Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
File:                     CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json)
Hash identifier:          JcdDUkEEcPXGsB0oDalwloY5HO7H4fO1FudZXuv0dUk=
Subject key identifier:   83:48:BC:74:0A:6C:21:1C:53:3A:05:74:D2:18:DF:33:A6:E2:4B:CA
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       75BD6D207587391057F583CE17F7FA8DCE141104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
Manifest number:          23
Signing time:             Sun 13 Apr 2025 15:52:46 +0000
Manifest this update:     Sun 13 Apr 2025 15:47:46 +0000
Manifest next update:     Mon 14 Apr 2025 17:28:46 +0000
Files and hashes:         1: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=)
                          2: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: iY0b8eBXKMyikrEA78zFRN7ksuorc3jfDaaheptByJ4=)
                          3: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=)
                          4: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=)
                          5: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=)
                          6: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=)
                          7: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=)
                          8: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=)
                          9: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=)
                          10: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=)
                          11: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=)
                          12: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=)
                          13: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=)
                          14: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=)
                          15: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=)
                          16: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bd:6d:20:75:87:39:10:57:f5:83:ce:17:f7:fa:8d:ce:14:11:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Apr 13 15:47:46 2025 GMT
            Not After : Apr 14 17:28:46 2025 GMT
        Subject: CN=8348BC740A6C211C533A0574D218DF33A6E24BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:05:fe:13:52:18:79:96:74:68:da:a3:d9:
                    6b:0a:45:62:bf:46:e1:0b:ef:0e:9e:16:b4:97:5a:
                    6c:0b:44:e7:05:4f:dd:34:f5:03:a6:4f:34:dc:41:
                    fe:84:8d:ec:c4:0e:d0:0e:ca:d0:d4:9f:69:4f:80:
                    c8:56:d8:b5:2e:67:0c:db:bf:cc:fa:c8:44:1d:6f:
                    ef:35:1b:2a:60:db:87:af:b1:38:0e:93:ef:67:70:
                    15:03:4f:0d:e4:c7:62:3e:72:b7:51:7f:e5:48:e0:
                    3f:d2:d2:bf:f4:75:c8:67:b8:b8:c5:68:81:93:77:
                    05:1a:ed:13:15:aa:65:46:53:f8:d4:f6:47:73:2e:
                    db:09:5a:69:04:f2:36:a2:fa:b2:74:47:71:8d:b1:
                    b5:7c:27:b9:c5:d0:15:3e:51:14:ff:88:8a:af:b3:
                    5d:63:09:37:be:f7:ae:1f:ac:01:9e:b8:1c:b2:5d:
                    e1:6c:8a:09:a3:57:14:42:03:5c:ac:c1:d3:8e:2f:
                    de:74:64:9e:34:66:64:2b:0e:f1:e3:60:bb:10:c8:
                    e2:6d:09:97:73:b4:13:b6:3d:22:d6:fc:93:f9:ac:
                    e4:02:10:6d:57:e3:0e:38:0e:d2:68:7f:44:db:73:
                    27:78:0a:68:ff:25:cd:cc:01:94:b6:9c:3f:68:5b:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:BC:74:0A:6C:21:1C:53:3A:05:74:D2:18:DF:33:A6:E2:4B:CA
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:4c:43:17:1b:d3:8b:75:30:5d:7c:02:ec:68:e9:4c:44:
         66:d5:63:b8:47:a8:87:8b:e3:21:c1:c1:48:e1:42:19:66:87:
         64:5e:1f:d4:d7:49:4b:8d:d1:bc:15:de:6b:5a:84:bd:02:ae:
         1f:9c:b4:0d:da:8d:08:e6:76:53:60:e8:2f:bd:5c:3d:e3:f0:
         fe:df:c4:4e:44:a8:cd:52:0c:2b:ba:bd:63:5f:d8:09:03:a9:
         e3:c9:6f:a5:17:85:47:14:c9:41:b3:19:1a:fc:74:9d:04:78:
         2a:84:fb:9d:ca:bd:47:1f:51:40:b0:22:50:f8:64:e7:67:07:
         bd:88:b5:a3:a0:20:bf:7a:69:45:0c:1c:ec:21:00:73:56:11:
         eb:76:0b:39:0d:99:12:eb:8f:c4:fe:73:e3:b5:fb:10:ae:8d:
         49:81:f2:de:4e:99:16:f7:29:86:cc:e2:ea:cc:7b:4d:8c:75:
         4d:7e:8c:4b:69:fc:eb:94:77:44:c0:51:87:53:c2:ac:c4:5d:
         3c:4b:b5:b6:90:6c:49:95:c4:2a:0d:8f:0b:83:e9:c9:97:d1:
         a5:fe:2c:bf:a6:90:a6:14:e0:c8:63:d5:3e:11:e0:70:92:74:
         63:88:e8:c8:e6:25:f7:9b:f5:66:78:ca:98:41:4c:2d:f0:c3:
         4e:b2:80:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----