Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File:                     E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier:          7Gwo3dgb9UXotlw7Y6unrfnOYEsUSTLz9rxhw9vPJ+Q=
Subject key identifier:   CE:97:F1:20:CD:C8:6C:2F:F6:61:2B:9E:AA:2C:56:0E:20:68:B7:EF
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer:       /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial:       08F9AB767E751B0F9D0F9A8E7129469B3417B369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number:          01AE
Signing time:             Sun 13 Apr 2025 04:53:03 +0000
Manifest this update:     Sun 13 Apr 2025 04:48:03 +0000
Manifest next update:     Mon 14 Apr 2025 06:32:03 +0000
Files and hashes:         1: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: 8S1mRepLz4anZXttxO74tmjo+5TJ/IvIFNDFY67JQHA=)
                          2: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: p4ddyGlS1vW33/S8IlRS4LA4G7FF56Iv7m7nnnNq2KA=)
                          3: AS215131.asa (hash: fdxXAZ8vlKpf5EccUmAW+hZmsZidklCajd1vBNkiavk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f9:ab:76:7e:75:1b:0f:9d:0f:9a:8e:71:29:46:9b:34:17:b3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
        Validity
            Not Before: Apr 13 04:48:03 2025 GMT
            Not After : Apr 14 06:32:03 2025 GMT
        Subject: CN=CE97F120CDC86C2FF6612B9EAA2C560E2068B7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:bc:3a:5c:b5:d2:82:b6:ee:69:53:8e:43:
                    ef:5c:c2:e3:95:ce:4b:80:bb:92:62:56:86:b3:05:
                    1c:bd:30:eb:68:25:b2:4a:44:1f:ec:12:89:b9:b3:
                    a1:f6:18:61:36:d0:ae:54:59:c0:43:84:a5:b5:78:
                    69:8c:ac:19:1f:95:23:61:0c:c1:45:7c:6e:76:b7:
                    c3:d2:a0:cf:ac:82:f4:7e:0a:e6:5d:86:4b:e2:8b:
                    50:92:d5:78:da:2c:10:2f:f6:1f:a0:34:06:b8:78:
                    f5:1f:b5:1d:58:b5:6d:e7:bb:3e:33:7b:8d:21:9a:
                    7a:60:99:4e:74:9b:b9:43:aa:a9:0e:80:39:64:93:
                    7b:4f:b3:76:02:81:01:af:92:f9:de:09:6f:d9:5a:
                    8d:1a:15:b3:9b:7f:57:83:4e:83:fb:c8:d5:00:7d:
                    fb:22:a8:21:e4:26:12:6f:6b:c5:06:7d:fa:02:ef:
                    4d:0c:ee:32:be:1c:c8:55:1e:d1:b9:8d:d5:59:6f:
                    17:cc:0e:70:7e:29:6e:f1:11:80:b0:f7:d7:18:34:
                    b9:f9:63:ed:90:33:65:a7:59:08:59:80:bb:90:5f:
                    3b:7b:5e:ff:4f:8a:d5:cc:04:84:6c:b0:90:29:02:
                    1b:e5:ea:56:9b:85:0f:0a:ee:8d:9f:19:20:8a:d9:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:97:F1:20:CD:C8:6C:2F:F6:61:2B:9E:AA:2C:56:0E:20:68:B7:EF
            X509v3 Authority Key Identifier:
                keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:9e:ef:6b:87:f1:d1:a5:61:98:40:3e:94:f5:27:f8:52:
         fd:e2:8c:db:66:df:ff:c7:f2:6f:46:53:9d:50:e1:a7:f1:3e:
         03:ab:1b:82:0b:65:86:41:40:be:4c:54:66:43:c3:c8:78:05:
         aa:27:95:73:6a:36:0b:0f:54:fc:33:22:47:fa:12:22:09:81:
         40:68:a0:22:07:06:68:85:b5:6e:09:94:99:0e:d5:a8:cd:df:
         08:60:f7:5e:d7:72:1e:02:29:fc:91:6a:a8:4d:fa:83:58:e4:
         a6:0e:99:88:2a:45:e7:ae:17:34:01:0a:e6:fc:a5:d0:6f:6d:
         3c:d4:f3:8a:22:fe:af:0f:e3:6c:4a:f2:36:42:45:8a:09:2b:
         69:18:3f:54:12:97:ce:63:c7:11:81:7a:60:85:67:b7:83:3a:
         8e:05:17:65:18:a0:bc:3a:fc:b0:e4:69:4b:c2:15:28:49:3e:
         99:c8:ca:89:a6:9b:61:0a:a8:e2:37:3f:2b:5c:8a:1c:ff:c1:
         a3:9f:89:8b:c6:cc:a4:1b:0e:b4:b1:b8:f0:6f:80:46:78:4c:
         ac:0d:27:78:1d:b9:4c:1a:ad:6b:70:78:0d:fc:57:e9:bf:2e:
         b4:31:4c:27:d0:fb:45:a1:aa:fa:fd:30:dc:be:57:bf:90:e1:
         d4:dc:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----