Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
File:                     4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json)
Hash identifier:          yKxQvr9P/Zwy5jn9rn1IMnmIMPejkykIuV1QrAjUjQI=
Subject key identifier:   A7:B3:5A:12:51:84:ED:6D:FC:0D:26:43:B7:63:DB:41:22:BA:69:46
Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6
Certificate issuer:       /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6
Certificate serial:       7DD7C9C66D40367758FBA4BE4A6243BB8142C632
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
Manifest number:          C0
Signing time:             Sun 13 Apr 2025 07:11:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:06:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:44:08 +0000
Files and hashes:         1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: mQaa2+lSEiTyzwHNnrKKadruwtx0ImLMiizKLiHAVrc=)
                          2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d7:c9:c6:6d:40:36:77:58:fb:a4:be:4a:62:43:bb:81:42:c6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6
        Validity
            Not Before: Apr 13 07:06:08 2025 GMT
            Not After : Apr 14 09:44:08 2025 GMT
        Subject: CN=A7B35A125184ED6DFC0D2643B763DB4122BA6946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:30:0a:30:62:4b:6a:42:34:9b:e7:79:bb:35:
                    18:66:93:8e:62:ff:d5:9a:7c:03:f0:09:d6:ff:0a:
                    f5:e7:af:00:39:96:ec:fd:37:e4:2e:4a:e4:49:1d:
                    fb:d0:19:a5:1c:1b:17:34:89:2e:ef:9f:46:69:d7:
                    7c:15:74:3c:bc:ec:c8:bb:c0:87:39:a3:ab:32:9f:
                    66:24:c2:4b:55:e9:02:9b:7d:c1:34:ad:03:b8:15:
                    ae:5c:e6:dc:0a:b6:b4:d1:de:b5:e7:dd:01:ca:e0:
                    cb:0c:45:c7:48:74:38:eb:3d:05:34:3c:22:4c:79:
                    68:ea:cc:bd:86:8d:93:4e:eb:ef:39:45:dc:67:78:
                    ba:77:9e:87:7c:92:52:7a:14:78:28:1a:86:c5:67:
                    38:58:38:a3:c8:b0:6a:22:06:bc:2e:c3:6f:2f:23:
                    c9:91:d6:dc:e4:17:bf:4d:3d:07:4a:61:6f:a9:9c:
                    8e:70:0c:1b:2c:79:b6:00:c4:31:65:4a:a2:9f:c0:
                    0f:26:64:ee:12:de:03:2f:fd:ed:03:86:3c:fa:10:
                    c7:48:85:db:50:c8:d1:77:3a:dd:b4:51:d6:05:fc:
                    e1:fb:fc:fd:a7:ad:0e:8f:07:39:b0:7c:e6:e2:cc:
                    5a:84:d9:9a:9e:f2:a9:5b:8c:5e:ca:2f:bd:eb:61:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B3:5A:12:51:84:ED:6D:FC:0D:26:43:B7:63:DB:41:22:BA:69:46
            X509v3 Authority Key Identifier:
                keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:e9:dc:98:c9:7d:f6:1e:f2:ca:4b:c8:27:47:f9:28:41:
         38:4b:5b:d8:c8:ce:8d:a5:e5:52:8c:6c:65:ae:c9:3a:4b:6c:
         be:01:94:58:ad:87:11:2f:80:2b:a4:3c:f8:aa:bf:19:96:62:
         99:ae:fa:92:3b:bb:71:bb:b2:86:15:05:03:41:88:c2:15:55:
         2f:ff:dd:72:b9:ef:9f:8c:d9:c5:bf:aa:c6:d0:c1:4b:16:f7:
         ab:64:5f:86:75:f8:55:49:02:72:f4:47:cf:6c:19:31:03:05:
         0e:3c:26:f9:d8:45:01:16:95:1d:89:f2:3d:a8:6f:0f:92:3d:
         4e:ef:85:11:26:af:48:d7:47:be:2e:98:39:af:a4:ee:9d:04:
         0f:80:f3:9b:56:46:d8:0c:cf:5c:02:b7:6d:de:2c:86:2b:b5:
         5b:ac:c4:6d:da:47:67:7f:7d:45:27:f0:95:09:22:09:27:00:
         e3:2c:ff:38:f2:a5:8a:e6:dd:c2:a4:7a:ce:01:3e:15:ff:4c:
         00:50:3a:ff:59:43:6a:79:8b:c9:32:d1:5a:8c:68:95:f8:fc:
         af:c6:f2:17:50:49:ac:63:2b:4c:1a:37:73:1f:88:e7:34:75:
         8d:35:2b:54:4d:bd:01:73:3e:56:69:38:cd:8e:17:b5:75:3a:
         33:e0:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----