Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          OvY0L6bk7dMbFstwneBGg8EcVJ0PdCuDelLh6cyLyIA=
Subject key identifier:   0B:D9:53:E1:51:31:16:36:FC:0A:7D:52:BD:7B:C9:1E:11:7D:56:5E
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       692DD7C404E9003E2AA55C951A2EE6D4027EABB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          A2
Signing time:             Sun 13 Apr 2025 12:37:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:32:45 +0000
Manifest next update:     Mon 14 Apr 2025 15:28:45 +0000
Files and hashes:         1: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=)
                          2: 33312e3138352e3130372e302f32342d3234203d3e203231383539.roa (hash: X23TgVm2+OwqELUYhUauYCGCU9YC3xkuQ9JiAV3abPE=)
                          3: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=)
                          4: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=)
                          5: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          6: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          7: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=)
                          8: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=)
                          9: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: WBCIYbrpu1pMOomwRaeYURzy67p6MiGYbql34YgsbqU=)
                          10: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=)
                          11: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=)
                          12: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          13: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
                          14: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=)
                          15: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          16: 3138352e35382e3135372e302f32342d3234203d3e20323132333438.roa (hash: PJqchqcDu0h0EcPi1D5ya//wXOUcg51LCHqSFB3Qerk=)
                          17: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=)
                          18: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2d:d7:c4:04:e9:00:3e:2a:a5:5c:95:1a:2e:e6:d4:02:7e:ab:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Apr 13 12:32:45 2025 GMT
            Not After : Apr 14 15:28:45 2025 GMT
        Subject: CN=0BD953E151311636FC0A7D52BD7BC91E117D565E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:11:21:d6:43:8b:59:56:06:25:46:8b:3c:
                    18:cf:59:a9:af:cc:fe:de:88:1c:c1:57:e0:0a:2d:
                    da:e3:db:e7:7e:7c:1a:29:bd:a4:80:c6:23:5b:b1:
                    54:02:13:4b:fe:e4:ca:e1:05:df:37:6a:e6:98:57:
                    b3:98:d2:18:36:3c:c7:b5:e4:8f:cd:12:67:87:19:
                    c4:27:87:bb:d7:d2:c3:e4:fb:5c:cb:cc:3c:27:1e:
                    0e:4c:99:67:1a:6c:0d:c7:e1:28:f6:50:3a:70:e8:
                    ef:48:7b:67:53:89:25:9f:69:8c:1d:3c:fe:6a:bc:
                    d6:77:0a:59:22:ca:29:5a:b0:38:ed:80:5b:9a:6e:
                    1e:71:cd:15:8d:15:57:b1:fb:d4:47:e5:1d:53:1d:
                    d5:57:05:44:c8:aa:fe:cc:4f:aa:f9:55:00:56:a1:
                    ae:52:e4:21:38:a8:f5:73:1e:ec:41:e8:e0:b7:db:
                    4a:48:f8:62:ea:2e:46:09:2f:f5:7f:c1:bb:74:13:
                    09:88:ae:f0:0b:b1:20:05:33:ee:10:b5:3b:86:29:
                    e1:34:70:b1:1a:ec:8d:a7:a9:9f:14:09:27:87:04:
                    02:43:e1:28:b0:f8:e1:45:45:82:b8:f5:ad:e1:7a:
                    25:cc:3e:11:74:a3:e7:6b:1d:a9:8b:81:b8:e8:5e:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D9:53:E1:51:31:16:36:FC:0A:7D:52:BD:7B:C9:1E:11:7D:56:5E
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:dd:cb:d5:f4:73:b8:68:12:dd:18:63:dd:eb:13:4d:38:f2:
         fc:d1:0a:aa:e9:41:66:df:88:b7:8f:be:dd:24:62:f1:b4:95:
         e8:86:25:57:bb:d9:f4:95:4a:47:b4:bf:18:64:6c:a5:62:53:
         26:bb:4b:74:78:68:a3:b7:43:e9:11:8e:01:6f:96:67:6e:ee:
         5a:6d:65:08:d7:58:7d:5c:5f:bc:d0:d2:ce:2e:6a:41:e9:32:
         c9:74:13:5e:3e:22:74:68:1a:39:c1:4b:9d:4e:1b:78:e5:bd:
         c9:67:09:be:95:09:d4:16:8f:56:f1:5e:74:ff:c2:45:d6:75:
         d9:7f:9b:68:b3:30:5a:2e:3a:0a:01:fd:00:95:f2:66:4b:b6:
         70:66:54:5d:16:7b:da:7c:6e:85:2d:e8:f1:06:89:a9:2e:91:
         94:fd:35:91:3a:78:9b:19:08:cc:76:99:25:f3:60:6e:e8:d1:
         58:3e:e0:e0:a9:04:e1:bb:9c:e8:42:4e:94:9f:6a:1b:9c:c9:
         fa:fc:c5:8c:dd:33:7e:f1:64:e7:ae:6c:d9:b5:97:bd:98:c1:
         fd:a9:55:68:3e:11:ac:5a:cd:a1:a5:18:f8:7f:db:f0:7b:fd:
         2d:1d:a9:35:a6:a3:68:e4:f8:3b:2d:d0:fb:77:a8:92:d0:2a:
         0d:75:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----