Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft
File:                     75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft (raw, json)
Hash identifier:          2jIQfspPAIWP4SmAdBVcguhSfP5RpAQJXOG3u/z8cYg=
Subject key identifier:   C2:41:96:AA:FA:C0:3E:AC:07:FF:29:B0:7D:C7:54:CB:BC:DB:A5:C0
Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
Certificate issuer:       /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
Certificate serial:       0AF7687BD6D33C5D6353222CFEAB35927443C2F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft
Manifest number:          D5
Signing time:             Sun 13 Apr 2025 13:12:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:07:18 +0000
Manifest next update:     Mon 14 Apr 2025 17:06:18 +0000
Files and hashes:         1: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl (hash: b8+CFWeNUFo6CqxoN2M8vby+JvbRmB50ly7zPlQ5JOE=)
                          2: AS47272.asa (hash: V1JO5W+cc6ckYUh1nImJJtFR/jaKow9IHBTPbid4vVM=)
                          3: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: pidPjaC/0SzUTjVt7jeHfSi0+syOL6p0IuoBQSBkar0=)
                          4: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: trryrU9wIYmZgEJdzHNYY5h4S9o2VXqY8o0Zi9mSgQo=)
                          5: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: n7zi8erDwVkaEAccTf7AgcxyPGv2dh/rzzppLzmNaTU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f7:68:7b:d6:d3:3c:5d:63:53:22:2c:fe:ab:35:92:74:43:c2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
        Validity
            Not Before: Apr 13 13:07:18 2025 GMT
            Not After : Apr 14 17:06:18 2025 GMT
        Subject: CN=C24196AAFAC03EAC07FF29B07DC754CBBCDBA5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:90:19:1f:d3:f0:12:00:f0:88:32:22:ce:
                    4f:c5:ae:b5:81:07:53:ec:64:c2:a3:a8:61:80:ec:
                    ac:1a:92:09:82:b1:e9:35:72:2d:e1:34:40:8f:db:
                    58:77:0c:39:6b:f7:19:26:5d:45:b2:25:1f:b5:d4:
                    c4:22:09:73:52:dd:84:67:50:e3:45:ae:68:d7:92:
                    25:8d:00:f8:4e:09:b4:f0:ad:53:ca:9c:69:96:9c:
                    f9:e4:7a:68:d4:15:89:ce:a1:3e:3d:56:52:1b:bf:
                    8c:e1:8b:11:bd:2f:69:f5:b0:d2:e7:dc:a5:66:43:
                    e8:cd:7e:dd:a7:d9:fb:6d:e9:d2:e8:08:cf:21:dc:
                    56:f6:79:20:6e:95:d1:e1:bb:83:93:b6:96:66:cb:
                    ce:4c:e6:ee:7c:cd:f1:02:7a:16:4a:40:c6:75:5b:
                    f9:0a:f7:16:21:58:37:d8:17:52:ab:6d:d9:8b:90:
                    82:6c:2d:f7:2f:9e:d4:cb:a4:0e:32:75:6f:7c:fd:
                    96:0b:91:5d:75:20:34:5b:8b:f6:5d:75:66:b4:fd:
                    52:48:4c:9d:66:51:29:68:f0:ea:2e:b3:59:bb:e7:
                    07:81:5c:a1:47:5d:5d:20:d4:cb:50:52:69:8c:56:
                    d6:89:a5:03:77:b2:a4:70:af:72:74:b6:fb:4c:f8:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:96:AA:FA:C0:3E:AC:07:FF:29:B0:7D:C7:54:CB:BC:DB:A5:C0
            X509v3 Authority Key Identifier:
                keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:48:31:73:2a:7c:cc:3e:74:60:12:70:e9:b0:e6:c5:55:62:
         75:69:cc:88:f0:38:60:59:f9:19:04:f7:e6:98:fb:e5:e2:08:
         68:d0:d3:43:36:d3:2c:c7:f6:0b:70:5a:00:e1:c4:a0:0e:78:
         6d:16:c9:01:b7:9e:1a:a9:a2:df:45:f4:a2:95:7e:1e:1c:ee:
         92:f3:81:a9:92:c2:71:63:51:59:19:c2:c8:9b:7b:d1:cf:3b:
         63:8c:81:d2:52:55:d4:a1:99:94:66:30:d8:7c:2b:95:23:78:
         66:fe:48:04:6e:67:f6:c9:c9:37:d4:4a:c0:1f:6d:b0:a0:39:
         15:2d:20:e2:e7:02:9a:d0:2b:02:3d:c6:0f:97:9e:bd:0b:6e:
         8b:03:42:79:e7:1b:7e:ff:1c:99:d8:f4:63:11:0f:93:fe:29:
         62:ae:71:99:65:9c:47:39:25:80:f0:a4:07:9d:72:15:7f:63:
         7a:8f:b1:1b:4a:b2:48:72:25:3c:e6:40:f2:d5:e1:70:be:c9:
         af:44:19:57:64:e1:e5:68:3c:06:15:4c:65:a4:d4:e1:1a:b9:
         81:06:f0:f2:cf:7c:b5:e7:6f:d2:b0:9c:5d:4b:45:87:a5:9b:
         6a:bd:c9:75:7f:f0:af:ae:c3:b5:cd:24:6a:9e:91:65:64:ff:
         e0:ca:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----