Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          fSfysPCrcuhm/IL6jG+XcO2D0Isqo1gUtw0ODnpeGT4=
Subject key identifier:   9F:61:EA:C6:D3:A9:10:C5:F4:C4:D6:97:4D:ED:15:60:7E:0E:25:38
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       3FAF275E6B6C06FE489E63B7CEE4D7985D10FDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          D8
Signing time:             Sat 12 Apr 2025 21:51:22 +0000
Manifest this update:     Sat 12 Apr 2025 21:46:22 +0000
Manifest next update:     Mon 14 Apr 2025 23:26:22 +0000
Files and hashes:         1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: wf0gHXXBBWPmO3R3VCEFGPpYJHVvVRCn8AwrMcypSBw=)
                          2: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:af:27:5e:6b:6c:06:fe:48:9e:63:b7:ce:e4:d7:98:5d:10:fd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Apr 12 21:46:22 2025 GMT
            Not After : Apr 14 23:26:22 2025 GMT
        Subject: CN=9F61EAC6D3A910C5F4C4D6974DED15607E0E2538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:8e:4d:51:c0:bb:46:29:23:e0:23:a1:2e:
                    33:24:2a:f6:d5:88:5e:e1:0e:c9:b7:00:70:67:e8:
                    76:99:cb:83:54:1f:c8:d4:08:c6:d0:55:41:46:40:
                    e9:2a:9b:9e:ea:34:d3:15:c3:70:f9:0d:7b:4f:2a:
                    05:7b:e5:ca:c2:49:0b:6e:52:9d:ea:5e:07:df:7f:
                    8e:e9:b5:0a:36:d0:38:a3:f7:c7:23:42:8a:a1:0d:
                    ef:dc:1e:84:a8:a2:17:cf:eb:29:7c:e2:4f:d8:07:
                    10:c6:d1:0f:eb:f5:64:a7:b9:10:82:40:c0:37:b1:
                    fb:80:16:0a:f3:b4:26:8d:57:44:cf:88:31:de:f0:
                    b9:eb:44:5b:75:de:9e:28:d4:cf:7f:72:f4:80:54:
                    21:86:50:b7:53:0c:a3:c1:c4:24:fc:48:aa:c4:76:
                    37:62:8f:93:0a:45:85:ab:41:01:6e:8f:3a:9d:57:
                    f4:42:0e:81:5a:7b:69:f6:72:f0:de:5a:d6:b6:61:
                    53:33:1d:db:19:a5:fb:a9:b1:99:d6:a1:3f:ca:43:
                    43:c3:1f:f6:56:1b:78:7f:fb:ba:5a:d5:21:9b:b1:
                    ec:54:ff:08:c3:b1:2e:24:48:5c:cf:e9:ce:a8:c2:
                    07:14:76:a5:33:ff:cf:1c:af:5a:8f:7f:2a:10:03:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:EA:C6:D3:A9:10:C5:F4:C4:D6:97:4D:ED:15:60:7E:0E:25:38
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c7:fe:01:01:52:6b:81:cf:49:b7:dc:47:bd:e6:5e:04:d6:
         9c:9a:07:0d:8a:0d:c3:02:49:75:c3:19:a5:19:94:cf:d7:32:
         c3:de:bf:79:4f:1c:cf:68:da:79:a7:34:f3:1b:06:18:22:b0:
         f5:cf:ba:9f:b5:28:b6:36:c4:da:e3:76:1a:0e:52:d4:ab:3c:
         f7:70:c0:0d:2a:b9:08:7b:a4:9d:f1:d1:a4:89:6c:0e:5d:c2:
         07:d6:38:e7:97:8e:d3:6f:ac:d7:c3:b6:45:e7:39:8b:69:fc:
         d9:2e:67:7b:76:ee:9d:b3:01:69:01:3d:48:1e:96:ac:05:e2:
         8d:e4:16:67:64:94:84:22:dd:78:44:12:ab:3f:d0:20:f3:06:
         db:6d:dd:4b:dd:25:97:7c:36:75:27:11:e6:06:47:73:63:a0:
         88:b4:c3:71:34:5e:b9:17:a1:4f:3a:b8:15:84:da:73:43:1b:
         30:1b:68:df:c3:7a:95:91:f3:46:43:c0:0c:5d:4b:4d:79:1d:
         16:0d:c8:96:55:af:0c:e1:6e:c3:41:47:b0:64:f9:8e:90:35:
         63:6f:7c:84:bd:b0:cf:d0:61:89:f4:32:b0:df:da:08:68:2c:
         55:10:df:81:0f:42:3c:97:43:7d:e4:b5:e2:dd:b3:ca:49:86:
         a5:60:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----