Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
File:                     01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft (raw, json)
Hash identifier:          edZ1BHsgh1dfi4o8DIhqI6Bcim67vZ7f384H2CmyXk4=
Subject key identifier:   53:F2:38:74:57:C4:8A:FA:D2:E5:6B:88:0E:FF:71:AA:BB:F6:53:6E
Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
Certificate issuer:       /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Certificate serial:       37ACD2B7CD730041EAE33179FFF801EB13178D1C
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
Manifest number:          62
Signing time:             Tue 15 Apr 2025 09:59:53 +0000
Manifest this update:     Tue 15 Apr 2025 09:54:53 +0000
Manifest next update:     Wed 16 Apr 2025 11:03:53 +0000
Files and hashes:         1: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (hash: ksX8z7ZW9gymrqj00x+2X/C8X7o9+JqUVnJjpd/TsDA=)
                          2: 01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl (hash: wHzxrsAtdiGJQmQIO1dlNKQ2DfWLRzKj1W7NLS/dWOY=)
                          3: 3139322e36372e33352e302f32342d3332203d3e203236353536.roa (hash: 6b1VpbvMsE50o/1KffApiCFgdzfb7zhZLiCWQ7W3KvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ac:d2:b7:cd:73:00:41:ea:e3:31:79:ff:f8:01:eb:13:17:8d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
        Validity
            Not Before: Apr 15 09:54:53 2025 GMT
            Not After : Apr 16 11:03:53 2025 GMT
        Subject: CN=53F2387457C48AFAD2E56B880EFF71AABBF6536E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:4c:02:4c:4c:40:53:90:27:6e:ab:d9:64:
                    92:c7:9c:e4:f2:25:ce:2d:b5:2e:bb:a6:6c:99:60:
                    2e:ce:a9:de:7d:d5:a0:a0:f5:26:3b:09:b6:b3:c3:
                    3c:e7:10:05:12:2e:dd:e1:4f:07:e1:f9:d2:ee:ff:
                    af:a8:dd:48:dc:09:21:5c:38:9c:df:82:03:fc:78:
                    f4:c8:19:29:e6:13:ba:42:be:a4:6a:bc:d1:05:1b:
                    d8:7a:fb:93:94:25:81:45:c4:9e:79:15:aa:af:35:
                    5d:57:f3:fe:bf:9d:7a:50:a7:99:aa:e2:90:a2:a1:
                    1b:56:74:75:fa:21:11:5d:09:55:d1:be:7b:4d:31:
                    c6:97:4e:1d:2c:94:40:bd:f5:95:ec:49:15:f5:f0:
                    e6:d5:62:83:c5:0a:75:cf:ec:b3:1f:95:0b:18:d7:
                    2f:5c:83:fe:17:9a:09:a9:e6:f3:77:ef:eb:2a:4a:
                    1a:44:bb:15:be:81:1f:56:8b:7f:4f:80:0d:da:5d:
                    8e:69:51:ba:a1:30:5a:5f:1a:55:3a:bd:a7:0a:d5:
                    b3:92:62:bf:bc:26:9a:7f:6f:cb:ca:08:3f:b2:23:
                    ee:39:84:a0:96:bf:bc:2f:fe:8a:25:7f:86:0d:c3:
                    b1:3e:be:e7:98:98:60:1d:36:96:fc:88:a3:3f:ce:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:38:74:57:C4:8A:FA:D2:E5:6B:88:0E:FF:71:AA:BB:F6:53:6E
            X509v3 Authority Key Identifier:
                keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:0b:fd:84:74:9f:66:4d:70:0f:5e:e0:c6:22:18:05:b1:
         e5:6d:f2:4d:a6:b3:16:7a:99:3a:bd:0b:eb:af:e4:dc:ae:25:
         23:35:11:4e:44:61:1a:bf:55:6b:01:26:93:2d:01:78:07:be:
         85:5c:2f:a7:55:46:55:f7:6d:21:18:f8:2f:ce:59:ab:7b:0b:
         ae:88:8c:ff:29:ab:ed:b9:44:07:c8:d0:0b:41:a9:d5:af:cf:
         f6:87:ae:6c:94:68:ed:9a:f6:73:68:1c:ae:69:6e:91:a1:32:
         f7:d3:22:4d:d5:25:72:67:4a:0d:51:75:cf:59:9e:4f:6f:f0:
         51:16:66:bd:57:b6:b2:54:fa:67:c1:57:62:d1:32:2e:ce:c5:
         f1:ae:5c:5e:85:86:3b:14:56:4f:4f:f9:a7:87:18:26:ab:bf:
         9f:62:1c:5c:0f:7b:3b:2f:7e:d5:be:4f:79:f7:dd:d8:f0:43:
         21:70:9f:e3:97:09:38:4d:ee:88:09:62:71:ef:80:27:b3:66:
         d7:e1:07:4c:c2:52:f6:6b:36:e0:79:02:4d:28:a4:5a:0e:a0:
         b1:e4:98:1a:ea:e4:1a:af:ec:b6:d4:b5:39:62:b4:e9:44:55:
         c9:0a:77:ef:f3:3e:39:92:4b:56:2b:6f:05:5d:c8:74:5e:d4:
         4d:42:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----