Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
File:                     5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json)
Hash identifier:          Rd8RAlX28bcIIHjWYIQhKf/qOJ930hM+1Db/lErMws0=
Subject key identifier:   7D:03:0A:AE:BC:51:63:72:D9:7A:6A:B3:11:A3:E1:1D:FF:DE:83:C3
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Certificate issuer:       /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial:       68205FD9494338754870FE08DEFE4D2A9CFD476A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
Manifest number:          0413
Signing time:             Sun 13 Apr 2025 06:57:43 +0000
Manifest this update:     Sun 13 Apr 2025 06:52:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:28:43 +0000
Files and hashes:         1: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: Nt6v0on8wvNIRTqw0ZzJ5VjTWjEZFT63u0ZbVbhKyNc=)
                          2: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: 9Ue75jjucrhzE2bVcj0lbD/JyVO9shYRdQcBlzCK1+k=)
                          3: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: kGVNeEKX35ugOpsFmA5GwCl6f0GnZpLJS8pEn3cyWJI=)
                          4: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: LaBCcb8mjeERCC5tHKO7thlovLIwutTtPGiGYEZVPF8=)
                          5: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: Y0ZApSmGCRch+djTYBN+U0p8LaOUa+NCEgyRR8hvTcU=)
                          6: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: PgFKkZH0aQaFuwRYs1mJhheMQU+0AR2Y9C0+BkBTwpo=)
                          7: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: 7ySWNlqh8pfpYqSc3fbfv+VTSwiuDNFNlc7aZa5se9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:20:5f:d9:49:43:38:75:48:70:fe:08:de:fe:4d:2a:9c:fd:47:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
        Validity
            Not Before: Apr 13 06:52:43 2025 GMT
            Not After : Apr 14 10:28:43 2025 GMT
        Subject: CN=7D030AAEBC516372D97A6AB311A3E11DFFDE83C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:f6:05:71:b4:b8:18:1f:42:ce:9e:ba:45:
                    e7:2e:9a:84:68:42:70:d7:fb:c1:37:85:50:5a:68:
                    03:ba:11:44:b4:96:3b:b7:6d:91:d2:a6:31:40:5e:
                    f0:70:88:6c:3c:20:82:27:31:fa:03:9e:05:b7:fd:
                    b4:27:5e:58:46:f9:2f:b2:ae:bd:c3:8b:ca:85:bb:
                    d8:ca:77:ba:50:ac:dc:69:27:72:bd:d5:9e:ea:58:
                    98:1d:ff:13:32:cb:35:7b:f9:dc:6a:a6:4b:a4:bc:
                    ac:12:df:8c:60:84:cf:a3:58:49:34:b5:41:d3:99:
                    c0:69:2e:1a:a6:0a:de:11:bf:3e:03:c0:2d:f5:22:
                    d2:0b:6c:1e:be:be:15:b6:c7:f6:fb:f1:7c:01:0d:
                    c5:3c:11:55:f1:47:d3:b4:cd:42:42:72:8b:42:52:
                    3f:69:b6:f3:bd:b9:a9:d1:11:28:2b:64:20:73:31:
                    8e:7f:fc:27:df:4e:a5:4b:72:fe:aa:c0:15:21:9d:
                    e1:21:f2:c8:73:7c:75:78:26:b2:c3:54:96:98:f2:
                    a7:ea:96:d3:61:85:29:65:fe:69:29:e3:e9:3a:bd:
                    c1:65:d2:0c:21:a7:73:03:28:16:4d:46:f7:5a:79:
                    15:0e:0b:0d:a0:2f:bf:18:2b:31:37:4a:d2:ba:4f:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:0A:AE:BC:51:63:72:D9:7A:6A:B3:11:A3:E1:1D:FF:DE:83:C3
            X509v3 Authority Key Identifier:
                keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:7f:36:94:b0:c1:a1:96:9e:9d:32:7d:da:2c:a1:43:d6:
         ed:4b:b9:8a:51:a4:b9:27:e0:77:85:22:e5:23:3e:84:e9:0f:
         e8:8d:d3:f8:4a:bb:e1:97:b4:14:2e:53:e3:e3:e6:c9:cb:90:
         58:12:5e:70:38:9c:a5:83:d3:aa:c1:58:4c:38:f0:fc:94:ac:
         57:e6:65:db:2a:71:33:55:2e:9d:44:dd:b2:e2:8e:03:59:08:
         86:ea:af:cc:8f:d4:19:98:ec:a7:58:e8:2a:23:7c:43:b5:a5:
         5f:3e:8f:4a:40:1b:18:be:cd:8f:70:e8:a0:bd:56:ed:c2:2a:
         17:f4:56:b8:19:c4:57:c2:4f:f8:f4:2c:1d:99:e0:27:c1:7e:
         6f:b6:32:63:89:7d:81:8b:cd:b5:aa:2b:35:b9:7e:49:0f:36:
         b2:5f:02:a9:e0:02:f3:e1:81:39:50:64:03:32:86:64:ee:2e:
         86:55:07:01:78:27:97:3b:80:ab:b9:1e:db:bb:14:6d:0f:4b:
         a4:8c:6f:3a:ee:58:07:80:9b:71:bb:1b:0f:18:cf:ca:42:54:
         94:c3:26:69:0c:08:b3:6e:a2:de:f7:db:0a:4a:4c:39:db:5a:
         a6:6b:57:a6:95:0d:2e:19:df:50:bc:13:d6:2f:d6:3d:a5:11:
         d0:97:1e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----