Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File:                     4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier:          Vpn4UeV+dPUjVk+Q3iSAt+xSE9iJIgyU2J2AfdGtF+Q=
Subject key identifier:   DD:C7:44:A8:BD:99:41:AF:2D:FE:B2:74:7D:A7:4D:F2:79:7A:36:79
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer:       /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial:       04D11951CBF98B080EC7EB115A7F0319A741DCE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number:          27
Signing time:             Sun 13 Apr 2025 10:50:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:45:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:22:07 +0000
Files and hashes:         1: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
                          2: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: R7SR6fyyaP3LSVfXdlcVFRlo68EKp3DgGozxz/aWYy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d1:19:51:cb:f9:8b:08:0e:c7:eb:11:5a:7f:03:19:a7:41:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
        Validity
            Not Before: Apr 13 10:45:07 2025 GMT
            Not After : Apr 14 12:22:07 2025 GMT
        Subject: CN=DDC744A8BD9941AF2DFEB2747DA74DF2797A3679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:13:c5:f8:2b:2d:27:1d:71:90:d2:80:cc:26:
                    0d:5f:20:42:36:e3:cf:8b:bc:26:67:65:8b:dd:6d:
                    70:bd:a9:e4:83:b9:ae:88:2e:14:c0:85:e7:ff:85:
                    b0:5c:9b:8d:c1:50:21:76:0e:47:0c:2e:1c:b2:27:
                    ae:84:62:15:eb:2c:18:b2:69:d0:1c:cd:bb:9a:b7:
                    81:78:04:07:88:8c:4f:05:7a:7a:1d:53:4c:0f:4c:
                    00:eb:24:54:c0:d4:e3:7a:95:92:89:5a:be:1e:c0:
                    5a:1f:06:af:b3:f2:1d:75:fb:0b:ef:43:1b:f2:71:
                    74:76:70:51:6f:8e:60:70:37:fe:d9:43:6a:ac:c3:
                    6b:16:e5:98:7b:6f:9c:2d:d4:d5:af:9d:e8:c7:e6:
                    7f:67:be:03:d2:5d:4f:7e:f6:e5:67:67:fa:d9:01:
                    14:a5:0a:49:94:6d:ed:27:15:6f:7b:d0:1b:de:97:
                    4e:04:de:5d:01:33:4e:e5:13:eb:89:90:83:2c:17:
                    bc:f5:88:24:52:30:48:b5:3b:0f:2a:bf:ba:5d:2a:
                    07:ce:ea:9a:d3:fd:1d:79:e7:7d:0d:a8:01:f6:51:
                    02:d1:89:f4:95:c3:84:d7:66:b3:97:62:0a:80:77:
                    c5:ca:5d:5f:fd:64:85:7e:c8:6b:f3:f6:64:d0:3d:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C7:44:A8:BD:99:41:AF:2D:FE:B2:74:7D:A7:4D:F2:79:7A:36:79
            X509v3 Authority Key Identifier:
                keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:f8:9b:72:1a:53:49:fd:e5:ae:24:b0:23:00:ff:55:7d:
         e5:16:d5:fc:64:25:74:a8:91:d3:ea:90:fa:8b:02:b4:6e:e7:
         71:d8:fb:26:73:bf:6b:1d:0b:17:a3:73:ae:68:38:ef:82:ea:
         f6:1c:28:5a:26:38:88:6d:a5:e6:c0:f7:cf:ad:30:51:f5:99:
         96:9e:df:b2:c6:85:17:73:45:a7:e9:b2:da:c4:a8:c1:f4:fe:
         80:c1:a7:1d:99:b7:d0:50:6c:ef:dc:0d:1a:ab:34:8a:bc:af:
         71:4e:e2:57:e4:a3:5a:49:80:a1:27:95:50:72:06:cd:02:31:
         0e:32:83:dd:1b:5e:53:4d:d1:e8:7b:8d:d3:83:05:7f:35:69:
         eb:97:0e:f7:8b:dc:5d:c3:fb:a8:32:bf:73:15:0c:4c:a6:b9:
         73:5b:de:63:22:7c:c0:70:bc:6c:0f:fb:ee:4e:37:78:3f:6e:
         ae:ab:9d:cb:fd:2a:5a:eb:f7:c9:08:02:f8:66:9a:af:f2:d4:
         31:60:3b:e0:8d:6f:ca:40:9a:8e:47:03:a3:94:f2:79:3c:65:
         e9:0e:34:80:49:86:59:93:ed:a0:05:ac:16:61:86:08:5f:4c:
         9d:ea:af:9a:8a:b5:af:8e:d6:c3:bd:4d:7b:c8:14:7e:dd:4f:
         95:8f:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----