Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
File:                     D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json)
Hash identifier:          Mzb/hwigyiPOeZnIWTTAV4mvkWLXb+4PAtzb554N0kA=
Subject key identifier:   37:B0:07:3B:A9:F2:19:9A:AA:00:26:DB:D1:58:E3:10:E6:CC:23:88
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Certificate issuer:       /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial:       0D4CD31E73BCF8D8D3835AC89DD56554F60A35F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
Manifest number:          03ED
Signing time:             Sun 13 Apr 2025 05:12:42 +0000
Manifest this update:     Sun 13 Apr 2025 05:07:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: 942AY3aIXpWcpNRAI4FQQbOVOPgbCMfXdV38DKJ59RE=)
                          2: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: ZPrP8dQxnBlRV+SMhznGOOGWIIG1iXyuTJIlGLJRrkk=)
                          3: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=)
                          4: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=)
                          5: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: KBQWp2YW6b35tXBZxmWFRr/DTme9e2nhX14tjQgVgwA=)
                          6: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=)
                          7: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=)
                          8: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: axad6y4WO54wAX0JBbPnOOK6hI/gTIiMU9ubKRwS/L8=)
                          9: 34352e38362e39332e302f32342d3234203d3e203631333137.roa (hash: 1x2zpcTAYyd8XetSB0JjPvLUa4clQe7hwjPf8ExgQOI=)
                          10: 34352e38362e39352e302f32342d3234203d3e2031323939.roa (hash: yQKHHpn8wCUHU+dOg286104MyMwPlf9k9qfBkCNGEsg=)
                          11: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=)
                          12: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: QHhKDdx7KbEi2pWBI66gL/yJWrRkXWlW9Ll3iu5yUnk=)
                          13: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: MlVhq9YMUDch69apYFS1riPDRY/vCEBSVcnZ0AXUbzA=)
                          14: 37382e32342e3132342e302f32332d3234203d3e20383334.roa (hash: aR9bXXTYwrcEpOUA5zP1Au4UdLHmUATKygkKxMy2Hyo=)
                          15: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: /Sw/kTcH9aO7bMcRnVprTh49TII5UJ49lP8PepQkn1Y=)
                          16: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: Anw+Ot0jzMET4Sk6hQNdmMLNf7QzBxX2vhTMbwb0Hp4=)
                          17: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 7W/JQiIhBxvV9lPwlVaE2K95jNPOksJaHe90LVwGv1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4c:d3:1e:73:bc:f8:d8:d3:83:5a:c8:9d:d5:65:54:f6:0a:35:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
        Validity
            Not Before: Apr 13 05:07:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=37B0073BA9F2199AAA0026DBD158E310E6CC2388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:b1:da:c6:04:bf:61:f2:0e:77:a7:e8:11:
                    75:ef:1b:b9:a7:07:c7:37:64:49:a2:55:23:58:c1:
                    8b:41:dc:e8:86:09:da:7a:81:29:74:0e:3b:f4:00:
                    d2:65:d2:13:7c:1f:6b:71:5f:3b:2d:31:a6:30:1f:
                    d5:48:52:5c:d6:18:5d:ce:fe:82:2b:50:b0:49:c0:
                    69:a2:f2:09:0b:72:30:3b:fa:7e:12:9a:e1:19:9b:
                    53:93:74:b3:02:17:3f:01:bd:ee:76:21:3f:98:ac:
                    26:79:4d:4e:b8:b7:fb:d8:8b:63:09:3e:34:cb:93:
                    12:b5:30:8a:12:d1:3d:5f:0c:0b:28:2d:d7:5e:f1:
                    7a:cb:ce:4a:df:8b:08:d5:56:9b:7a:83:87:39:c5:
                    48:4b:97:9c:82:7a:44:a4:e2:65:0d:b8:99:a0:9c:
                    ee:83:01:f4:d7:c5:ad:76:f6:58:19:ff:7a:31:82:
                    f3:b5:be:dc:ae:7c:2a:e5:5c:b2:25:b3:21:01:0d:
                    5f:e7:c5:60:22:1f:86:be:2e:8f:50:30:c5:22:3c:
                    23:d7:d8:de:b6:a8:b7:89:82:ab:fa:7d:c5:33:81:
                    b4:e7:14:ad:8c:ff:15:01:a9:13:67:fd:48:ff:08:
                    2d:56:74:d0:b5:23:2b:e9:35:7f:32:c5:df:dc:bf:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B0:07:3B:A9:F2:19:9A:AA:00:26:DB:D1:58:E3:10:E6:CC:23:88
            X509v3 Authority Key Identifier:
                keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ea:69:d7:95:09:ed:51:e6:ed:92:08:2e:9e:40:a8:ed:26:
         e3:0e:0f:e5:ad:ff:62:c8:fb:25:38:ca:05:0e:1f:ee:02:c5:
         76:cc:ba:d8:c4:81:a7:52:d3:9e:eb:90:de:0a:6e:93:0b:65:
         79:d0:e3:49:9b:61:26:d1:31:f4:0a:2b:c6:da:c5:87:26:26:
         fe:7f:2f:06:1b:79:e8:0d:d2:42:23:23:7c:aa:0f:6e:11:af:
         d8:21:a9:19:c6:f1:44:a2:00:56:67:d8:3a:67:cd:33:6c:d1:
         e5:e7:74:19:55:4b:1c:bb:99:2f:8d:5b:c2:0c:04:2b:53:4f:
         50:c2:c4:d3:b1:13:82:05:1b:e5:9a:b7:99:b2:de:b9:15:4f:
         d6:24:2e:c1:63:ae:a5:2e:63:39:55:46:f9:62:5c:e8:cc:73:
         3e:23:af:89:a5:85:06:9b:24:43:97:ad:6e:dd:a6:e9:1f:37:
         aa:06:de:4d:42:14:1d:4c:b3:5f:db:f6:0a:3d:d5:31:80:95:
         be:3e:bd:6e:45:82:a7:35:a7:c1:2c:02:28:31:c6:59:12:0b:
         0b:56:d1:18:08:10:63:84:1f:4f:76:d9:62:52:2e:e4:b2:2e:
         03:fa:9c:86:0b:d5:a5:d7:d9:7f:9b:23:9d:24:ab:fd:73:60:
         36:67:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----