Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
File:                     637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json)
Hash identifier:          L8e9om1pK/uSD2p25ckZJ4DFhDoLxXWNVOieJwwuzVA=
Subject key identifier:   AE:10:DC:61:02:A7:7D:D0:69:6E:10:7C:29:5A:E4:37:73:F9:C7:91
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Certificate issuer:       /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial:       2020E69504D4BB56F84DDA24EEABEC96E00E9964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
Manifest number:          02CB
Signing time:             Sun 13 Apr 2025 10:37:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:32:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:15:45 +0000
Files and hashes:         1: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: jGCu+6PUFJehV7SD97XGwxO4qcYEtjZiP9+tOlftrfA=)
                          2: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: sQzRaIn68UKgeOhWa3EKecj44XiFcDfTSSWOvDZfL50=)
                          3: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: t2eZOXbWa1wSXQ/lRcYYBLRQZdrsUg6kK3TUWhBYOoo=)
                          4: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: PhaaQ0B2G4/BYaJYdmj2wNhh4+UZzlq/QFz8ZTfUDhY=)
                          5: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: jIwFeEh0mwUDTR8u3ftu7Bh0R23NRzXkA+84df6mEto=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:20:e6:95:04:d4:bb:56:f8:4d:da:24:ee:ab:ec:96:e0:0e:99:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
        Validity
            Not Before: Apr 13 10:32:45 2025 GMT
            Not After : Apr 14 14:15:45 2025 GMT
        Subject: CN=AE10DC6102A77DD0696E107C295AE43773F9C791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6f:8a:c7:2d:f1:6c:77:d4:af:06:f8:8b:3b:
                    f5:9b:2b:ef:03:0d:d1:7b:5b:01:30:30:5a:4a:23:
                    c3:e7:45:f9:8a:00:56:c2:a8:8b:60:7c:68:fa:3f:
                    75:c5:ea:b0:87:4c:0e:a0:e5:49:69:20:c8:cc:a6:
                    28:bf:8f:2b:fa:19:94:22:fe:87:88:85:bb:e0:7b:
                    78:54:72:0b:7e:36:01:48:ab:40:09:4d:be:ca:a1:
                    5f:fd:c8:63:86:72:2e:5b:89:79:b4:c0:63:c3:f4:
                    7b:6f:f5:a6:53:98:72:4a:25:54:ab:58:85:3e:64:
                    5b:66:8b:d1:b1:02:fe:c9:16:04:ed:56:1e:4f:62:
                    de:ed:a1:9e:c9:55:3f:2a:cd:d6:8b:33:59:52:92:
                    44:cc:74:fe:89:f0:e7:5f:03:ab:61:79:7a:68:88:
                    77:c9:ce:b4:8b:22:db:e8:25:2c:4e:f0:a1:11:ef:
                    c2:97:94:ea:65:ce:13:95:4e:c0:ad:94:27:f0:1a:
                    f4:c8:21:f8:d0:fc:30:53:55:83:d3:cd:c9:49:75:
                    8e:07:f3:18:6d:88:3e:4d:77:3d:9f:c8:70:60:11:
                    74:22:7c:6f:89:0c:25:65:9a:70:9b:7d:06:b2:cc:
                    4c:3b:3d:96:a6:ba:52:ae:3e:9f:1f:a6:18:35:18:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:10:DC:61:02:A7:7D:D0:69:6E:10:7C:29:5A:E4:37:73:F9:C7:91
            X509v3 Authority Key Identifier:
                keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:39:b6:22:e2:64:32:e8:ef:e3:4b:66:e3:89:1b:dd:5f:97:
         b6:d7:15:c5:d9:30:45:38:66:8b:f1:f4:ef:41:92:ae:74:c1:
         49:f5:a1:d8:a1:e1:9c:0d:90:86:df:9c:96:4b:4e:3e:f3:f8:
         be:b4:e7:5b:3b:ab:a1:fa:4a:19:70:b8:b3:3b:63:1e:eb:ad:
         9b:d4:00:95:33:79:b4:a3:93:a7:18:40:69:81:a6:62:be:53:
         a8:80:3d:03:35:ed:1f:91:db:58:0a:b6:40:e9:98:d7:5e:f7:
         83:57:5b:ef:8e:d0:89:b1:fb:30:f0:ae:38:ba:c2:e8:97:5d:
         fc:2d:a5:b0:f6:a9:c9:c0:46:ec:ad:b5:fa:3c:c8:14:b7:7d:
         65:2b:66:94:68:05:86:51:c6:35:b8:ff:3c:5c:ed:90:c3:50:
         2f:4d:e1:91:f4:aa:4b:1a:5e:92:b5:82:70:e6:88:fe:aa:f6:
         36:75:e7:8a:4b:76:0f:bd:b5:b0:93:f8:3d:e9:11:3d:7a:cf:
         b0:83:d3:66:d2:82:04:f4:dc:49:7b:da:70:db:a4:24:8e:4b:
         da:70:a5:6e:79:4b:a6:80:4e:ac:00:c2:07:92:85:39:01:43:
         b7:62:22:9b:34:09:f7:42:d7:16:03:bd:a8:5b:8d:04:2d:4c:
         d9:10:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----