Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft
File:                     1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft (raw, json)
Hash identifier:          giwsM93RGiAWFKKGi3cSDJsWDv5byYbIGRSfwrB0jjs=
Subject key identifier:   3E:36:3E:AB:AE:3B:5E:E3:A6:86:F7:19:52:F7:4C:4B:C1:8C:EA:8F
Authority key identifier: 1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6
Certificate issuer:       /CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
Certificate serial:       4958A7B9428499A11CA8357F3161382B9061D2AC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft
Manifest number:          38
Signing time:             Tue 01 Apr 2025 03:52:28 +0000
Manifest this update:     Tue 01 Apr 2025 03:47:28 +0000
Manifest next update:     Wed 02 Apr 2025 03:57:28 +0000
Files and hashes:         1: 1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl (hash: rKwkqYH2DYkViolpj+oHw0o4ST9D/982eT1F8+iQ/XY=)
                          2: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: J6IQBtHqaQrudykWH0k2e1lLzY1YgfTAocpTPX/tyNY=)
                          3: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: IMKNeJEfMuHfhSaj38Sc75eloQxXN2xkH3325JQU+xs=)
                          4: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: Mbx64j7UAG35RxfrZTK8oOnl74ijH3kmO/U7xup2Tw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:58:a7:b9:42:84:99:a1:1c:a8:35:7f:31:61:38:2b:90:61:d2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
        Validity
            Not Before: Apr  1 03:47:28 2025 GMT
            Not After : Apr  2 03:57:28 2025 GMT
        Subject: CN=3E363EABAE3B5EE3A686F71952F74C4BC18CEA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:aa:65:5f:8d:a5:03:81:87:cc:a7:28:a9:b9:
                    46:67:e9:ea:39:c4:e7:b2:64:af:2a:ce:3c:a8:9b:
                    75:c1:21:a4:97:52:c6:89:8a:cc:05:47:33:1a:d8:
                    7c:e3:4e:3b:12:e5:3b:86:91:c3:43:92:e7:ef:60:
                    ee:73:f4:a4:b8:b1:06:e5:47:33:4a:e6:ac:46:cf:
                    ea:96:70:3e:8d:cb:7f:85:7d:1b:cb:f8:2a:ec:06:
                    cc:68:64:f8:da:48:cc:54:9c:21:5e:96:7b:e0:71:
                    e3:df:88:50:bf:23:48:72:11:63:85:f8:cc:52:bc:
                    be:7d:5d:89:14:4a:03:da:6e:98:b3:02:df:32:8b:
                    0e:4c:9a:b7:2e:b4:92:9f:9d:d0:bf:2a:e2:0d:56:
                    da:09:9a:e7:98:94:03:fc:6f:72:3b:c8:ef:0e:32:
                    39:63:15:bb:8c:b6:ff:3c:ec:fd:69:0a:d3:c9:90:
                    26:dc:9d:4f:9f:24:ef:7d:fe:1d:f2:6f:26:c2:08:
                    21:a1:10:38:73:3a:17:bd:ea:67:0f:77:22:57:50:
                    58:16:f5:7f:65:20:52:1b:7d:21:cb:d7:8f:1f:e6:
                    33:9c:a4:53:99:77:b7:6e:27:6c:ef:14:80:1c:44:
