Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.mft
File:                     3509F37A88DA7D8DF5D8355261259C1D418E541C.mft (raw, json)
Hash identifier:          081na6R7iF1173oSykr26oa/UYN+ypFCtyzUtBKMZxM=
Subject key identifier:   1C:DD:64:59:DE:03:B4:D1:F9:B8:D5:87:15:F2:9D:0E:24:16:BC:B9
Authority key identifier: 35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
Certificate issuer:       /CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
Certificate serial:       4D0EA4732B4573C4DA0F4514F63E85790DCCC421
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.mft
Manifest number:          0A
Signing time:             Tue 25 Mar 2025 00:01:57 +0000
Manifest this update:     Mon 24 Mar 2025 23:56:57 +0000
Manifest next update:     Wed 26 Mar 2025 02:36:57 +0000
Files and hashes:         1: 3509F37A88DA7D8DF5D8355261259C1D418E541C.crl (hash: RrT4zghQJM05F06ONAbWtflvfuWYJRBRw1zw5b40rnE=)
                          2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: osL3/jDdIUC4nSO/8sgXvP/URENbIO8+dFSvIWvh0hs=)
                          3: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: iOS92ZOzfdaYAwVAG52es9WixwgK6RzegWQ/R4buDFc=)
                          4: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: DW9x/Ypi7+2R2UY9/K8dZ/0qnoPd2+cxPJg/Of/mWSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0e:a4:73:2b:45:73:c4:da:0f:45:14:f6:3e:85:79:0d:cc:c4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
        Validity
            Not Before: Mar 24 23:56:57 2025 GMT
            Not After : Mar 26 02:36:57 2025 GMT
        Subject: CN=1CDD6459DE03B4D1F9B8D58715F29D0E2416BCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:53:09:1f:c0:d7:ec:00:30:ef:d0:a5:fd:c5:
                    6e:66:ec:0c:e5:4a:9f:b3:a5:df:da:91:db:74:96:
                    bf:9b:35:fc:53:ce:9f:6c:4c:ae:df:72:67:b9:d1:
                    3a:6b:99:5c:c6:18:b9:a9:e8:f4:d6:9d:d4:6c:18:
                    19:4a:94:17:78:2b:2b:00:85:ec:60:6d:17:42:53:
                    d3:25:7a:dd:e0:5b:9b:21:e4:1f:0b:c7:4c:c1:6e:
                    37:7c:40:59:34:91:4c:70:2c:35:85:90:7b:d4:48:
                    93:75:f4:8c:2b:10:56:d3:e7:eb:c7:97:40:fb:ca:
                    39:77:9d:b9:f3:43:48:2e:3c:b0:59:0f:33:7a:ff:
                    b1:ef:6f:cb:a8:3c:61:44:bb:21:44:5b:b2:25:70:
                    5f:03:44:2d:bc:d3:a4:34:61:e7:fd:32:3f:4f:14:
                    46:cb:a9:1d:32:81:ba:57:bf:a7:0d:cb:2d:f9:07:
                    1e:4b:db:92:1c:09:16:fd:08:6e:b5:7a:d5:f8:10:
                    a2:5a:a6:c9:72:59:59:d6:95:9d:aa:bd:01:70:2b:
                    fe:c5:89:cd:17:e5:07:0f:76:6f:c7:19:aa:80:0d:
                    6f:99:f5:39:89:7d:af:75:12:74:ea:c6:65:98:26:
                    79:ba:ef:46:31:cf:0f:3e:34:62:d4:ed:a2:c5:77:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DD:64:59:DE:03:B4:D1:F9:B8:D5:87:15:F2:9D:0E:24:16:BC:B9
            X509v3 Authority Key Identifier:
                keyid:35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:aa:c6:cb:82:4e:35:84:5b:0f:cb:83:e8:91:0e:29:f8:
         37:4a:4a:06:99:9d:d7:37:8c:98:28:a9:ae:dd:a4:ac:b0:f7:
         3a:1f:15:a7:21:f6:8b:e9:20:9b:02:27:6d:aa:44:43:51:09:
         30:d5:90:a3:9f:c6:16:39:cf:7d:21:51:11:e1:d3:de:7e:49:
         f6:7c:9e:7d:79:f2:f2:fc:d7:72:15:08:ad:5b:d8:5d:e2:0d:
         45:f6:45:0c:a4:0c:24:05:83:fc:8c:c2:e0:41:03:be:92:2d:
         14:47:13:26:8c:ee:5a:a5:86:33:3a:f5:75:2b:6a:a0:64:8a:
         e9:81:c8:5a:ea:12:5a:a9:78:2d:9a:4b:48:5d:94:96:01:20:
         85:2c:e0:3e:f7:b5:c7:35:43:e0:4a:f5:f1:6f:f2:c7:ab:e1:
         45:68:47:83:d5:7e:9a:ca:96:55:c5:51:13:9f:de:25:da:57:
         a7:11:c7:fc:05:3c:ce:15:e2:c7:9b:ed:2a:26:c7:52:7b:03:
         6f:89:fc:df:c2:34:7a:35:08:d9:de:4f:fe:32:4e:9d:48:fa:
         4b:fb:ba:0a:31:9f:48:cc:69:fc:43:49:35:ed:84:16:fb:60:
         e4:3d:0c:e3:ca:00:73:af:1e:bb:0c:92:62:7b:50:c3:bf:e4:
         70:1d:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----