Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          MnlRg1Vi3m2royg0IiP3Yhp0UtvExu1mTUWpZTPIwjc=
Subject key identifier:   C7:2E:4D:62:6E:EE:54:A0:FD:1D:F1:87:BE:96:8D:59:D5:C1:22:4F
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       59DCB474842E52B67CF95B528086BA025FAEC4E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          0144
Signing time:             Sun 13 Apr 2025 14:48:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:43:41 +0000
Manifest next update:     Mon 14 Apr 2025 15:22:41 +0000
Files and hashes:         1: AS215849.asa (hash: 9UZCyM4teIzSn1Im2N0q8YebSfMGXCtXc/dqDr5kuPE=)
                          2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: uWhTjqeHIH1U/giPm+5wNYjCa6jAlfnjok7tjBAh+HY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dc:b4:74:84:2e:52:b6:7c:f9:5b:52:80:86:ba:02:5f:ae:c4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Apr 13 14:43:41 2025 GMT
            Not After : Apr 14 15:22:41 2025 GMT
        Subject: CN=C72E4D626EEE54A0FD1DF187BE968D59D5C1224F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ca:8e:ff:2e:f7:15:35:24:42:7f:61:ba:84:
                    fc:6e:58:9f:f2:a7:e8:c8:2d:2f:fe:5a:7d:b3:72:
                    ad:57:2b:80:80:30:5e:89:ef:8d:d6:1c:ef:2d:a4:
                    ab:a8:79:90:59:81:8d:58:39:23:17:84:d0:6e:90:
                    2d:d0:f7:c1:1d:c2:b5:6e:39:3f:72:9e:7f:3a:5b:
                    5a:c9:3c:d4:b1:f9:68:3d:a5:af:d7:5b:9b:b1:6f:
                    40:59:69:f4:cb:60:73:ab:17:b2:5e:2e:76:06:d1:
                    fe:b3:78:1c:d0:36:f5:7e:16:5e:01:80:33:95:cc:
                    64:bd:0c:d9:0d:df:6d:e5:13:89:52:e4:95:dc:98:
                    51:99:8e:5c:7e:9f:f3:e9:b9:74:74:62:a6:08:c4:
                    16:de:fe:43:82:8c:88:2c:27:04:c3:ba:d1:54:6f:
                    70:e7:20:4b:4e:aa:34:b3:9e:3e:e9:2e:08:b7:91:
                    e3:cd:c8:6c:e7:bf:2c:f1:9d:b0:e7:b1:26:05:7b:
                    e3:5d:c9:65:b3:6d:55:51:f6:56:bb:b7:3c:1a:72:
                    a0:46:27:4c:25:2e:aa:f1:e0:41:ae:2f:16:7b:e9:
                    2a:5e:10:b9:17:4c:41:00:43:23:50:58:0d:67:12:
                    61:e4:6d:24:fc:b2:04:c3:da:e1:98:1c:07:da:f3:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2E:4D:62:6E:EE:54:A0:FD:1D:F1:87:BE:96:8D:59:D5:C1:22:4F
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:bd:c9:20:e9:90:f3:c1:c4:d5:78:75:0f:d7:87:aa:2b:
         00:46:c0:21:aa:56:f3:aa:53:a7:b6:d4:93:a6:d5:58:4c:63:
         5f:35:45:98:fe:21:03:f8:bc:72:b9:cb:88:a4:2a:ea:93:ec:
         2b:46:d0:9c:68:38:80:ab:14:40:2a:ec:fd:f0:d1:7a:1c:2a:
         13:30:ed:15:38:ae:15:4a:a4:34:c4:35:6c:4d:10:43:99:ff:
         1c:c3:2e:6d:81:04:ae:a3:96:d0:5a:ae:2d:ca:d0:88:8b:49:
         4d:ba:f4:dc:5c:85:ec:00:f5:5a:f4:e0:00:f3:c2:99:bd:b3:
         79:18:33:1d:f4:90:33:74:5e:d7:d2:b3:3b:8c:1f:f5:92:90:
         40:16:9b:8a:99:24:3f:03:a0:95:9e:05:f7:e9:e1:23:89:6c:
         55:d8:1c:93:e3:6d:26:7b:44:5a:9a:cc:0b:fd:8c:19:56:19:
         ec:51:8f:da:a7:73:19:69:ef:97:da:67:04:20:74:9b:28:60:
         e8:1a:1e:77:e0:80:02:58:f1:d2:d0:38:80:db:05:c2:af:2a:
         e1:66:0f:f4:bb:24:f8:a4:e5:e2:a4:25:0b:ba:21:86:21:25:
         8d:29:da:89:c9:97:08:7b:87:46:d0:79:42:1a:31:11:a2:fa:
         d3:07:6c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----