:22:c4:08:78:95:29:b0:
         a7:21:c7:80:6c:0b:82:64:12:cf:f3:bc:a3:c4:4a:81:59:99:
         69:b5:e6:9e:93:2f:cc:2b:99:6b:30:94:f4:37:05:5f:06:42:
         c3:f2:aa:07:f3:c0:86:53:a1:b3:77:df:13:8c:f7:d7:d2:30:
         b6:b5:2f:c4:dd:c8:3a:f0:69:69:5a:7d:b4:b6:52:2f:79:ee:
         c5:25:e8:65:63:46:c3:be:a3:52:c9:e5:4a:42:51:72:ad:1d:
         0b:2a:2a:de:19:e3:b8:7e:cf:69:ee:f2:3e:60:d7:ad:2a:a6:
         fd:a7:a4:42:3d:12:2b:c0:9f:59:13:08:3e:a2:9b:36:5e:8a:
         88:c0:e2:d6:ff:ce:b7:ba:a4:e0:ca:f2:24:50:e1:b0:2a:e0:
         55:45:b1:75:4e:a8:56:f6:73:0c:33:98:a0:3d:09:63:c8:e2:
         9e:78:eb:72:eb:7c:9e:7e:dc:39:33:9b:92:1c:91:1f:16:fc:
         cf:19:cd:ed:73:11:89:97:78:20:3c:3d:b8:6e:2b:1c:b7:a5:
         41:9f:b7:6f:bf:c6:fb:2b:69:01:79:66:84:14:85:f0:9c:10:
         c2:4b:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----