Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File:                     5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier:          1ME5V806JcQ0D0MB7xpEA2doEieynB++JKAK3xwIXDI=
Subject key identifier:   84:E1:E8:B5:3B:AF:2A:C2:3B:D4:BC:FE:30:45:E0:6A:D9:1D:C9:52
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       25A878A7D05F61341A69FAC335BA81A362BD5D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number:          60
Signing time:             Sun 13 Apr 2025 02:58:43 +0000
Manifest this update:     Sun 13 Apr 2025 02:53:43 +0000
Manifest next update:     Mon 14 Apr 2025 06:48:43 +0000
Files and hashes:         1: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: kUiBrX3+9cuSC9lMhoz9V2p165UrI0C31waBU1/3ZFc=)
                          2: 3130342e3136372e31392e302f32342d3234203d3e20323135323438.roa (hash: GMEP9iKl4Ev2lmXnOs/u75idB5oA52kN/Oszr3FXVVw=)
                          3: 3130332e3134392e3136382e302f32332d3233203d3e20323135323438.roa (hash: jx6u+d/Skw1ntHsrqxbR9j0i0Ebwk6nG48Ef8PCLKJM=)
                          4: 3130342e3136372e31392e302f32342d3234203d3e20333936303634.roa (hash: 6fhYYyEnaWNq97PI/L9874+nfD60vOGcyWKDeMmVfsI=)
                          5: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=)
                          6: AS215248.asa (hash: Nv2XVNSUKiPy4+No+h39/uphBOnDST4g6yIotocoOL8=)
                          7: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: mrldgJz64qmVDgnmMdU8gbKK50ezSwaqU1Mfqvl7MpQ=)
                          8: 3130332e3134392e3136382e302f32332d3233203d3e20333936303634.roa (hash: t2rRJaiO5JXUe9ojQiZxBCHHkPzOsQY90eTPJjSOm/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a8:78:a7:d0:5f:61:34:1a:69:fa:c3:35:ba:81:a3:62:bd:5d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Apr 13 02:53:43 2025 GMT
            Not After : Apr 14 06:48:43 2025 GMT
        Subject: CN=84E1E8B53BAF2AC23BD4BCFE3045E06AD91DC952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:ec:fa:58:17:73:40:e2:08:07:8f:0b:77:
                    57:71:58:d4:b4:2a:50:5f:81:f2:1c:4d:17:e7:f4:
                    79:3d:8d:96:7c:f1:ed:f4:f7:54:22:ff:47:d0:96:
                    7b:63:7c:55:cb:20:1f:7b:c1:71:70:e2:5b:8b:31:
                    12:57:74:a7:e0:f3:4f:3d:69:ec:e9:fe:1f:4b:6a:
                    50:12:bf:8c:50:e2:90:1f:b8:e1:1a:ec:e0:5f:16:
                    4f:cd:85:37:5d:f4:4c:3d:49:f4:ec:57:2d:5d:4a:
                    da:2a:f6:2d:d5:ca:d8:ef:ad:25:90:fc:ba:c7:03:
                    87:42:18:20:36:c5:d4:ac:a9:16:0c:31:17:d2:0d:
                    ec:ac:25:be:89:70:19:d4:f2:b0:b6:9b:e3:37:6c:
                    dd:bc:e6:07:67:09:87:e5:97:4f:0d:d4:a8:dd:6c:
                    cc:a4:ae:63:8e:be:6f:d3:e1:cd:1b:87:7f:21:90:
                    8a:34:c6:20:c3:8e:3b:c8:f7:bb:be:79:e7:21:5f:
                    6b:4d:81:02:de:c2:6c:36:f7:08:01:19:f6:38:07:
                    e3:b0:9f:1c:51:4d:c0:c9:d3:b2:94:0f:ae:20:83:
                    b1:09:1c:b7:a2:2f:b1:59:e2:ee:eb:6f:06:39:f7:
                    6c:fd:18:0d:23:95:73:82:f0:cb:e4:c3:4e:be:6f:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E1:E8:B5:3B:AF:2A:C2:3B:D4:BC:FE:30:45:E0:6A:D9:1D:C9:52
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:17:07:0d:ee:f9:1a:8a:97:a1:de:c1:55:5d:d5:f3:f0:c0:
         6e:84:9e:e4:72:96:19:d5:f2:c4:bb:b4:9d:01:18:46:dc:c5:
         b3:55:58:78:aa:a3:a0:a8:bc:a7:7c:0c:f2:76:b2:9e:5c:e1:
         20:f0:83:6a:20:61:69:de:60:2a:10:76:1f:35:42:ab:d1:db:
         1e:29:f2:d7:1c:b6:fb:9d:75:df:fc:11:2f:6d:65:fc:2b:33:
         8a:ca:de:f0:cd:da:8f:2a:1c:21:8e:e7:6a:39:7a:fb:f2:77:
         22:ee:d6:f8:21:fd:fc:5d:c9:eb:c9:2a:4f:57:49:a5:63:ee:
         1c:5e:a4:19:70:be:da:d9:d5:e0:fe:15:93:9d:cb:51:3d:9f:
         e0:3d:c3:02:65:40:9d:af:a1:0c:10:2d:19:90:70:a7:27:10:
         7f:2e:1c:96:e9:c5:1f:49:b9:e4:91:2f:06:42:33:b0:58:b1:
         66:bf:06:b0:e5:bf:e8:72:15:d1:e7:7c:77:1a:29:77:7c:81:
         8a:68:df:d9:ee:f6:53:50:82:03:e0:00:74:b7:3b:c1:cc:7f:
         51:92:3b:a6:45:05:58:83:a9:cd:bf:90:a1:49:80:41:bb:f9:
         f6:de:e2:77:b5:de:e2:52:6d:f3:4a:6b:7b:d5:11:03:8a:20:
         8f:e4:eb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----