Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File:                     0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier:          jiLaiYJaYv0lyRNaYxAstjHXY9W63cmNgJa2AQvUnWg=
Subject key identifier:   8A:11:47:D4:07:23:65:CA:19:0B:09:92:E3:D8:DB:77:43:1E:19:12
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer:       /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial:       15BB4DFA47E6D5D6F162EB8905AC41E9BF69BA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number:          01C1
Signing time:             Sun 13 Apr 2025 09:42:45 +0000
Manifest this update:     Sun 13 Apr 2025 09:37:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:02:45 +0000
Files and hashes:         1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: GSnLDdZ3tx3FZhDLMEvqREQ4HMXvYfyxTtwFZIbYN6E=)
                          2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bb:4d:fa:47:e6:d5:d6:f1:62:eb:89:05:ac:41:e9:bf:69:ba:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
        Validity
            Not Before: Apr 13 09:37:45 2025 GMT
            Not After : Apr 14 13:02:45 2025 GMT
        Subject: CN=8A1147D4072365CA190B0992E3D8DB77431E1912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:44:51:5b:eb:08:ee:85:d2:5e:82:21:8d:
                    b3:92:a5:4f:7f:0d:fd:ce:d1:f6:04:76:20:f8:26:
                    fb:33:41:8e:8d:bf:13:4a:03:fe:97:67:cb:f2:92:
                    00:a9:c1:76:98:9d:bc:9b:40:15:95:fe:22:2f:61:
                    75:10:9f:b1:bf:a2:d0:c3:78:99:07:6d:ac:d7:47:
                    05:cc:5b:5a:b4:e5:f9:7a:ba:f4:d1:ff:9b:0d:53:
                    8d:99:f5:eb:7d:9c:c5:5b:c5:6c:33:90:d1:c2:5b:
                    ad:0a:ca:78:f1:3d:a2:62:e1:57:50:6d:9e:8b:a4:
                    fd:3b:44:be:0d:36:0a:e4:93:02:dd:75:db:09:24:
                    f6:fd:bd:72:e8:f8:27:c1:8c:80:55:0a:c6:d4:b8:
                    01:d4:a0:2a:86:20:b0:b7:e7:b0:be:1e:35:76:7a:
                    ac:10:70:cb:6a:44:ab:53:17:0d:b7:83:5b:8d:0a:
                    31:2a:a3:ea:ea:41:cf:93:c4:27:c2:02:55:2d:f6:
                    27:ed:d5:8f:be:de:27:09:5a:91:cd:43:bd:de:9f:
                    81:2a:40:a1:a9:ea:31:26:a0:0f:7d:8c:b3:5b:02:
                    d2:56:75:45:4e:85:74:f0:21:a1:2d:7f:61:32:e6:
                    e1:c8:ae:b4:15:3a:d6:d6:c8:4c:a8:74:d9:4b:a7:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:11:47:D4:07:23:65:CA:19:0B:09:92:E3:D8:DB:77:43:1E:19:12
            X509v3 Authority Key Identifier:
                keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0b:dd:19:b5:36:7a:be:82:9e:ba:12:20:ee:80:58:5b:bc:
         88:12:67:fa:30:d6:09:8a:8c:f7:90:50:6a:d1:fa:ad:3b:47:
         57:17:5d:7a:82:60:7c:76:33:f7:79:1f:f3:a7:2b:0e:23:79:
         c1:34:90:f4:84:21:84:71:72:08:51:26:ac:72:3d:02:18:20:
         13:38:d5:27:74:34:97:4c:a3:83:4e:3b:f8:2b:cd:ed:1e:b2:
         14:35:a3:99:42:98:78:42:46:bd:72:39:14:10:35:3a:cc:2c:
         e2:1f:0a:a3:ba:2b:38:e2:f9:8e:0c:4c:27:14:d1:c9:15:69:
         35:d1:b7:7b:d4:63:d5:ef:f6:40:a9:32:86:d0:78:4b:d1:0f:
         95:c4:ab:5b:bf:71:a2:07:b4:04:e4:67:44:b6:ad:ed:9e:45:
         6e:7b:3f:0b:23:55:4c:99:8d:17:f8:eb:26:f0:0b:6d:7f:f7:
         e0:2e:85:d8:9e:13:3b:e1:1f:0e:e1:3b:05:c5:58:66:e1:a5:
         0a:d2:0b:48:3c:4c:58:bc:68:15:ff:b5:ad:89:fe:dd:2c:0e:
         95:d6:05:94:33:56:42:ad:e0:29:04:92:a3:94:bd:ee:cd:2b:
         91:8a:60:cf:4d:b0:8d:3f:f4:9f:b2:9d:63:2e:73:e9:d9:c8:
         81:6f:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----