Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft
File:                     DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json)
Hash identifier:          VFCV5YNPlY3ypQnyzo2xlhMeAc1Yj7/EgzG/3DWYNrQ=
Subject key identifier:   08:24:40:EF:A5:FC:93:BB:DB:07:02:BC:9B:CA:32:DC:A6:6B:EA:60
Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18
Certificate issuer:       /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118
Certificate serial:       54596EE38B1058E628BE078129F00B3764259FC2
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft
Manifest number:          04
Signing time:             Sun 13 Apr 2025 08:35:04 +0000
Manifest this update:     Sun 13 Apr 2025 08:30:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:52:04 +0000
Files and hashes:         1: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=)
                          2: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: cnWznygAWNt49lJ3SaI/W5XVvEMSv/GHgnBtNeGiR0g=)
                          3: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=)
                          4: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:59:6e:e3:8b:10:58:e6:28:be:07:81:29:f0:0b:37:64:25:9f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118
        Validity
            Not Before: Apr 13 08:30:04 2025 GMT
            Not After : Apr 14 09:52:04 2025 GMT
        Subject: CN=082440EFA5FC93BBDB0702BC9BCA32DCA66BEA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:da:5c:0b:a2:0c:f2:c0:d5:99:09:ef:6d:
                    7a:3b:06:e1:d8:24:93:15:f0:95:63:ad:c4:35:7b:
                    f0:77:96:f8:e7:e9:34:ce:31:9f:c9:c8:d2:7e:a1:
                    4b:1b:3a:3b:7e:3e:87:b2:a6:e2:99:3a:c2:5c:52:
                    ed:8b:60:29:44:52:7d:bd:0f:6c:4a:ff:f3:33:db:
                    42:f4:8d:bb:38:cb:0e:86:93:d1:d7:24:df:a8:1c:
                    6f:ba:93:11:b5:2e:69:7d:10:8c:46:45:3a:fb:fa:
                    e4:15:3a:c1:f6:9c:64:0c:f3:67:98:98:4d:51:e8:
                    4f:80:12:54:12:ca:2f:0a:6d:2e:d4:ca:3f:36:62:
                    e7:de:71:48:c9:ad:6c:12:f4:58:98:79:b8:5d:fe:
                    33:8e:21:79:c6:4b:be:1a:fe:6f:e5:e2:e6:2d:ae:
                    5e:79:49:56:bc:cd:d6:79:f2:6f:a0:bd:1c:f8:ed:
                    3a:70:31:c6:41:ed:67:2e:2c:1f:c1:ee:6a:96:c9:
                    52:2c:9d:46:54:6a:3c:77:40:75:7e:94:9c:bb:7f:
                    a6:60:56:52:82:71:01:be:e3:97:21:8d:3e:5f:03:
                    49:91:b6:5f:ac:05:03:6f:14:e1:54:a1:91:84:d6:
                    47:df:67:7c:b0:20:19:4e:3c:24:0a:63:ec:f9:43:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:40:EF:A5:FC:93:BB:DB:07:02:BC:9B:CA:32:DC:A6:6B:EA:60
            X509v3 Authority Key Identifier:
                keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:58:a4:89:18:93:3c:67:7b:49:c1:97:e9:83:3b:5b:76:e6:
         3b:8f:aa:ff:b6:90:70:f1:c9:4f:3f:e5:0b:d6:d0:3e:6b:d2:
         4a:34:87:c3:1b:09:58:f8:e8:7d:7f:bb:ed:84:bf:ae:7b:61:
         0f:cf:b8:de:82:ec:e7:28:1b:8c:b2:ed:22:64:fb:5c:ba:80:
         28:80:4c:08:76:a2:89:a2:af:8b:f5:0d:9c:a6:df:fa:f2:1b:
         82:0d:82:84:74:0c:f3:71:1d:9f:5f:32:19:47:23:18:44:dd:
         bb:a5:39:53:45:aa:c9:ff:11:da:ac:17:05:80:ab:4b:eb:54:
         8a:f3:92:00:94:a4:94:2e:ae:24:17:f7:b3:d2:37:89:b4:2f:
         12:dc:42:43:b5:ac:6b:6c:36:70:3f:cd:a6:05:7b:e2:e5:5c:
         10:83:d5:b7:32:2d:a9:87:b6:c8:e5:b7:3f:f7:36:05:ab:fe:
         0d:06:7c:d9:fb:ef:67:93:22:7c:13:67:df:bb:bc:0a:fe:ce:
         6e:74:a4:b9:09:5e:e6:b2:3c:cd:3b:91:57:bc:13:05:88:fc:
         91:c2:60:4b:d7:fa:34:b1:0e:96:cf:cd:ad:39:1b:63:3b:17:
         c8:bf:04:67:f0:e0:49:1e:92:91:7a:57:e7:d3:8c:8d:f1:e1:
         b0:bb:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----