Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File:                     B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier:          6uXKvtj/GtbGQ70MM5B3DoG6yAJEbbz72yGfSFicPhU=
Subject key identifier:   A7:CE:70:39:EA:E4:66:52:5C:79:78:A9:C2:A4:2B:AC:53:D6:79:E1
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer:       /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial:       1FA27BB07A502E7B6179AEEF19A9CEED43575CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number:          01CA
Signing time:             Sun 13 Apr 2025 09:14:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:09:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:36:20 +0000
Files and hashes:         1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
                          2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: 32wpkhTu+48MVHnJ8oDiP+0BVm2TsKVTgcYFSLF7uSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a2:7b:b0:7a:50:2e:7b:61:79:ae:ef:19:a9:ce:ed:43:57:5c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
        Validity
            Not Before: Apr 13 09:09:20 2025 GMT
            Not After : Apr 14 10:36:20 2025 GMT
        Subject: CN=A7CE7039EAE466525C7978A9C2A42BAC53D679E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:35:80:3c:11:1d:61:a6:bc:73:ed:bc:e0:
                    76:f2:d2:4a:51:61:df:4f:f9:af:a7:e3:f7:58:b2:
                    b2:70:98:1c:6a:ec:3b:ae:61:c1:93:76:b6:c2:20:
                    a3:88:45:20:62:45:b2:c6:62:3a:f5:cf:b9:55:94:
                    a2:ae:6f:66:b8:3c:57:74:40:2f:65:3c:5f:93:bf:
                    9f:11:e6:48:60:c4:81:34:cb:a5:52:5b:2a:7c:b6:
                    03:8f:65:12:bc:d1:42:b0:42:00:e4:0c:f8:31:ee:
                    a5:8a:dc:8b:ad:62:f7:20:a8:94:57:b1:94:36:e4:
                    98:4a:bc:c4:ce:e7:ed:d3:19:66:41:e5:0c:35:f9:
                    7b:15:f4:84:f8:93:ae:cb:49:2a:57:b9:32:6a:d4:
                    7d:f5:46:59:85:02:ca:24:6e:52:d3:f6:b1:ac:88:
                    b7:a2:77:8d:0a:7c:19:dd:d2:c0:6a:3e:b3:bd:d9:
                    a1:a2:04:14:59:a0:a4:d6:22:3a:fb:11:c3:e4:de:
                    4a:4e:a8:e6:55:42:bf:26:4d:c4:91:a6:a4:8e:f4:
                    8d:5f:56:20:d2:9d:db:04:dc:32:9f:7a:f1:57:65:
                    b3:c4:09:07:77:f3:48:7b:40:1f:92:97:39:fe:78:
                    19:eb:0a:fc:db:0a:e3:94:ed:f6:27:6f:e2:92:37:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CE:70:39:EA:E4:66:52:5C:79:78:A9:C2:A4:2B:AC:53:D6:79:E1
            X509v3 Authority Key Identifier:
                keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:31:cb:6a:8a:33:84:25:84:91:f2:dc:7f:a1:a4:b0:9c:0f:
         8d:30:50:f7:a6:21:b8:b4:85:f9:56:32:28:f7:e1:85:68:b8:
         a0:8c:b2:12:cc:7a:41:33:fd:3d:05:5e:80:a7:b2:7f:8f:94:
         2e:5d:53:e6:d6:7f:08:d1:00:fa:49:38:03:a7:70:d0:de:b2:
         f4:a8:e1:3b:28:17:f8:ba:fe:40:3e:ee:c1:00:f7:5b:cd:a8:
         7b:ca:06:8c:bd:fd:b7:45:81:0c:f6:f4:6e:e3:c4:c5:33:c6:
         82:be:c9:10:de:35:16:68:f8:b3:92:a1:0a:2d:43:f4:11:b5:
         44:59:14:1d:40:59:12:02:70:8e:3d:ae:9e:89:d3:fd:92:67:
         b6:40:d2:f6:bf:1e:78:bd:4a:e9:9a:b9:4a:cd:4c:ff:2a:25:
         6a:ed:e1:6c:ef:cf:c9:58:e9:e2:a9:b5:5c:c0:c7:ee:0d:30:
         ec:c8:8d:c4:87:98:ee:d1:22:e2:89:95:c7:32:35:12:57:cf:
         4e:9c:99:5f:62:18:85:aa:48:c3:d6:fd:85:96:b7:40:4e:21:
         ba:d9:bb:36:af:c2:24:53:c2:57:f3:04:9b:ed:70:5c:da:13:
         6f:ef:0e:f2:7d:97:f3:53:03:3c:fe:26:68:48:25:d2:be:78:
         91:98:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----