Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File:                     9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier:          2jx9HuL4zeDjLxhobDo57DvyC62DbctLuoK4WhNVEKM=
Subject key identifier:   EA:DD:C1:FE:FC:4D:39:4F:63:15:A0:F5:34:46:10:29:35:65:73:A2
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer:       /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial:       06F37E32223A76069F9E48F4C1DF4B33E35A64C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number:          CB
Signing time:             Sat 12 Apr 2025 20:11:22 +0000
Manifest this update:     Sat 12 Apr 2025 20:06:22 +0000
Manifest next update:     Mon 14 Apr 2025 20:50:22 +0000
Files and hashes:         1: AS209735.asa (hash: LH39xuFInQIUN2uaAZuKOVXU5e6fBODPhrhpjvBdNYs=)
                          2: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: q2Xj+PFV6OLD5TeySKVdio2qnkettP6t5rOukJA5xXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f3:7e:32:22:3a:76:06:9f:9e:48:f4:c1:df:4b:33:e3:5a:64:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
        Validity
            Not Before: Apr 12 20:06:22 2025 GMT
            Not After : Apr 14 20:50:22 2025 GMT
        Subject: CN=EADDC1FEFC4D394F6315A0F534461029356573A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:ea:25:f5:f9:8e:ee:3e:62:2f:21:b5:24:
                    9f:69:26:43:e0:88:d6:c6:ea:2d:bd:76:34:a9:14:
                    bc:b9:33:f9:6a:4d:d7:2b:e5:9a:dc:18:9c:c2:1a:
                    f1:01:98:3e:37:73:1d:c0:16:13:94:c7:0f:e8:80:
                    f9:43:b9:1e:d4:99:1f:14:93:4d:bc:97:f4:8e:4d:
                    c1:9a:44:b9:dd:29:9c:38:49:73:b1:7e:a2:42:8c:
                    e3:99:6e:01:bd:c6:4e:ff:8b:3e:b7:0a:4d:1d:54:
                    ce:08:db:6c:f2:22:67:77:7d:d9:e8:70:1f:54:9d:
                    f0:78:5c:6b:9d:27:5a:aa:50:e5:8f:71:04:40:04:
                    62:ba:9c:a4:41:6c:f3:97:50:49:0e:6d:ea:47:ad:
                    d2:95:c0:b5:db:47:f2:b3:a5:9d:0d:07:16:cc:df:
                    3c:49:02:44:1d:e9:a5:ef:ee:42:8e:91:9a:e2:ba:
                    87:30:12:02:65:9c:2c:03:7e:13:5d:7f:7a:f2:e2:
                    64:53:d0:0e:de:24:05:bf:7f:0e:78:eb:42:0d:d5:
                    f7:15:d5:6e:3e:77:3e:9d:52:0d:7f:8b:f8:ca:09:
                    0d:a9:52:b1:17:9b:aa:04:96:dc:71:8e:bb:16:c3:
                    59:60:ad:dd:82:e7:df:1a:fd:01:8f:2a:d8:06:3f:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:C1:FE:FC:4D:39:4F:63:15:A0:F5:34:46:10:29:35:65:73:A2
            X509v3 Authority Key Identifier:
                keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:40:18:7d:a8:e3:94:ec:e8:b2:3e:b9:57:b4:3e:7e:31:43:
         84:83:fa:fa:54:3f:1f:0e:34:c7:37:ea:9a:2b:26:6a:62:9b:
         b6:73:da:7e:33:eb:d1:c8:1b:f1:30:b9:01:3e:44:84:0c:27:
         ce:bc:f1:08:28:7d:b4:b9:63:0d:b4:6b:45:75:1b:d3:03:3a:
         2d:50:06:78:59:0b:f1:47:eb:05:c3:d6:af:61:2d:c6:a6:14:
         21:c2:3d:f2:68:68:0b:8a:3b:d3:2b:1f:39:98:02:4c:29:f3:
         ae:ea:f0:e4:37:c8:6c:14:f1:aa:f8:9b:c1:0f:18:2b:27:d3:
         ab:4e:76:8a:9c:7f:ec:fb:38:cb:67:db:93:a1:f9:12:91:93:
         b6:9c:2e:e8:77:d8:7d:89:88:bd:2d:b0:b7:78:b6:bd:00:71:
         90:63:0c:b8:16:6f:78:c2:38:06:ae:c4:96:aa:61:c7:f5:58:
         7d:3b:5b:e7:73:8a:1f:14:e7:68:1b:ca:fb:78:1a:cb:4e:d5:
         2a:1d:5e:f9:59:00:47:8e:1a:1e:8a:35:e2:cd:bd:d2:03:15:
         ea:91:6a:e0:99:76:ad:a3:6c:e2:a9:d8:f8:d3:72:b4:a1:a8:
         e6:b0:16:09:15:18:db:a1:60:0e:d0:71:46:bb:37:f4:ee:1c:
         6c:3c:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----