Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
File:                     2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json)
Hash identifier:          pzchJrdHkG801O5tMh357eeEpCIX54AfK3QA6aPhOjw=
Subject key identifier:   81:1C:35:67:13:C0:55:A3:CB:2C:FE:2D:17:6C:AC:65:48:C8:61:3E
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Certificate issuer:       /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial:       2213245A6450847921C259160F07E9019EC79254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
Manifest number:          63
Signing time:             Sun 13 Apr 2025 10:52:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:47:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:45 +0000
Files and hashes:         1: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: 73wk5w6f7RRQ4JPLFWlp9+Wzztc4RUrLV1auxC5+EKE=)
                          2: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: sEgCiTdKWVCXu/d5z0ga/auyfNaYgNDwWsE3XxZT3rE=)
                          3: 34352e36362e36302e302f32332d3234203d3e20313734.roa (hash: 7t1m1Rme42ZN+/wbBfTFMDvACpXME33cDvgp6giSYyo=)
                          4: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:13:24:5a:64:50:84:79:21:c2:59:16:0f:07:e9:01:9e:c7:92:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
        Validity
            Not Before: Apr 13 10:47:45 2025 GMT
            Not After : Apr 14 14:02:45 2025 GMT
        Subject: CN=811C356713C055A3CB2CFE2D176CAC6548C8613E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:45:28:38:09:59:a9:5b:85:21:c4:1e:5a:
                    51:86:ba:a2:f1:aa:10:a1:61:1f:70:2f:6e:f1:3f:
                    d8:52:57:47:79:c0:68:96:61:55:6e:23:4a:fa:f2:
                    b8:47:e2:17:c5:27:d7:fd:c3:49:6d:e8:f4:f3:81:
                    bf:42:34:52:eb:28:4a:5a:9d:c7:73:e1:8d:aa:6a:
                    41:1c:8b:1f:cb:ce:14:69:c7:56:fc:3f:c4:a3:ae:
                    1f:7c:11:4b:41:e4:a8:89:0c:22:22:66:90:f5:fd:
                    1b:2e:4c:fc:d8:41:14:76:c6:e2:90:b6:be:b8:ad:
                    d7:7d:ff:6b:9d:59:d3:b4:52:ca:64:9f:62:59:21:
                    c1:35:d8:76:8c:54:b4:eb:05:d7:15:6a:85:f6:e5:
                    b0:ad:b1:68:76:d5:01:26:19:b3:b8:d6:60:f4:74:
                    a1:a0:10:ce:1a:d4:49:ee:ac:f0:67:ec:cc:ea:b9:
                    06:9d:47:15:2f:41:2c:21:b1:d2:72:24:4c:55:7c:
                    80:3e:93:07:0a:a7:d6:4e:d6:71:9e:57:d2:00:c3:
                    38:aa:a8:ee:9e:ec:68:8a:20:ec:f9:71:01:d9:49:
                    1d:a5:1b:24:46:6a:37:0b:42:4b:e4:0a:59:ec:87:
                    71:75:35:5f:9c:88:0d:d8:0e:4e:4d:e9:e5:87:f8:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1C:35:67:13:C0:55:A3:CB:2C:FE:2D:17:6C:AC:65:48:C8:61:3E
            X509v3 Authority Key Identifier:
                keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e4:0b:90:d9:b8:a2:81:64:04:85:36:75:89:c4:3a:19:b3:
         81:ff:34:50:b3:da:48:e7:7e:1c:99:15:bf:75:20:8e:97:9b:
         1e:53:2a:8a:2e:f1:a5:9e:d2:3b:58:c2:b0:c6:1e:f1:cc:48:
         fe:6c:51:6e:d5:df:f0:3b:ac:0a:95:18:8d:3d:58:ab:6e:6a:
         0b:6b:b5:ae:b0:a4:4c:52:b4:de:76:fe:32:3d:8a:f7:e1:5d:
         0e:12:d3:42:af:ef:3f:57:73:cd:cf:3b:1e:42:ad:71:00:b2:
         04:02:05:db:5c:35:1f:ba:2e:d6:bb:9d:78:5e:94:a4:dc:44:
         2b:21:93:5c:19:ff:96:c4:c6:dc:59:4d:04:64:57:dc:9c:74:
         99:3b:8c:4e:70:18:43:9e:d4:75:1e:c1:30:7b:f6:3f:54:31:
         4e:24:43:e1:67:71:e3:12:56:97:fd:73:63:8e:ad:ec:6e:ef:
         20:40:fd:db:48:4d:3b:de:c7:72:f9:a4:4e:94:3d:06:ea:ea:
         af:ed:09:fd:56:2b:c7:c1:1e:ca:3c:38:0d:9d:aa:7a:5f:92:
         35:a9:90:a4:9d:00:64:de:96:fb:08:16:77:53:31:65:8b:f7:
         cd:2b:bd:dd:c2:cf:38:d1:b0:7d:71:3f:ff:91:e7:0d:01:1a:
         15:5a:3c:e8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIhMkWmRQhHkhwlkWDwfpAZ7HklQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky
Yzc5ZmFlYTAeFw0yNTA0MTMxMDQ3NDVaFw0yNTA0MTQxNDAyNDVaMDMxMTAvBgNV
BAMTKDgxMUMzNTY3MTNDMDU1QTNDQjJDRkUyRDE3NkNBQzY1NDhDODYxM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn/UUoOAlZqVuFIcQeWlGGuqLx
qhChYR9wL27xP9hSV0d5wGiWYVVuI0r68rhH4hfFJ9f9w0lt6PTzgb9CNFLrKEpa
ncdz4Y2qakEcix/LzhRpx1b8P8Sjrh98EUtB5KiJDCIiZpD1/RsuTPzYQRR2xuKQ
tr64rdd9/2udWdO0Uspkn2JZIcE12HaMVLTrBdcVaoX25bCtsWh21QEmGbO41mD0
dKGgEM4a1EnurPBn7MzquQadRxUvQSwhsdJyJExVfIA+kwcKp9ZO1nGeV9IAwziq
qO6e7GiKIOz5cQHZSR2lGyRGajcLQkvkClnsh3F1NV+ciA3YDk5N6eWH+IrvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUgRw1ZxPAVaPLLP4tF2ysZUjIYT4wHwYDVR0j
BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5
Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4
NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h
MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz
Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruQLkNm4ooFkBIU2dYnE
Ohmzgf80ULPaSOd+HJkVv3UgjpebHlMqii7xpZ7SO1jCsMYe8cxI/mxRbtXf8Dus
CpUYjT1Yq25qC2u1rrCkTFK03nb+Mj2K9+FdDhLTQq/vP1dzzc87HkKtcQCyBAIF
21w1H7ou1rudeF6UpNxEKyGTXBn/lsTG3FlNBGRX3Jx0mTuMTnAYQ57UdR7BMHv2
P1QxTiRD4Wdx4xJWl/1zY46t7G7vIED920hNO97HcvmkTpQ9Burqr+0J/VYrx8Ee
yjw4DZ2qel+SNamQpJ0AZN6W+wgWd1MxZYv3zSu93cLPONGwfXE//5HnDQEaFVo8
6A==
-----END CERTIFICATE-----