Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
File:                     64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json)
Hash identifier:          Xg2lVpNIaVoXCIjLU4nRwdintT6YL3ikqW3nNa162Vo=
Subject key identifier:   D3:43:76:E3:9E:61:8F:42:24:6B:07:A7:DC:0D:0E:A7:84:17:2D:72
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Certificate issuer:       /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial:       450B46084F1C9B35CFBA543D16C2143215127A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
Manifest number:          0218
Signing time:             Sun 13 Apr 2025 13:02:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:57:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:45 +0000
Files and hashes:         1: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: 7wQrqMox9QAmR2vQp8q5VdavN4YrXCFJ3Bes/IozaAU=)
                          2: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=)
                          3: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=)
                          4: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: wQGczBl2r8CvgK8nGbzc6cAwKSoTG3e10Md/qNRQQ8w=)
                          5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0b:46:08:4f:1c:9b:35:cf:ba:54:3d:16:c2:14:32:15:12:7a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
        Validity
            Not Before: Apr 13 12:57:45 2025 GMT
            Not After : Apr 14 14:02:45 2025 GMT
        Subject: CN=D34376E39E618F42246B07A7DC0D0EA784172D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:57:a5:da:a5:b0:bd:a2:a6:13:ee:1f:34:
                    ca:5a:34:7e:52:60:9c:d6:23:4c:02:c2:56:23:4c:
                    0c:05:46:32:0e:f4:d0:b5:4e:75:65:86:af:de:0f:
                    89:f1:6a:f4:2f:c8:b2:ad:fe:4f:56:2b:53:e8:da:
                    fe:12:13:ed:11:29:8a:9a:79:9d:b6:d0:90:93:30:
                    0d:9d:3b:c3:37:27:03:48:43:98:d1:81:24:14:b9:
                    f9:1e:9b:4e:75:eb:d7:3b:27:06:25:cc:0d:89:40:
                    c0:8e:48:47:8d:9b:a5:fa:54:33:9e:12:50:a4:ef:
                    a9:d0:49:b6:4e:6c:68:5e:ae:62:c5:c4:0a:08:b4:
                    6c:a5:4f:ea:8c:02:e2:f4:79:7f:e8:6a:e2:64:33:
                    75:64:5a:27:d5:0c:15:d8:7d:a8:7e:15:56:5b:a1:
                    69:5f:09:22:2f:55:6e:be:1f:7e:b9:9e:0f:e6:f8:
                    71:dc:b5:a9:ce:27:b6:c2:68:ab:95:3a:8e:32:dc:
                    83:a6:3c:1d:a7:e4:3e:88:c4:58:93:d9:24:ac:2c:
                    2a:c3:8a:02:ca:19:95:6b:7d:d1:65:9b:46:9f:05:
                    8d:a6:b8:92:4f:da:32:50:d9:40:52:eb:9b:9e:c3:
                    92:ca:be:4f:d7:9f:75:31:7d:ae:5a:b6:d9:93:dd:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:43:76:E3:9E:61:8F:42:24:6B:07:A7:DC:0D:0E:A7:84:17:2D:72
            X509v3 Authority Key Identifier:
                keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:2d:4e:7c:6f:01:30:aa:c4:24:cc:cc:a6:73:36:b4:45:
         42:68:f9:c3:ab:52:ea:4f:f6:34:49:4d:70:c5:d4:a7:4f:29:
         8d:4a:02:b2:e2:40:97:f7:64:e2:27:40:94:d6:b4:41:eb:c8:
         7e:8f:0a:36:3d:08:91:80:38:27:39:af:85:f6:1e:fc:44:66:
         2e:86:f0:39:21:db:2b:cd:e6:c1:d0:06:ba:55:91:22:f2:51:
         80:e0:fc:01:c6:20:ec:03:bc:8b:6c:fd:9b:c1:10:33:8f:2e:
         0b:18:66:df:ff:b0:cd:27:af:4b:e1:a4:5a:75:b9:ad:4e:94:
         87:37:35:dd:17:57:4e:2a:40:18:37:3d:85:03:cb:51:eb:7e:
         d3:55:fb:7f:61:04:38:53:29:68:f4:a9:d2:46:14:be:ba:a6:
         ae:53:98:9d:74:51:e2:0a:e4:f6:69:ff:e4:13:d4:64:2b:91:
         e7:01:5d:30:e1:46:78:f2:14:5d:22:e8:62:60:28:8f:d4:da:
         1e:2c:f8:a4:e5:76:b9:9e:e9:16:62:8b:64:3f:13:e9:0b:a1:
         72:9a:d4:08:f3:cf:79:e7:6f:7e:ef:95:c4:5d:d9:fc:89:d6:
         9f:12:7c:ef:8f:01:ed:1d:46:53:1a:3b:45:3f:d8:0e:a9:b3:
         d7:89:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----