Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File:                     E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier:          vbZOes+oHUzwSrEb3JG0xUPJnxj8iRPLMM+4CUG42D4=
Subject key identifier:   3A:20:D9:82:B6:DA:1B:DE:CF:AA:3C:4F:9B:EC:5F:13:2A:CA:A3:96
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer:       /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial:       500629E9BD4B1AF05EACFFBC43B39246C15136DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number:          0398
Signing time:             Sun 13 Apr 2025 10:37:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:32:45 +0000
Manifest next update:     Mon 14 Apr 2025 11:39:45 +0000
Files and hashes:         1: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: KCaV/nZjNkKbUm2vebj9CakTH2aI4b+pKnduHbTO1mo=)
                          2: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:06:29:e9:bd:4b:1a:f0:5e:ac:ff:bc:43:b3:92:46:c1:51:36:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
        Validity
            Not Before: Apr 13 10:32:45 2025 GMT
            Not After : Apr 14 11:39:45 2025 GMT
        Subject: CN=3A20D982B6DA1BDECFAA3C4F9BEC5F132ACAA396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:4a:12:37:67:14:ff:7f:86:ca:c7:79:a3:
                    ed:cb:d8:40:2b:01:8f:4b:8c:0b:f3:ad:5b:6c:ff:
                    9d:50:0a:8d:cb:b1:25:b3:c9:f3:16:6f:c6:bb:ed:
                    a0:92:e9:1f:7b:4c:f8:9d:67:20:00:8c:35:2d:ca:
                    d4:b9:09:ca:36:ae:77:ad:9b:af:22:72:98:79:2c:
                    81:16:37:f8:ef:35:51:41:70:b4:9a:39:66:02:7c:
                    78:44:0f:d1:c6:ca:63:ca:4e:ab:dc:e1:10:44:3f:
                    ca:06:b1:19:0b:8c:5c:89:47:22:63:fb:bc:32:da:
                    55:ed:4f:17:dc:00:38:b6:3b:53:2d:17:25:a3:49:
                    6e:1c:17:6e:cf:48:1f:a2:e4:f0:d5:77:5c:58:7a:
                    17:95:db:5d:60:ad:45:6e:5f:0f:ba:5d:46:67:42:
                    77:15:38:c2:d3:6c:01:93:9f:39:58:e7:26:33:a9:
                    27:63:d1:ab:d2:ad:f7:a3:60:29:dd:bb:5c:0e:c6:
                    6e:72:87:25:3e:6a:fa:a0:73:40:5e:e0:2c:af:52:
                    7e:42:68:12:80:0a:c9:bd:76:8d:a4:9a:75:aa:f1:
                    0d:6b:73:a6:9b:b5:7e:fb:b3:3c:11:b0:c9:13:9b:
                    1a:24:70:90:05:df:35:d3:32:d1:ad:f4:24:c1:66:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:20:D9:82:B6:DA:1B:DE:CF:AA:3C:4F:9B:EC:5F:13:2A:CA:A3:96
            X509v3 Authority Key Identifier:
                keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:cf:9d:b1:9c:7f:a0:c4:13:23:6c:47:6e:03:d3:e5:f1:ca:
         b2:88:1c:13:af:91:a3:22:be:4a:ba:ea:b0:63:e4:66:b1:0c:
         8f:b1:f2:3c:ed:a4:67:6a:fa:5e:3f:c8:57:5c:93:14:2f:7f:
         f6:53:e9:47:36:e8:15:a3:c3:8b:83:7b:7f:90:31:f0:c8:f8:
         0e:26:59:77:58:99:69:b4:0f:c7:04:4d:09:00:26:58:b8:81:
         0c:88:58:f7:b4:6a:84:ea:44:10:a8:71:03:ef:fb:b2:25:be:
         0e:1a:b4:7b:2f:40:98:d8:e7:38:4a:2a:22:fc:c4:1e:2b:81:
         2e:6f:ef:f0:58:3d:5a:be:2a:9b:58:4f:e9:5c:d2:6e:6b:03:
         7d:af:6e:3d:aa:d8:cf:c6:60:ff:d1:4b:09:a2:d1:c0:8b:e7:
         ce:14:dd:14:45:bb:0e:21:43:f2:ba:a7:28:e2:c7:bd:98:0d:
         90:39:b7:36:2e:aa:ac:f6:f8:ba:45:65:a6:0f:4c:97:63:c0:
         3e:42:b7:17:0a:31:fa:87:7e:d5:ec:0c:66:0d:68:89:03:07:
         dd:c1:f6:67:e7:ac:1d:bb:d4:2c:89:ac:93:a9:43:50:da:79:
         27:3c:51:3c:da:0a:8f:ab:8a:5a:5a:8c:68:4e:2e:ae:ed:cf:
         12:16:86:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----