Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft
File:                     D9227930A3E025CD3EE91059F57EFC7573645142.mft (raw, json)
Hash identifier:          DPFs3BkM9/1R0Pa6zWzFjEU2/n1x/rTXmm1zYfp1aRk=
Subject key identifier:   03:B6:D0:58:79:6B:27:18:DB:34:63:3B:A7:84:E9:4C:DA:40:B0:6E
Authority key identifier: D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42
Certificate issuer:       /CN=D9227930A3E025CD3EE91059F57EFC7573645142
Certificate serial:       239A086790CE52A50AC30A6F9A1BE8D9B4C49115
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft
Manifest number:          2D
Signing time:             Fri 31 Jan 2025 02:51:59 +0000
Manifest this update:     Fri 31 Jan 2025 02:46:59 +0000
Manifest next update:     Sat 01 Feb 2025 03:17:59 +0000
Files and hashes:         1: D9227930A3E025CD3EE91059F57EFC7573645142.crl (hash: tmuPuIq3QPr4ZFmkzubS5sZC9kMvjsbtQLfOlgMo8Lw=)
                          2: 326130623a396534343a3a2f34342d3434203d3e20323134343531.roa (hash: gA7AKko1OAfo6xCnsM9aOOaXUGb50l0SxaUxR4/Y/Kk=)
                          3: 326130623a396534303a3a2f34382d3438203d3e20323134343531.roa (hash: fbWYhfhqjbEWnM2+gYr8ssviqiMh6Pzbyx5cODHJjkI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9a:08:67:90:ce:52:a5:0a:c3:0a:6f:9a:1b:e8:d9:b4:c4:91:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9227930A3E025CD3EE91059F57EFC7573645142
        Validity
            Not Before: Jan 31 02:46:59 2025 GMT
            Not After : Feb  1 03:17:59 2025 GMT
        Subject: CN=03B6D058796B2718DB34633BA784E94CDA40B06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:2b:13:f8:7d:f1:53:4f:4a:df:d6:58:48:
                    f4:24:c3:6a:14:b1:33:8e:45:17:6a:dd:15:64:6e:
                    89:49:66:a7:5a:95:98:b8:ae:ac:59:21:f2:d9:91:
                    96:29:b6:70:a7:ce:74:4a:f2:a9:a2:2c:24:52:6f:
                    c5:eb:b1:5d:7c:5b:a7:fa:08:b9:9d:9f:57:2f:04:
                    22:fb:bc:b6:05:58:ed:84:1b:15:52:67:c4:77:74:
                    dc:16:2b:00:7e:f3:ec:10:4e:84:9b:86:cc:4c:4f:
                    f6:fd:3e:d2:a1:d8:ae:18:02:17:d7:25:81:04:a7:
                    21:bb:a5:70:f7:cb:c1:32:75:98:97:71:0b:d2:53:
                    75:9d:20:db:8d:63:ef:dc:fa:a2:c1:26:94:5b:f7:
                    50:53:7d:92:86:31:1f:e2:fb:31:10:06:36:c0:d4:
                    5b:11:01:0f:13:a7:05:26:2c:b9:a9:55:c1:dc:67:
                    c5:3a:a4:a6:e5:55:10:2c:34:6b:fc:c5:bb:5d:70:
                    23:c0:51:0b:4a:c6:11:07:72:eb:6e:31:26:87:a2:
                    43:ee:f9:8e:9e:90:8c:7f:20:db:2c:2f:7d:ea:ca:
                    de:79:de:fb:5c:7b:f9:9b:bd:1d:7d:85:b5:ae:b0:
                    5b:0a:52:cb:17:f4:5b:de:7b:1c:3e:b6:50:55:e9:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B6:D0:58:79:6B:27:18:DB:34:63:3B:A7:84:E9:4C:DA:40:B0:6E
            X509v3 Authority Key Identifier:
                keyid:D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:b7:60:7a:80:a1:21:19:af:58:30:6e:13:63:41:55:8f:
         9d:1c:2b:47:fc:2e:14:7e:d4:f2:9a:6e:0e:89:b3:26:49:63:
         5d:77:c8:30:0c:09:ab:d4:5e:7d:8b:8a:37:77:52:13:6e:ef:
         81:9d:81:cc:3b:3c:07:64:37:7d:bf:4c:a8:aa:dd:54:ba:2a:
         fd:4d:bf:ab:3d:6f:fd:70:21:bf:9a:00:fd:75:01:41:24:04:
         25:45:a7:b3:89:e1:e5:82:b6:68:8a:12:c1:fb:e1:ff:5f:1e:
         b3:58:16:15:e1:12:50:8a:1d:67:7b:cf:12:9e:7a:f1:49:fe:
         55:86:41:7c:ac:d7:48:95:b8:ce:cf:20:d7:2a:08:f2:d6:42:
         3f:0e:1d:d4:af:4a:45:cf:ac:6e:b8:f6:a0:f7:f6:ce:90:01:
         d6:16:f5:5c:63:25:9d:d1:36:9c:e1:fc:3a:b0:2d:62:ce:4a:
         2c:c6:10:39:20:25:3f:02:7c:5e:6e:76:f7:cf:18:5a:3e:94:
         c5:b1:f7:85:b2:5f:ce:70:d3:29:8d:3a:03:c4:92:ce:fb:dc:
         ed:82:11:58:66:8b:6d:f3:70:ff:39:d6:f4:b9:05:39:b3:df:
         98:26:3f:00:04:fc:56:e4:67:1c:f8:c7:d2:40:aa:ac:47:b5:
         dd:9b:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----