Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
File:                     5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json)
Hash identifier:          RRQcOdvuMAH9CzUuRmYJ+HDs+ccojKFRhHFmRAa04MU=
Subject key identifier:   38:51:E3:0C:68:95:58:A6:2F:88:A2:26:38:15:E0:E2:18:24:2D:0F
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Certificate issuer:       /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial:       45F247C4A2DDCD8C1252D9A87747A84A7C091E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
Manifest number:          D2
Signing time:             Sun 13 Apr 2025 05:02:42 +0000
Manifest this update:     Sun 13 Apr 2025 04:57:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:14:42 +0000
Files and hashes:         1: 3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa (hash: s5WbNe5Whw4ZMD9Ltnk2u5lg9JZnAEnQMp+26m9SqMs=)
                          2: 3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa (hash: wXEZYM8r4N3Bh60WvsuoRKA5OSB618zkHXVaZhvbDno=)
                          3: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=)
                          4: 3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa (hash: GmuqQ5cRPqO0r6kNpS31Skpj+V6x9N2OgVf2PPKwFIs=)
                          5: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=)
                          6: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=)
                          7: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: 1VwqXS+PRbfLU+d3V5fEpGXC4q1wP+BRSeMioTYzTB8=)
                          8: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f2:47:c4:a2:dd:cd:8c:12:52:d9:a8:77:47:a8:4a:7c:09:1e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
        Validity
            Not Before: Apr 13 04:57:42 2025 GMT
            Not After : Apr 14 08:14:42 2025 GMT
        Subject: CN=3851E30C689558A62F88A2263815E0E218242D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:fb:21:04:b1:01:9e:ee:3d:98:92:a6:3b:
                    12:83:79:70:76:60:36:31:b7:66:70:9a:fc:91:8d:
                    66:a3:80:da:63:23:1e:96:4d:83:29:07:a8:d9:a7:
                    e4:52:68:b6:fd:9f:a5:11:3c:d7:c8:89:34:49:3d:
                    99:a5:6a:cb:2a:7e:df:41:f1:98:48:f9:2f:f3:39:
                    ac:78:f9:0a:c7:de:be:bb:66:fb:7b:ac:4c:1c:90:
                    74:e0:85:53:ca:1a:37:f8:d3:98:84:71:b7:6a:d6:
                    52:b2:cb:0a:b6:bd:fd:6f:5e:86:ac:ee:62:9b:ee:
                    b4:cf:53:53:6e:e9:50:57:8d:73:0c:4b:d4:f4:70:
                    e2:91:35:4c:5b:73:a4:9d:18:3b:da:df:ad:53:93:
                    a1:7b:5f:9c:03:a3:1c:e1:dc:1e:5e:e8:91:05:3b:
                    0d:5b:c0:94:cd:97:47:65:98:b4:63:07:5e:5c:9b:
                    53:c7:45:1d:5a:19:af:c9:2d:19:2a:16:a2:ff:86:
                    59:d1:cb:cc:7c:a8:da:b6:e1:6e:db:33:20:21:09:
                    14:33:15:73:d1:8a:e7:75:fe:f8:62:fa:9b:47:c5:
                    86:09:69:ac:c9:2a:49:12:b3:08:86:a8:d3:39:e0:
                    cb:31:23:f9:38:27:1a:16:30:92:4b:df:d2:72:0c:
                    ee:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:51:E3:0C:68:95:58:A6:2F:88:A2:26:38:15:E0:E2:18:24:2D:0F
            X509v3 Authority Key Identifier:
                keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:b0:3e:f6:e8:58:0c:56:78:1e:02:5a:8f:dd:36:ba:2c:
         96:e6:be:d9:ff:b8:18:aa:88:1c:b2:83:ef:2d:c9:96:0f:92:
         8f:04:cb:26:4f:28:c2:1e:5a:5e:df:55:31:b8:98:0e:99:d1:
         8f:ba:fe:7d:29:c2:b1:24:f2:e4:6d:ae:44:35:29:8e:ee:50:
         97:d5:ee:51:15:52:63:a6:ad:81:a4:2d:0f:d3:dc:29:e1:2d:
         53:07:70:70:4a:36:a7:b3:9d:12:89:f2:9a:b3:17:34:4a:15:
         9f:41:31:cf:c3:95:3b:d8:d3:8c:28:a9:6d:60:80:10:75:db:
         a9:95:1e:89:93:1a:b2:b1:74:55:c1:c4:b6:28:45:ba:4b:0e:
         89:20:8b:7d:01:07:1b:a7:ed:19:e7:13:04:4d:42:48:4a:e6:
         f3:8e:d2:2f:40:bb:d6:c0:47:55:86:6e:79:9e:e7:0b:08:81:
         aa:f1:95:1b:fd:e7:dd:77:94:bf:ed:f5:ac:6a:40:eb:4c:c3:
         b5:3d:e6:41:7a:ec:8d:2d:84:15:a5:c4:39:ca:c1:1b:52:d3:
         48:bc:5d:f8:bb:72:ff:dc:a5:34:fb:ae:f7:72:fe:76:dc:9c:
         89:2d:fb:c8:63:bc:17:d2:1b:8a:62:af:53:13:f1:31:a3:67:
         11:c8:18:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----