Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
File:                     58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft (raw, json)
Hash identifier:          jdcCmBZmSSKJaRQx1mJK6+Hbmlew4fHbzKX2nPaLj8M=
Subject key identifier:   C3:BA:F0:A5:B9:BC:4F:12:78:D4:EC:A0:15:DF:09:8E:E6:01:65:29
Authority key identifier: 58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
Certificate issuer:       /CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
Certificate serial:       46E29D6AF36651309FD0A02392AAF16561FFBEFB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
Manifest number:          0221
Signing time:             Sun 13 Apr 2025 11:56:44 +0000
Manifest this update:     Sun 13 Apr 2025 11:51:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:21:44 +0000
Files and hashes:         1: 326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa (hash: 69RcUidZnQ+LqgABsH+Kh3UWsC9vqAhVCCjeesgrVBw=)
                          2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl (hash: fGN1hx7a4djxYvAYPhR+DM2UxeUVuocKXEJ8znbloqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e2:9d:6a:f3:66:51:30:9f:d0:a0:23:92:aa:f1:65:61:ff:be:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
        Validity
            Not Before: Apr 13 11:51:44 2025 GMT
            Not After : Apr 14 14:21:44 2025 GMT
        Subject: CN=C3BAF0A5B9BC4F1278D4ECA015DF098EE6016529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:fd:53:55:70:a4:cc:21:6b:cf:26:96:0e:
                    e9:a0:9a:75:b5:34:72:c8:c9:97:f7:e4:f6:89:0e:
                    33:09:18:4e:38:cd:e5:de:c8:c0:18:29:14:bc:76:
                    b5:c6:45:f8:d6:31:95:eb:37:c0:3e:d1:c7:6f:1a:
                    fa:9b:5a:24:92:00:05:e2:31:8f:b4:81:de:b6:70:
                    3e:c0:55:fc:f1:d3:ac:36:74:f4:0a:63:a5:50:3f:
                    fa:9b:ad:8d:05:28:de:76:08:09:c3:5f:16:ca:44:
                    92:81:4b:75:bb:10:1d:61:3d:bb:f9:6c:b2:f3:eb:
                    f6:e1:c5:88:4f:53:1c:db:c8:6f:2b:89:68:ab:af:
                    8d:cf:5f:8b:11:a7:63:3f:35:0e:44:44:a3:95:27:
                    c4:13:a7:5d:11:15:58:10:a8:26:a5:f2:da:00:8b:
                    23:b9:cf:00:91:25:0a:38:96:3f:7a:e7:39:13:ea:
                    92:1f:8a:b5:cd:81:32:89:d9:46:e8:7f:fd:44:83:
                    25:7a:23:10:69:8a:e4:e2:b6:6c:3e:24:22:21:85:
                    60:df:49:a9:2e:8e:53:41:0d:22:e0:ac:3b:d1:a1:
                    0e:12:61:64:72:c9:56:81:e7:1e:c4:46:6a:24:6e:
                    88:04:02:19:3b:09:52:92:56:83:40:7b:f4:03:57:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BA:F0:A5:B9:BC:4F:12:78:D4:EC:A0:15:DF:09:8E:E6:01:65:29
            X509v3 Authority Key Identifier:
                keyid:58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:9a:fb:4a:33:48:56:78:b2:b6:89:33:a0:23:ea:12:c7:
         a9:20:71:3a:b2:5e:c0:0a:2b:93:0d:46:c8:13:fa:a9:d7:ee:
         7c:73:13:1c:8f:2f:4a:a5:a2:a4:32:6a:40:63:fe:d3:13:a4:
         b5:cb:66:7d:b1:3d:4f:66:9a:0b:3c:42:21:e9:ba:51:6b:b1:
         02:ba:da:af:ee:99:c1:83:7a:d8:b8:6e:11:c9:86:5d:fc:6f:
         62:fa:fe:d1:a3:9f:71:af:04:48:03:cf:7a:9e:33:8a:ef:5d:
         f7:90:ba:fc:a2:20:31:f1:dc:dd:7a:db:a7:2d:b1:50:bb:01:
         1e:1e:4f:ba:d9:1f:a2:bc:ab:9a:bf:68:76:fe:6a:6d:f0:60:
         0a:8f:49:7e:92:3b:fa:ea:39:70:42:ee:c6:fe:5f:cd:ab:0e:
         5e:bb:a4:50:dc:4e:52:02:7f:d0:47:6f:dc:d0:81:ea:7f:3a:
         aa:33:5e:ec:af:0a:f2:f7:67:bd:e8:23:ed:ab:33:57:5b:da:
         48:73:5a:b0:bd:de:19:dc:ed:d4:be:6e:99:0f:5a:6d:94:e9:
         1b:cd:09:9f:c2:07:75:ec:7c:95:f3:2a:fd:bb:f2:6a:da:5f:
         57:38:c0:02:42:ef:26:84:aa:d2:3b:3d:fd:bf:2b:97:82:b1:
         bb:c7:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----