Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft
File:                     090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json)
Hash identifier:          7GN3p1e8I5FPhi3WJLb3BDmvbqrx6V3M3Lh0FNctNKk=
Subject key identifier:   D4:56:93:B1:C3:0F:73:91:60:A8:AB:93:C9:64:6C:BB:B9:DF:66:AF
Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1
Certificate issuer:       /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1
Certificate serial:       5AD56B082D148C765FD760359C51504AF4765B28
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft
Manifest number:          02C0
Signing time:             Sun 13 Apr 2025 09:53:39 +0000
Manifest this update:     Sun 13 Apr 2025 09:48:39 +0000
Manifest next update:     Mon 14 Apr 2025 11:26:39 +0000
Files and hashes:         1: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=)
                          2: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: 8AF8WGCvFzxtkWtKmUuIaMU2jRoL+oVso4fA0Psms04=)
                          3: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: /6TLbLr5yUGE6+8nz6p2on3lwleCpU2rYt4G5JE9rDk=)
                          4: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d5:6b:08:2d:14:8c:76:5f:d7:60:35:9c:51:50:4a:f4:76:5b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1
        Validity
            Not Before: Apr 13 09:48:39 2025 GMT
            Not After : Apr 14 11:26:39 2025 GMT
        Subject: CN=D45693B1C30F739160A8AB93C9646CBBB9DF66AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:45:bd:32:31:c1:2f:84:bd:80:96:82:ea:
                    13:4e:55:1c:2b:c9:e9:6a:98:6a:00:6f:aa:61:12:
                    51:b6:fc:82:3b:f1:98:f1:fa:12:95:a0:f9:73:3e:
                    21:15:9b:31:07:88:73:1c:01:0b:9d:7b:68:99:aa:
                    cb:13:3d:fa:bd:f9:ee:c2:d8:7c:ca:bb:96:15:34:
                    91:f0:cc:62:07:16:95:d4:1c:28:44:3f:76:9d:ff:
                    2c:73:cc:d1:f4:b1:8f:0c:2c:54:92:9c:08:71:a9:
                    80:84:00:4e:0d:05:e6:7a:0a:9d:be:04:71:06:9d:
                    86:19:5d:56:a8:9f:d7:f2:65:74:43:b3:c3:ef:88:
                    8b:68:00:15:5c:8e:4c:a3:9e:75:95:7d:ba:01:37:
                    4f:12:e6:f7:08:f7:03:a5:fd:b4:0f:2f:23:e7:8e:
                    e1:05:0b:f1:d8:c5:fa:bb:04:65:f0:bc:bb:8b:ab:
                    47:f8:e1:6a:04:f8:fa:30:56:3d:24:f1:d2:f7:cd:
                    de:98:b9:bc:c3:16:de:99:e6:38:1c:f3:d0:6e:c9:
                    e3:2f:6c:1d:a9:f2:8e:89:d3:d3:7b:0b:25:39:9c:
                    0f:40:3b:52:25:63:37:4a:ff:ff:1d:5e:f5:41:51:
                    d9:00:cc:01:7c:63:fc:83:c8:4f:f9:1c:9b:ee:0e:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:56:93:B1:C3:0F:73:91:60:A8:AB:93:C9:64:6C:BB:B9:DF:66:AF
            X509v3 Authority Key Identifier:
                keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:00:28:28:12:41:11:d8:57:95:c9:c0:2d:70:fb:58:e1:ce:
         e8:b6:97:d3:4c:5f:c6:91:4e:80:22:56:5c:cb:bc:d6:b8:41:
         c0:86:2d:f2:c2:32:b0:92:12:e8:87:9e:31:f4:ae:ec:5c:eb:
         54:b3:3b:33:59:0e:fa:2d:e6:aa:11:6a:9c:9d:34:d4:85:7a:
         d6:2f:de:5c:ac:af:fa:05:a5:49:82:31:a9:ca:a2:48:bb:5b:
         22:f1:d3:73:a1:16:7c:57:e4:c1:09:e7:64:9b:12:fd:e4:d8:
         42:30:cf:ed:eb:55:05:75:a9:b3:94:83:f0:1c:a2:60:6e:6a:
         fa:e6:8a:df:db:03:eb:39:92:9c:a5:11:a0:a1:78:35:85:e6:
         2b:45:8b:2a:d9:85:08:58:58:e1:9b:12:3e:3f:5b:5e:0b:91:
         ef:42:2c:19:90:a7:2b:56:3e:2f:ff:b7:12:63:79:d8:ab:c5:
         42:18:6a:5f:8c:15:c8:96:e3:7e:e5:b0:ef:3b:ea:29:85:65:
         e6:97:36:c5:5b:6d:53:fc:b2:86:5b:21:e4:85:e5:ca:27:6e:
         aa:c4:d4:eb:58:3d:36:83:b5:8b:09:57:62:44:2f:8b:94:ac:
         f1:bf:5f:61:8b:63:e4:63:20:5f:1a:7a:09:fe:45:41:4f:e4:
         69:08:31:4e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUWtVrCC0UjHZf12A1nFFQSvR2WygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1
Mzg0QjFFMTAeFw0yNTA0MTMwOTQ4MzlaFw0yNTA0MTQxMTI2MzlaMDMxMTAvBgNV
BAMTKEQ0NTY5M0IxQzMwRjczOTE2MEE4QUI5M0M5NjQ2Q0JCQjlERjY2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESEW9MjHBL4S9gJaC6hNOVRwr
yelqmGoAb6phElG2/II78Zjx+hKVoPlzPiEVmzEHiHMcAQude2iZqssTPfq9+e7C
2HzKu5YVNJHwzGIHFpXUHChEP3ad/yxzzNH0sY8MLFSSnAhxqYCEAE4NBeZ6Cp2+
BHEGnYYZXVaon9fyZXRDs8PviItoABVcjkyjnnWVfboBN08S5vcI9wOl/bQPLyPn
juEFC/HYxfq7BGXwvLuLq0f44WoE+PowVj0k8dL3zd6YubzDFt6Z5jgc89BuyeMv
bB2p8o6J09N7CyU5nA9AO1IlYzdK//8dXvVBUdkAzAF8Y/yDyE/5HJvuDjPPAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU1FaTscMPc5FgqKuTyWRsu7nfZq8wHwYDVR0j
BBgwFoAUCQ/95AtgKc1/4xpu20Z+GlOEseEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzUvMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1Mzg0QjFFMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC8wOTBGRkRFNDBCNjAyOUNEN0ZFMzFBNkVE
QjQ2N0UxQTUzODRCMUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC81LzA5MEZGREU0
MEI2MDI5Q0Q3RkUzMUE2RURCNDY3RTFBNTM4NEIxRTEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFACgo
EkER2FeVycAtcPtY4c7otpfTTF/GkU6AIlZcy7zWuEHAhi3ywjKwkhLoh54x9K7s
XOtUszszWQ76LeaqEWqcnTTUhXrWL95crK/6BaVJgjGpyqJIu1si8dNzoRZ8V+TB
CedkmxL95NhCMM/t61UFdamzlIPwHKJgbmr65orf2wPrOZKcpRGgoXg1heYrRYsq
2YUIWFjhmxI+P1teC5HvQiwZkKcrVj4v/7cSY3nYq8VCGGpfjBXIluN+5bDvO+op
hWXmlzbFW21T/LKGWyHkheXKJ26qxNTrWD02g7WLCVdiRC+LlKzxv19hi2PkYyBf
GnoJ/kVBT+RpCDFO
-----END CERTIFICATE-----