Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
File:                     4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json)
Hash identifier:          X4+E1aLsnsaz49LRJ8Rfvrbnv7Ldp4o1dHYa97WN36Y=
Subject key identifier:   41:57:32:A9:F1:34:60:65:69:D0:12:F9:8D:16:21:41:CF:BF:9C:20
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Certificate issuer:       /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial:       37481697EA48DFB309370A38021FFE42C2207249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
Manifest number:          0289
Signing time:             Sun 13 Apr 2025 02:02:41 +0000
Manifest this update:     Sun 13 Apr 2025 01:57:41 +0000
Manifest next update:     Mon 14 Apr 2025 04:17:41 +0000
Files and hashes:         1: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: 5NdQ//spLweNzxs8zHAGi1gJMib8lPFrPng4LsW41ME=)
                          2: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: k6qvY6qYLtrsDEyi8J+SScxT9enfuaIRYNZH2IHqC8o=)
                          3: 3135392e3235332e352e302f32342d3234203d3e20383334.roa (hash: qXWeXxMIlYcVAu0mUcCl9uApcKOZzbQ6Lhjrv7db4Es=)
                          4: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=)
                          5: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: 0tDDNZLrISp9aB+b7YFWWE0xtMT0eS5E3gfUDO32J4Q=)
                          6: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: Io0uqsNFWMRzWK0hBxO5SHV2H5/pOpKQHlMKDuh/MnA=)
                          7: 3135392e3235332e332e302f32342d3234203d3e20383334.roa (hash: bS7OWpukKM13Mrj8vwNN9Xt2FLz0eH8xziJA6OfcVmQ=)
                          8: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=)
                          9: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=)
                          10: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=)
                          11: 3138352e31332e3232362e302f32342d3234203d3e20383334.roa (hash: OuXn2nbA0M9AZ5xOpa5kqiXkJAoaG3UOG3XpHkk6mJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:48:16:97:ea:48:df:b3:09:37:0a:38:02:1f:fe:42:c2:20:72:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
        Validity
            Not Before: Apr 13 01:57:41 2025 GMT
            Not After : Apr 14 04:17:41 2025 GMT
        Subject: CN=415732A9F134606569D012F98D162141CFBF9C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:a1:53:9e:68:22:68:11:cf:38:c2:3b:a7:
                    ce:7e:b5:ff:7b:05:e5:b0:1b:25:44:dc:5b:20:f8:
                    8a:9f:bf:e2:42:ca:1b:79:93:f0:04:90:2e:dd:24:
                    ad:f9:a3:9f:dd:69:52:2d:c5:79:54:e2:ed:44:5c:
                    9a:b7:24:c4:11:af:2d:af:b5:0d:3a:89:79:ff:93:
                    bb:be:7d:0a:27:0b:7c:7b:b3:b8:ef:ed:b6:83:b6:
                    0c:41:58:a3:f2:e1:1c:a1:04:2f:9d:5a:78:ad:24:
                    fb:b2:83:27:e6:ef:c4:fd:6d:cf:70:3a:9d:23:d0:
                    b4:05:77:89:12:4d:b2:a9:fb:a4:a9:52:4d:2e:a0:
                    2a:2e:62:01:01:d4:dc:82:47:af:97:33:c8:d7:6d:
                    f6:6b:b4:e3:61:e9:bc:ec:15:71:0e:77:20:b0:91:
                    46:ca:fd:46:b9:41:5a:c4:68:bf:f7:3d:30:ec:d3:
                    ac:ce:53:09:2f:3e:be:9b:36:f2:cd:42:6c:b3:61:
                    b2:e6:9d:55:17:4d:07:27:c1:f2:8d:23:90:7b:5c:
                    76:55:25:06:d4:7b:38:b0:9f:01:97:2e:2a:81:9e:
                    7c:02:8d:9a:29:2d:6d:60:d1:5b:fc:6b:90:13:5f:
                    69:fd:15:3c:1c:1d:a1:dd:e4:cd:90:41:1a:61:e9:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:57:32:A9:F1:34:60:65:69:D0:12:F9:8D:16:21:41:CF:BF:9C:20
            X509v3 Authority Key Identifier:
                keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:46:02:44:35:c1:ad:12:8d:1c:49:25:d8:fc:8a:37:7e:4e:
         1b:e6:1d:55:67:2a:35:4e:46:fa:af:9f:21:dd:11:3f:fd:73:
         4e:3c:e2:3c:54:bc:bb:61:e3:d8:9b:d0:ec:d6:6b:ea:00:8c:
         cd:f3:55:09:71:eb:bd:51:ed:37:e8:c5:ae:d7:60:5f:e8:c6:
         86:22:61:a9:22:d1:11:d1:48:ea:bc:f2:d0:45:50:76:e4:20:
         ba:d7:5d:14:4f:6c:27:60:28:7f:5d:2a:69:e4:7e:62:37:20:
         eb:64:08:98:5c:6c:22:4b:75:8b:fd:21:b1:5f:02:28:de:94:
         c3:48:8f:1b:d0:36:ce:6e:2e:4e:33:d9:7d:b9:b4:b0:86:97:
         31:ba:28:ef:03:21:81:89:c4:e6:97:41:3e:36:bb:9e:94:6b:
         e3:f0:92:c8:2e:9c:f0:4d:6d:48:80:27:8a:f5:57:1e:9a:3b:
         d7:fe:5f:df:2d:4f:d9:de:12:ea:c1:0f:9c:c2:65:d8:5c:71:
         b9:b3:2a:5f:6b:28:53:24:7c:61:15:61:02:ad:72:26:aa:ba:
         54:6b:ec:e5:f6:f2:ef:52:c4:62:59:56:8e:1f:84:b7:6a:1a:
         78:27:0b:55:83:54:bf:58:8d:f3:9d:c8:8a:d0:a6:f2:2d:1d:
         4d:06:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----