Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File:                     0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier:          0i6Pd6zfdzxDOMB82AX7eVbsTl9MA/GmF4zaU7Lswkw=
Subject key identifier:   6D:9C:1D:08:C8:C3:57:50:9C:58:80:AB:65:25:6B:D0:E4:02:0B:A5
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer:       /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial:       73D06F401756945E0CC268C83C7306CD722D8FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number:          01AC
Signing time:             Fri 28 Mar 2025 19:49:01 +0000
Manifest this update:     Fri 28 Mar 2025 19:44:01 +0000
Manifest next update:     Sat 29 Mar 2025 20:29:01 +0000
Files and hashes:         1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: gm1tGodbP3GURC19eUdVY83lJ2vyPfRWdgqyYWUapNY=)
                          2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:6f:40:17:56:94:5e:0c:c2:68:c8:3c:73:06:cd:72:2d:8f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
        Validity
            Not Before: Mar 28 19:44:01 2025 GMT
            Not After : Mar 29 20:29:01 2025 GMT
        Subject: CN=6D9C1D08C8C357509C5880AB65256BD0E4020BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:2f:06:71:90:e4:94:f7:05:b3:8d:b1:c2:
                    79:97:cc:78:3b:56:ad:33:1f:00:cd:15:5e:ef:11:
                    f3:68:bf:1d:c4:f8:83:17:20:7f:d2:53:f0:6b:90:
                    f6:d9:58:76:8a:7e:35:51:61:1e:d4:f9:64:5c:a6:
                    49:b2:3b:c9:23:91:c8:67:01:4f:f1:0d:cf:e2:2b:
                    0e:80:80:bd:3f:66:70:a3:78:da:dd:58:07:65:a1:
                    75:bb:b4:5d:89:4c:10:71:2d:a6:e5:e9:c1:5a:6a:
                    dc:82:24:23:f7:21:b3:2d:69:c1:8a:25:43:b5:f3:
                    ca:19:f5:91:fc:bf:87:77:f0:52:6e:6e:90:19:1e:
                    28:d6:6e:39:c5:fe:be:55:c3:ab:98:7d:11:5d:a1:
                    39:0a:4c:fc:02:0b:01:70:36:c4:47:eb:60:78:a6:
                    b8:da:37:d7:c1:5e:91:dd:05:52:28:62:3c:52:e7:
                    f3:e8:e3:3f:16:a7:2c:4b:0a:09:7c:f6:8c:e9:09:
                    a9:3a:03:e5:0b:ed:7b:30:35:fd:20:5c:90:bc:48:
                    f6:05:eb:3b:21:d5:e1:94:c7:e3:ad:06:c7:6a:6a:
                    c9:b2:4c:49:3b:f2:06:5f:64:9f:95:a5:43:9a:a0:
                    dd:b2:c5:8d:1e:ce:6c:66:b4:45:96:ee:2b:cc:95:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9C:1D:08:C8:C3:57:50:9C:58:80:AB:65:25:6B:D0:E4:02:0B:A5
            X509v3 Authority Key Identifier:
                keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:95:a9:a5:8e:09:56:a7:47:64:62:6a:ff:dc:87:e0:41:ad:
         5d:ba:dd:38:76:b0:58:92:da:a2:86:15:f8:0b:ce:8b:37:bb:
         aa:11:e4:6c:1e:49:5d:20:ed:23:e3:29:e7:95:15:60:2a:ff:
         44:40:f2:2e:ae:95:9b:4e:d7:d1:9e:4c:ad:a2:4b:52:0c:94:
         9b:ec:26:f1:50:fa:5c:91:13:17:6a:66:61:87:9b:0c:cb:88:
         9b:72:8f:68:64:95:35:57:39:50:30:a9:d8:2e:d6:f9:dc:a8:
         af:1b:39:94:96:c5:cc:64:cd:7a:97:ae:aa:b0:a9:af:f8:5f:
         ec:72:d0:93:43:cf:0a:bd:5b:10:4f:9d:2e:df:7a:72:b1:78:
         cd:af:e3:63:63:eb:f1:04:e5:8b:aa:9e:97:7f:d0:f8:20:75:
         5b:f1:48:85:ff:64:3e:86:f7:fb:54:ed:18:b1:22:aa:9c:37:
         a5:2d:8b:f8:d3:8c:99:4a:39:17:42:a9:24:b0:49:8e:1c:02:
         48:7a:fd:4a:97:dd:5d:07:5c:75:51:8e:e0:d1:9d:a1:fd:e3:
         1a:8a:11:68:8e:b8:19:78:d6:15:2a:2c:bd:74:29:20:3b:a5:
         b1:11:34:3e:1e:19:4c:88:de:ca:5f:de:d6:d8:19:ae:78:e6:
         c4:ce:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----