Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File:                     D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier:          HYgLPYFjiMp4Qko4KRCTFc/p9GfGfqfVt0/0jRBJ6og=
Subject key identifier:   92:BA:5F:47:70:D6:3F:93:85:15:39:7E:22:0A:AD:BC:7A:17:62:2B
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer:       /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial:       75F6F41213C058CA0092389F3AD851EAD4FA2933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number:          01EF
Signing time:             Sun 13 Apr 2025 15:58:41 +0000
Manifest this update:     Sun 13 Apr 2025 15:53:41 +0000
Manifest next update:     Mon 14 Apr 2025 16:16:41 +0000
Files and hashes:         1: AS215828.asa (hash: pljuqamxoFyrKyOB146Yq2hAbS4GhBcCYl/vXn6L4AI=)
                          2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 8ig3QIAjuSHw9smdgR9mHI5Ctind4yPuFT/sngZ0bus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f6:f4:12:13:c0:58:ca:00:92:38:9f:3a:d8:51:ea:d4:fa:29:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
        Validity
            Not Before: Apr 13 15:53:41 2025 GMT
            Not After : Apr 14 16:16:41 2025 GMT
        Subject: CN=92BA5F4770D63F938515397E220AADBC7A17622B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:f8:a7:4e:86:7e:56:b5:38:84:83:97:ed:
                    f0:70:99:25:f2:ea:8a:f2:2a:26:c1:1c:5b:45:56:
                    98:e9:9b:7c:98:6c:1f:69:c6:d8:26:8f:57:ed:79:
                    4e:a0:98:98:84:29:d7:21:7f:4a:b3:1c:60:d9:03:
                    0d:86:15:0f:43:ca:65:39:32:22:95:11:7f:0d:16:
                    53:26:46:aa:fe:74:f4:e4:ed:69:17:4b:68:5c:7f:
                    95:3f:ea:d8:61:6a:b0:2e:7f:bb:40:d0:c3:1d:c2:
                    03:62:fe:a2:ef:e4:8f:31:77:89:aa:c8:c8:3e:43:
                    9f:d9:d1:dc:dc:7a:b1:12:2f:c6:59:14:28:2e:c5:
                    cb:af:81:02:7c:3f:13:49:48:c5:b0:eb:ff:19:6a:
                    ba:8b:2e:c0:6f:5a:24:9a:b4:18:6c:02:92:6e:27:
                    fc:5b:46:b8:60:d7:c3:ad:95:78:ba:c3:7c:14:04:
                    38:37:f1:85:ef:32:ca:e8:c5:94:97:80:7f:4a:24:
                    5f:3f:df:a6:b3:a7:9a:db:c9:ea:e6:35:7a:57:35:
                    54:86:dc:b6:40:f5:ea:89:0e:d2:72:df:6d:34:ae:
                    94:a7:53:8b:ee:27:e6:65:a4:4a:92:81:b4:91:95:
                    5f:b8:4c:e2:9c:46:8f:84:24:b8:22:52:c0:ef:74:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BA:5F:47:70:D6:3F:93:85:15:39:7E:22:0A:AD:BC:7A:17:62:2B
            X509v3 Authority Key Identifier:
                keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:d0:7e:18:e0:01:81:d9:5a:1c:53:ea:a8:a5:85:32:82:
         1f:ad:4c:5f:fc:63:3b:45:12:b1:12:bd:39:a3:61:22:f9:75:
         5d:95:a3:cd:83:4c:17:35:3b:a1:d6:a4:36:74:01:bc:df:66:
         08:2f:00:72:8d:83:54:dd:0d:27:42:b7:81:24:68:49:fc:2f:
         88:5d:e7:33:9f:e7:62:5e:6e:e5:95:87:53:c9:07:6f:82:41:
         9f:37:e9:f9:c8:58:1b:b6:2a:61:e7:6f:27:f2:ae:a7:1b:1e:
         1e:01:5d:d8:84:65:54:80:a4:d3:f1:4c:d4:29:b7:2c:1f:4c:
         8b:4b:ea:a8:6c:fd:91:85:f6:49:06:8b:5c:bf:c7:24:7d:d5:
         75:25:4e:2e:98:71:c5:ee:52:17:ed:bc:5a:a4:cc:13:b9:8e:
         35:b0:ad:53:95:0e:70:72:03:0c:01:a0:13:8b:57:c0:b2:a1:
         de:43:86:75:c5:6a:2c:8f:42:f8:7d:47:17:fb:e6:a2:07:67:
         79:0a:ca:e9:1b:a3:b9:6c:e9:b4:d9:dc:9f:23:93:d3:a9:cf:
         93:ce:47:ec:96:da:85:21:69:1d:e4:86:fe:34:d6:1a:10:15:
         2a:45:b5:0b:f2:dc:ce:fe:c7:6b:26:16:64:0c:68:f7:88:6e:
         49:82:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----