                    f8:e8:20:c1:51:d8:fb:d9:cb:bc:65:93:62:e3:2d:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:36:3E:AB:AE:3B:5E:E3:A6:86:F7:19:52:F7:4C:4B:C1:8C:EA:8F
            X509v3 Authority Key Identifier:
                keyid:1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:9f:57:65:51:16:e9:87:62:1c:f4:9c:25:7e:b6:f8:da:
         f7:4f:59:ea:18:ae:46:b7:e2:ad:63:38:b9:46:ef:91:6a:18:
         36:df:d9:ab:ba:95:94:e2:da:b0:c1:5e:5c:ad:eb:02:b9:73:
         b0:be:c8:2d:98:a0:23:e9:9e:58:05:f0:3b:69:ee:ac:e6:38:
         f0:3c:ed:c6:16:42:2f:ca:f1:a0:77:dd:13:fe:68:bf:e3:eb:
         18:cc:b6:a7:52:b4:d4:18:69:44:5f:9c:06:32:49:cc:98:67:
         d4:b3:bd:62:66:55:5d:e9:32:f0:d1:b0:a0:89:25:b9:b0:5a:
         49:69:a8:ef:5a:2a:66:68:9c:8d:34:8a:4f:63:95:54:ad:4c:
         11:91:90:29:a7:d4:dd:a1:90:dc:79:8d:ae:71:ad:8f:e6:11:
         5c:a9:5b:f9:49:14:f1:52:e6:66:1b:c1:5f:fa:ba:3c:b3:e7:
         40:8f:23:fc:31:75:67:55:05:a3:ca:45:5f:8e:b6:98:40:7e:
         8c:4f:03:23:47:54:a1:a1:00:0d:c0:a0:f6:89:7e:d4:3b:74:
         07:4c:90:5c:33:f6:3b:7f:98:38:99:ca:36:02:9e:4c:d9:2b:
         82:0e:dc:40:3f:e8:35:f5:5e:1a:96:db:5c:07:47:60:b4:12:
         c7:f7:2e:68
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUSVinuUKEmaEcqDV/MWE4K5Bh0qwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJENjhCQjMzQ0Y0QjJDMDc0NkE4ODUzN0ExMzU3OEMw
MDc0QjRFNjAeFw0yNTA0MDEwMzQ3MjhaFw0yNTA0MDIwMzU3MjhaMDMxMTAvBgNV
BAMTKDNFMzYzRUFCQUUzQjVFRTNBNjg2RjcxOTUyRjc0QzRCQzE4Q0VBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxqmVfjaUDgYfMpyipuUZn6eo5
xOeyZK8qzjyom3XBIaSXUsaJiswFRzMa2HzjTjsS5TuGkcNDkufvYO5z9KS4sQbl
RzNK5qxGz+qWcD6Ny3+FfRvL+CrsBsxoZPjaSMxUnCFelnvgcePfiFC/I0hyEWOF
+MxSvL59XYkUSgPabpizAt8yiw5MmrcutJKfndC/KuINVtoJmueYlAP8b3I7yO8O
MjljFbuMtv887P1pCtPJkCbcnU+fJO99/h3ybybCCCGhEDhzOhe96mcPdyJXUFgW
9X9lIFIbfSHL148f5jOcpFOZd7duJ2zvFIAcRPjoIMFR2PvZy7xlk2LjLSJfAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUPjY+q647XuOmhvcZUvdMS8GM6o8wHwYDVR0j
BBgwFoAUG9aLszz0ssB0aohTehNXjAB0tOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5
YzUwLzEvMUJENjhCQjMzQ0Y0QjJDMDc0NkE4ODUzN0ExMzU3OEMwMDc0QjRFNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh
NmItOTQzNC1jYzgwZGNhMDkzZTYvMi8xQkQ2OEJCMzNDRjRCMkMwNzQ2QTg4NTM3
QTEzNTc4QzAwNzRCNEU2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2JlYWQyZGNmLWVhZDUtNDk1NC1hZDg0LTY1ODBjZDJhOWM1MC8xLzFCRDY4QkIz
M0NGNEIyQzA3NDZBODg1MzdBMTM1NzhDMDA3NEI0RTYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAprp9X
ZVEW6YdiHPScJX62+Nr3T1nqGK5Gt+KtYzi5Ru+Rahg239mrupWU4tqwwV5cresC
uXOwvsgtmKAj6Z5YBfA7ae6s5jjwPO3GFkIvyvGgd90T/mi/4+sYzLanUrTUGGlE
X5wGMknMmGfUs71iZlVd6TLw0bCgiSW5sFpJaajvWipmaJyNNIpPY5VUrUwRkZAp
p9TdoZDceY2uca2P5hFcqVv5SRTxUuZmG8Ff+ro8s+dAjyP8MXVnVQWjykVfjraY
QH6MTwMjR1ShoQANwKD2iX7UO3QHTJBcM/Y7f5g4mco2Ap5M2SuCDtxAP+g19V4a
lttcB0dgtBLH9y5o
-----END CERTIFICATE-----