Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
File:                     41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json)
Hash identifier:          va3JkgW1m6gWlDc3Xcurl1MbG6cfT2ZjXH25lrU0nEY=
Subject key identifier:   C3:61:AE:49:D8:54:F5:88:CB:33:15:65:1E:96:28:4F:27:F5:8F:7A
Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B
Certificate issuer:       /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B
Certificate serial:       76A4D2F1340E76F067A49B27F677B46FBDAB3472
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
Manifest number:          87
Signing time:             Fri 31 Jan 2025 10:32:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:27:09 +0000
Manifest next update:     Sat 01 Feb 2025 12:41:09 +0000
Files and hashes:         1: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: uFTNiChQ5xA2vVn/XxukU9OzJsY2WNiz4uRnMn3ol90=)
                          2: 326131343a373538353a3a2f34382d3438203d3e20323134343531.roa (hash: 1/nE4baiMVs2LRMXh5sGVXRwRPcJEy8duBZuI+RSScs=)
                          3: 326131343a373538303a623030303a3a2f34382d3438203d3e20323134343531.roa (hash: SuZwoUCzEEGoRhFnO51tkIZKxv3we3OJQ/xM024HKiQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a4:d2:f1:34:0e:76:f0:67:a4:9b:27:f6:77:b4:6f:bd:ab:34:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B
        Validity
            Not Before: Jan 31 10:27:09 2025 GMT
            Not After : Feb  1 12:41:09 2025 GMT
        Subject: CN=C361AE49D854F588CB3315651E96284F27F58F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:67:94:15:ba:e4:83:44:60:8d:17:f3:c5:
                    d7:53:02:17:6a:e4:42:52:75:5d:71:f1:3e:18:dc:
                    20:21:13:b2:d9:06:3d:fb:fa:91:31:ac:c5:71:31:
                    59:ad:21:9f:69:6c:9b:4d:2c:90:a2:92:73:63:71:
                    30:3b:f5:3a:e1:5b:41:f5:e8:35:c6:69:ad:ed:59:
                    ff:f6:9a:b6:b6:3c:8f:c2:94:93:3c:c0:e8:2d:07:
                    e0:b3:a6:53:5d:32:41:e7:02:d7:be:2a:73:e8:cd:
                    62:e0:fa:f2:d6:42:6d:b4:7f:91:a7:46:2f:7f:a9:
                    a5:b9:f8:68:b8:79:2e:38:55:a9:a0:45:10:41:01:
                    46:ac:42:c8:07:d9:86:8a:b3:a5:d5:ac:60:08:68:
                    e8:05:ca:1f:e9:36:e5:59:5d:7f:58:b9:2f:07:41:
                    0a:3c:4a:61:83:62:37:d9:89:41:49:76:ca:fa:9b:
                    21:9d:50:9d:88:1c:87:41:0a:b2:3f:b1:4f:2e:ed:
                    46:0c:e6:6d:ac:2c:59:7c:98:33:0c:a2:dd:c0:74:
                    a9:88:ea:35:a2:48:9a:67:34:87:04:9b:c4:e0:f6:
                    3c:c2:58:ee:c7:c1:1b:45:7c:17:44:8e:a4:f6:15:
                    13:dc:d4:b8:55:dd:83:4e:e9:28:d6:7e:df:94:43:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:61:AE:49:D8:54:F5:88:CB:33:15:65:1E:96:28:4F:27:F5:8F:7A
            X509v3 Authority Key Identifier:
                keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2e:70:16:a8:8a:fb:81:c0:fb:26:24:b9:0b:88:34:76:eb:
         4a:d3:cd:d9:b8:ea:11:f5:b8:74:50:37:96:65:4f:b3:57:df:
         04:c9:c9:cf:7b:c8:b1:1e:54:96:6d:4b:97:80:a5:3f:82:48:
         bf:50:01:1e:f3:a3:bd:5d:c5:a7:4f:c2:f4:aa:d0:91:00:a8:
         e4:82:6e:b6:42:26:c0:6e:83:bc:e4:7a:ab:e1:e7:dc:ec:5d:
         bb:ad:87:d0:8c:40:7a:a1:c4:03:06:72:22:ee:73:69:c8:e4:
         57:91:ae:7d:3d:04:63:04:73:67:d9:00:0b:08:c3:ca:0a:04:
         b7:76:2c:58:47:2a:b9:5e:03:4a:8a:c7:55:21:55:0c:f2:dc:
         05:8a:f7:ed:c6:48:60:7f:59:7b:ae:12:89:8f:d1:a2:f7:1d:
         aa:c2:cc:0f:13:84:67:c9:18:d1:26:00:b1:c0:0c:6d:38:67:
         ad:0e:ac:cf:67:35:8f:33:0f:31:2e:e8:b2:4b:8d:72:8b:6d:
         a6:71:70:36:5c:b0:6c:7f:b6:76:40:30:f9:b6:56:f6:5b:36:
         19:55:91:1c:76:48:e6:e0:e9:9b:8b:78:08:79:8f:33:2f:70:
         0c:20:b9:b7:b8:cf:5a:67:6a:89:08:7d:27:31:51:39:1a:aa:
         b6:b2:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----