Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File:                     45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier:          Ir7zmyTzPE2UdeurmGxblo3s+rbx41PsNj/gZu5CoCI=
Subject key identifier:   5D:83:36:85:91:BC:B1:A5:84:DE:02:FE:D9:41:7A:E9:46:66:26:25
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer:       /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial:       369CE3F502286A010747B37631E9C950DE1205A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number:          37
Signing time:             Sun 13 Apr 2025 07:27:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:22:43 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:43 +0000
Files and hashes:         1: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=)
                          2: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=)
                          3: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=)
                          4: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=)
                          5: 37372e38312e38302e302f32332d3233203d3e20383334.roa (hash: 8VRwgNXvFUdu3kfmO50807gw1BniQhmC877LSnpGZWg=)
                          6: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=)
                          7: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=)
                          8: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: NlTvbUHFFuojbkkBtYxNBPon7pw+Xo38CZxiWwmugik=)
                          9: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=)
                          10: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=)
                          11: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=)
                          12: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=)
                          13: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=)
                          14: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=)
                          15: 3139342e32362e32302e302f32342d3234203d3e20323130373332.roa (hash: tT1wyhQtNYuEkQ+eyJ48jXUB9g2vmRFlZCizzCPBgqg=)
                          16: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=)
                          17: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=)
                          18: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=)
                          19: 37372e38312e37372e302f32342d3234203d3e20313337353137.roa (hash: mnQJW4GBjGEsRXTh3Y2cxT8Pj8O29OUkMaI68Qj1ywg=)
                          20: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9c:e3:f5:02:28:6a:01:07:47:b3:76:31:e9:c9:50:de:12:05:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
        Validity
            Not Before: Apr 13 07:22:43 2025 GMT
            Not After : Apr 14 11:01:43 2025 GMT
        Subject: CN=5D83368591BCB1A584DE02FED9417AE946662625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:9b:21:82:22:09:f6:bc:3f:7d:7b:78:d4:
                    ac:c7:a1:96:3c:59:a6:91:dd:bc:78:c2:32:a3:24:
                    37:80:f7:88:78:83:0e:79:60:09:f5:bb:1d:0f:55:
                    2d:bb:70:29:32:5e:7f:6a:8b:7c:c4:fe:e8:93:99:
                    47:97:8e:44:e0:64:ac:9e:44:41:40:19:fd:e5:fc:
                    28:4d:22:9a:a4:c8:7c:26:e9:62:3f:27:d9:46:b3:
                    56:66:a6:6c:dd:87:be:d0:f0:cb:97:dd:3d:50:f7:
                    cb:f0:6f:6b:df:ea:0d:77:3c:fe:f1:2c:35:c4:41:
                    f5:74:88:e5:4c:e3:74:97:85:95:73:7e:83:61:0c:
                    d3:ee:39:db:2c:fa:55:4a:63:c6:a0:a1:bf:e3:2b:
                    75:8f:16:66:c9:4a:7b:b9:7b:04:b1:15:5f:f2:10:
                    20:d3:44:c2:24:26:c0:53:fd:5a:e2:76:5e:ee:46:
                    0a:52:ac:f4:89:36:97:f7:77:82:4f:bf:2c:d3:30:
                    5d:45:2f:d1:c8:49:03:18:d0:51:56:b7:2a:82:3e:
                    aa:77:4e:f4:de:93:85:87:cc:cb:f9:0b:0d:d3:f0:
                    f5:ec:2b:5f:9c:12:03:47:96:3e:4d:81:a8:3c:85:
                    27:c9:cf:93:42:d0:72:9f:19:e8:1c:0f:e2:29:7f:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:83:36:85:91:BC:B1:A5:84:DE:02:FE:D9:41:7A:E9:46:66:26:25
            X509v3 Authority Key Identifier:
                keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2e:da:0d:5f:e8:aa:fb:9d:df:30:fe:e7:c4:83:8a:db:ac:
         ff:ff:84:17:ac:25:71:6b:ec:33:5f:7b:d6:79:81:02:dd:a3:
         be:9d:f2:55:b0:1d:b6:69:4d:59:f2:f3:52:82:af:ea:ac:5f:
         cf:58:eb:7a:c7:85:01:fc:ad:c3:3a:5f:c0:87:1e:41:4a:0e:
         31:9c:9c:4c:5c:98:59:a1:16:5d:fe:b3:22:67:01:c3:ce:5f:
         c6:95:4a:26:29:96:b8:4f:6b:d5:17:ce:a4:bf:b9:1b:d6:25:
         eb:32:b2:19:66:3b:18:3d:67:d4:62:78:c1:60:aa:dc:48:a9:
         f4:23:dc:21:6f:53:65:ba:57:4b:1d:11:da:ff:c3:c4:01:4e:
         bd:60:9a:4a:d4:82:84:f2:c8:80:06:3c:a4:e8:42:6a:c7:4b:
         35:96:44:3b:bb:6f:e3:63:da:2b:b0:9a:5b:45:36:c9:4f:ed:
         16:6b:bc:96:21:60:42:81:6c:73:3b:85:ea:a9:59:19:eb:67:
         2a:37:00:c9:f7:6c:b6:af:04:25:81:e0:06:31:cd:a6:d1:3b:
         e1:ed:6a:2e:60:af:42:5d:ab:c3:70:20:ec:e0:cd:85:2f:d7:
         f7:b3:e5:40:e9:d3:06:cc:4c:66:88:d2:e5:3b:93:7d:b2:80:
         e1:4b:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----