Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File:                     13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier:          UjI6oS0qSmqcolL6Ifd49NGPpMNpD+YfzMmgVivqNAc=
Subject key identifier:   4C:35:A6:AF:FE:44:9E:3E:F3:E2:A1:3C:D6:3E:5E:AB:DF:C5:92:13
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer:       /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial:       6933C1624F93ED828742C29D21952F0400163B46
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number:          22
Signing time:             Fri 28 Mar 2025 22:48:51 +0000
Manifest this update:     Fri 28 Mar 2025 22:43:51 +0000
Manifest next update:     Sun 30 Mar 2025 00:45:51 +0000
Files and hashes:         1: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=)
                          2: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=)
                          3: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: nlUc2oOok81um7bFbsEsDMLy7mb+q1+EiVYCroLIM4c=)
                          4: 326131343a373538303a6430303a3a2f34302d3430203d3e20313939333130.roa (hash: o5EJWyX5wiy66BCn4Phzo2mfDCvoGVTO+ICQo5ndufg=)
                          5: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:33:c1:62:4f:93:ed:82:87:42:c2:9d:21:95:2f:04:00:16:3b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
        Validity
            Not Before: Mar 28 22:43:51 2025 GMT
            Not After : Mar 30 00:45:51 2025 GMT
        Subject: CN=4C35A6AFFE449E3EF3E2A13CD63E5EABDFC59213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:f7:4e:95:40:e5:ae:1f:e1:89:0a:2e:14:
                    37:e6:7d:88:3f:cd:92:97:bb:85:c7:c5:a4:6d:01:
                    75:e3:52:c0:5a:54:28:8d:2f:c3:56:a7:4d:88:17:
                    a4:66:6c:6c:d1:fe:25:07:3d:39:7d:96:c5:f9:69:
                    a4:bf:dd:38:74:ce:9f:b4:15:65:57:a5:d3:4f:44:
                    4c:81:70:30:09:6d:06:95:2a:0a:85:9e:fb:37:b5:
                    dc:7a:74:e9:e4:af:09:3e:d3:05:c5:1b:ab:8f:04:
                    00:e2:9f:6d:11:6d:2b:55:c0:d3:3d:5e:9b:e1:da:
                    5a:15:8d:1c:b0:6e:0d:4c:40:5f:77:b5:a5:16:61:
                    0f:c8:d6:4a:eb:e6:2f:e9:1a:ff:dd:7a:f5:df:5f:
                    fa:94:26:12:5e:32:f6:2d:47:30:1e:9e:d6:0b:3c:
                    a5:2b:63:0e:9c:d9:bf:71:93:4f:8b:68:f6:79:5c:
                    7b:99:7c:3e:ac:17:17:54:da:a6:dc:c9:1d:de:ce:
                    e6:2e:60:0b:07:65:28:52:da:4f:fd:1f:f2:89:ff:
                    ad:d4:62:ed:13:c9:43:1c:84:7c:ce:4b:68:02:e1:
                    b3:2a:e3:b7:5c:27:45:5e:87:e9:a4:25:87:12:61:
                    3d:87:20:4f:8a:a6:00:91:b9:67:51:43:8b:1a:1b:
                    3d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:35:A6:AF:FE:44:9E:3E:F3:E2:A1:3C:D6:3E:5E:AB:DF:C5:92:13
            X509v3 Authority Key Identifier:
                keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3e:b8:10:5f:5f:90:f0:3f:7d:e4:e3:4e:1f:69:6c:a6:4b:
         a9:ca:a8:41:d2:7b:fd:15:ea:dc:a9:b4:81:54:1b:70:7e:b7:
         c2:a1:63:d1:0d:e6:6d:3f:21:09:d7:32:da:23:5a:a1:24:bf:
         1a:6e:d4:c8:f5:e7:16:57:c1:03:1f:de:74:a9:c2:e3:57:38:
         09:ac:60:98:69:8d:35:b6:9a:29:73:f1:6d:19:ea:d7:3e:7a:
         ef:36:f4:6e:c1:fa:c7:b3:d8:5e:11:f7:bf:52:78:9b:5e:14:
         89:50:4c:d1:c9:14:ce:25:29:71:e5:78:c6:13:01:c5:ad:1d:
         d4:0e:65:93:ce:33:22:45:78:c1:06:12:62:29:90:d9:c6:af:
         f2:4a:2c:85:88:e6:35:4b:3b:40:1d:32:b7:27:f5:21:ce:60:
         06:6a:fd:44:22:2d:2d:26:1f:39:c1:63:cf:63:2b:d1:be:7b:
         e7:3b:58:27:8a:39:f1:bf:83:a9:b3:fc:07:b8:a9:68:aa:b5:
         1b:a8:c7:1a:2c:7a:21:59:08:41:2f:7d:23:bc:cc:7a:f2:6e:
         01:96:05:84:6e:c7:c0:3c:c6:8b:a9:7c:7a:04:14:a3:dc:b5:
         61:2c:b8:ff:45:7b:16:5b:6a:ec:ed:63:5d:77:aa:93:e6:e0:
         49:61:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----