Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          rd5lVPgDd8VPswxhAGZ5WLApFVf0bxj4ggrPd7hk0Xc=
Subject key identifier:   E6:A8:06:AA:7B:19:D4:22:21:35:6D:5C:3C:1A:2F:FB:05:9C:35:10
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       7FF37C4E7E2CF4FF88313E373393D890BA5D2AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          02C3
Signing time:             Sun 13 Apr 2025 02:31:05 +0000
Manifest this update:     Sun 13 Apr 2025 02:26:05 +0000
Manifest next update:     Mon 14 Apr 2025 05:30:05 +0000
Files and hashes:         1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: Dcvv1Ul0JGTxvGw2Ps2/e001gxa3ZWx5ttvSXeBWQh0=)
                          2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: OgJ5IHBdzo8hNNE/hueSPIOCulRspm4s5gp10NbE/v8=)
                          3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: h3dTV4C/CdP+WIr4Pl3SXrjTvabxqjHd4N3uCg8Vp3A=)
                          4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: tM6AOBSdq8t/+b2jwQliXrToX+/NgR89RNEhgmdHZII=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: xrYxMPWlm0NFN/UuQmB97S5T+AeBbukKizXkLUfGrf8=)
                          6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: BTfImX353JFUgcIZ2jDRlZdLmp+KqSbtrCi6ArFxd6k=)
                          7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: ytuECs7j4zGJqJdJa4rGkrEPCrlfuZ9RaEY2T4xYUeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f3:7c:4e:7e:2c:f4:ff:88:31:3e:37:33:93:d8:90:ba:5d:2a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Apr 13 02:26:05 2025 GMT
            Not After : Apr 14 05:30:05 2025 GMT
        Subject: CN=E6A806AA7B19D42221356D5C3C1A2FFB059C3510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:84:3c:23:9c:3c:49:dc:76:07:1b:3c:96:
                    d2:89:1c:ad:79:81:84:9a:94:ee:5e:a4:9b:dd:14:
                    c4:72:d8:3e:51:d7:57:35:17:f4:6f:ca:4f:d1:ff:
                    70:bd:92:d8:fd:40:c0:66:e7:a8:86:60:28:8e:fe:
                    17:a6:91:44:7f:3f:8c:44:5e:37:d0:31:0a:04:fa:
                    ad:2e:18:5e:d1:16:bc:27:31:b9:33:66:6b:15:36:
                    bb:6b:df:ef:62:8b:f6:8a:7e:b5:fc:ce:ca:18:2e:
                    b6:28:e6:c4:4b:ec:a5:52:38:12:94:45:95:c5:db:
                    88:8d:25:6b:07:8b:2f:ca:47:88:b6:d4:de:7d:94:
                    7a:57:f0:83:18:9b:c6:47:a6:05:94:e8:65:75:bb:
                    41:b2:8d:17:f8:52:c8:41:41:c3:e3:79:a9:bc:2d:
                    51:08:a4:9e:b6:3f:07:78:5b:a3:d6:7d:cf:70:1f:
                    73:ec:2b:a8:ac:d5:42:f3:43:89:00:d6:bb:70:f6:
                    c6:10:7d:03:e6:a5:8e:f4:0c:e9:13:95:82:49:1e:
                    7e:8f:6b:d3:d9:9d:04:df:52:c0:2f:b4:f2:66:13:
                    0a:b7:3d:fc:71:e5:8e:38:d5:7f:64:b2:66:be:2a:
                    a5:32:13:77:f1:29:61:ad:c9:66:95:0f:cb:4f:b2:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A8:06:AA:7B:19:D4:22:21:35:6D:5C:3C:1A:2F:FB:05:9C:35:10
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:7f:34:a1:d8:34:3f:a3:a5:cc:17:64:82:91:65:fa:6f:
         a5:45:00:23:01:9e:e6:1a:a9:c6:ab:4d:b5:6d:7a:57:ad:27:
         ed:18:0b:80:2b:a8:c3:c7:4f:0e:bd:af:3a:99:57:fe:16:5e:
         de:e8:8c:99:ff:c9:8c:8f:fb:52:18:df:24:a7:2d:cc:32:56:
         ed:5f:d5:54:6f:7f:6f:76:87:61:4f:53:05:3a:6c:84:de:80:
         b8:bb:d6:6e:10:18:13:ba:85:2b:9a:c2:6b:f9:78:7c:9b:c9:
         0d:26:e2:6e:40:37:d0:9d:28:ef:e0:23:c8:09:48:d5:f4:39:
         17:bd:db:48:e5:80:1b:e6:03:bd:e6:34:8b:98:8c:94:cd:25:
         15:ea:3c:e9:de:12:1c:1b:29:6a:db:e9:39:05:3e:00:00:7d:
         63:1f:1b:1f:55:b8:b7:9e:4d:68:62:71:3b:9c:0c:86:c7:7e:
         5e:4d:16:b7:6b:85:c3:3e:fa:06:6f:e1:2e:87:49:bb:8c:4a:
         4d:41:3d:71:cd:3d:94:0c:25:fa:f9:cb:df:c6:0b:79:99:85:
         e0:05:7b:f0:c4:ff:df:37:4a:2e:d5:53:6a:36:48:eb:70:18:
         92:35:35:1b:0a:77:16:64:26:f5:b1:2e:00:00:a9:d3:28:0f:
         ac:56:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----