Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          cHplgSV9OWvQoPUjcRXu4WXSuw9Y/SDSKANP8lYfHyY=
Subject key identifier:   1A:2A:69:36:89:30:82:B5:7E:6F:37:35:AD:3C:92:53:5F:7F:5E:70
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       6411D1D3E650F35045C71DDB4AD9FAE1B3B409AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          02E7
Signing time:             Sun 13 Apr 2025 03:51:02 +0000
Manifest this update:     Sun 13 Apr 2025 03:46:02 +0000
Manifest next update:     Mon 14 Apr 2025 06:12:02 +0000
Files and hashes:         1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: XMzNh81WDKVwxKJPrlaf1BngQVOlb5eKnJac8/0Xz7M=)
                          2: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: kzIiKa78uyzgIwp38B3VckxTAvGVZjyeobfym4ZXmx8=)
                          3: AS205329.asa (hash: Dd7JzyQ5+gSfY/FnpvRoNBmxG+ibp+5DFVs8PxvskHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:11:d1:d3:e6:50:f3:50:45:c7:1d:db:4a:d9:fa:e1:b3:b4:09:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Apr 13 03:46:02 2025 GMT
            Not After : Apr 14 06:12:02 2025 GMT
        Subject: CN=1A2A6936893082B57E6F3735AD3C92535F7F5E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:df:70:7e:e5:c9:81:71:d5:fb:f0:69:2c:
                    90:3f:dd:68:40:ff:73:01:6a:80:f8:23:08:53:b8:
                    ab:a7:85:6d:5a:43:60:1c:7d:75:c7:55:fd:49:53:
                    71:89:90:3c:4c:33:07:01:01:a7:a5:9f:14:64:45:
                    d1:c4:45:be:51:52:94:ea:55:f1:f9:aa:30:0b:4e:
                    18:3c:eb:50:99:90:ef:5b:ab:56:85:e6:c8:ac:3a:
                    1d:3a:fe:46:c2:13:07:d5:1f:ac:c4:79:31:c8:09:
                    13:99:8c:f1:67:e7:35:62:62:7a:5b:3d:d7:a9:cd:
                    40:5b:ca:9d:21:07:af:78:16:e7:f9:0a:fa:16:dd:
                    d9:a6:e2:79:67:de:d7:a4:41:9e:22:ec:98:4f:13:
                    7f:cf:17:b2:82:54:1e:76:2a:c7:77:f6:1d:43:1f:
                    fd:cd:35:56:0d:ba:30:2b:db:6a:47:ac:c3:16:79:
                    63:41:fd:03:13:8d:b5:29:1c:45:ab:b4:da:48:94:
                    bb:f0:24:c8:4a:ea:c9:72:df:07:91:04:31:94:41:
                    3e:46:40:4f:d3:73:90:1f:bc:d0:c1:77:42:a2:08:
                    b9:ad:53:81:bb:ec:93:fa:f8:a1:40:2d:2c:2a:76:
                    fd:6b:ca:62:e2:81:eb:38:e9:21:c6:a6:71:cc:3b:
                    7c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2A:69:36:89:30:82:B5:7E:6F:37:35:AD:3C:92:53:5F:7F:5E:70
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:5a:74:f7:46:6e:66:86:13:6c:f1:c2:f6:5a:84:c7:95:
         9d:b9:e4:3d:d0:fb:73:f5:02:37:c0:cf:34:8d:55:e5:74:23:
         e7:1c:44:a2:e9:31:14:60:8b:73:d8:91:66:1b:50:64:36:45:
         0c:9c:ed:b4:66:70:7d:68:60:64:1c:0b:ce:69:5a:ef:10:e5:
         de:43:e9:3e:98:8d:b2:2c:b4:72:97:18:4c:31:df:c3:c7:a8:
         62:71:6f:04:88:8f:25:1e:e7:53:22:d1:6d:33:1b:8c:7b:3d:
         b2:8e:c9:a2:10:a7:d9:93:8f:f4:6c:99:d0:30:37:d9:2e:74:
         db:83:a0:ea:04:83:f2:12:04:cf:5b:b2:e3:8c:85:fe:84:be:
         d2:09:3b:fa:a4:b9:e4:91:4e:44:f4:b8:90:61:c3:29:ca:59:
         3a:00:9f:59:13:5e:56:fe:c7:56:04:1c:ce:af:94:15:d5:33:
         93:5f:97:32:63:1b:fa:e0:16:ad:96:2d:5d:6c:92:78:71:25:
         2d:e8:d3:47:c0:11:06:81:71:45:42:e9:72:4d:00:84:de:49:
         2f:18:c0:d4:28:2c:cb:c3:16:07:b4:fa:a5:ea:03:aa:58:87:
         94:7e:68:f6:bb:27:a0:ec:ef:37:95:09:06:bb:8d:dc:4f:96:
         62:04:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----