Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft
File:                     6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft (raw, json)
Hash identifier:          EyOFxsGc+GPxO9L9YN94MteREm1lCiD3uzGoGQIDjrQ=
Subject key identifier:   8C:CF:85:DB:47:BE:2D:77:AE:74:51:4B:07:32:7F:27:6B:D4:90:7D
Authority key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43
Certificate issuer:       /CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343
Certificate serial:       5A1DFE77783B19368358BAC4026BBB93AB96FBBC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft
Manifest number:          59
Signing time:             Sun 13 Apr 2025 00:30:30 +0000
Manifest this update:     Sun 13 Apr 2025 00:25:30 +0000
Manifest next update:     Mon 14 Apr 2025 03:35:30 +0000
Files and hashes:         1: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl (hash: R7/WTBooytwUETdhXDg6Ayu3Ch6T+hIFnKq7/f0TdVI=)
                          2: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: 1uuqh7vWgIM0zB+uNA1obgzEdiTwrJmrg/6SIClfVTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1d:fe:77:78:3b:19:36:83:58:ba:c4:02:6b:bb:93:ab:96:fb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343
        Validity
            Not Before: Apr 13 00:25:30 2025 GMT
            Not After : Apr 14 03:35:30 2025 GMT
        Subject: CN=8CCF85DB47BE2D77AE74514B07327F276BD4907D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:a1:9d:57:80:9f:9d:f6:b1:20:b4:e6:32:
                    17:98:3f:b0:48:5a:64:2c:16:f7:69:b5:8d:e2:bb:
                    e9:00:5c:ab:0a:a5:dd:a2:b9:05:44:e8:09:15:aa:
                    9a:32:89:6a:44:c8:0d:00:c7:cc:b9:31:17:b9:fe:
                    ab:20:21:b7:42:d7:0f:a6:eb:c4:5b:a6:f4:42:74:
                    af:79:d8:d7:1a:91:cc:d2:d1:4a:9b:5f:7a:05:bf:
                    7c:fa:db:77:96:43:98:c4:52:48:2e:e5:ce:79:31:
                    ba:36:80:18:8d:a0:99:0d:3c:ee:65:4b:b9:1d:f9:
                    7f:36:50:f2:e6:69:30:d9:80:55:6e:d0:4d:83:b3:
                    52:12:d6:92:41:19:9c:0c:3f:bf:97:7d:fb:95:04:
                    0b:8b:be:85:d8:c2:2d:fd:b1:fa:d8:b1:65:08:6e:
                    7b:a4:1c:18:7d:c4:1d:72:99:fa:37:eb:f7:2e:d5:
                    82:77:28:fa:0d:e4:43:53:59:13:d7:db:df:36:b0:
                    58:b9:eb:a6:ed:08:52:2e:a8:5e:3a:4c:00:b4:56:
                    0e:66:a5:f5:11:b7:2e:73:77:35:9f:c9:c5:1a:2e:
                    65:d5:aa:19:6a:8d:97:50:fa:e3:9e:38:ab:07:b9:
                    51:4e:cb:83:40:20:fe:05:c6:a6:ac:80:7f:4b:9b:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:85:DB:47:BE:2D:77:AE:74:51:4B:07:32:7F:27:6B:D4:90:7D
            X509v3 Authority Key Identifier:
                keyid:62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e8:f1:9a:aa:55:48:7d:f4:de:19:c6:88:d4:a5:85:47:c3:
         28:e2:64:83:95:5e:19:c5:e3:a9:31:e8:a2:24:b2:48:fd:60:
         6a:86:92:9b:33:d3:15:8e:6f:75:75:95:95:50:8b:36:00:03:
         e2:17:37:aa:dd:5b:87:d6:c4:10:5c:2a:91:c6:ea:91:49:f8:
         38:ef:d1:95:f5:6a:fa:f1:6b:f6:a4:df:27:64:46:1d:94:48:
         dd:00:de:d8:33:fc:17:fe:24:63:93:6f:38:46:d2:84:75:b3:
         bb:f7:96:cb:87:f4:4b:80:53:88:f3:a3:ec:23:48:2c:c6:12:
         be:5b:4d:3c:57:38:e1:96:10:ce:9c:cf:73:e1:7e:49:35:92:
         96:0f:6b:25:28:2c:c8:66:41:fd:77:b1:e2:3c:fa:3e:f5:42:
         20:72:20:b5:e0:e3:2d:ca:41:76:0b:96:35:c8:c7:cb:b7:02:
         87:11:36:df:d1:37:3a:b9:e7:6b:08:8e:33:c9:11:a1:b5:0e:
         0a:3b:ff:43:a0:d3:4f:6d:3f:9f:4f:e7:fb:a8:1c:45:0b:34:
         c4:87:0d:1b:ef:d7:6c:f0:01:47:43:eb:21:17:1b:59:78:da:
         8b:b8:44:b7:b4:b3:9a:5c:78:dc:02:50:b1:f9:67:d8:f2:a2:
         32:b3:dd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----