Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.mft
File:                     4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.mft (raw, json)
Hash identifier:          AHf8XMG9i5JicDAc0LHe+vkt2ZlMOzfx7G/lufaGp+s=
Subject key identifier:   98:30:66:90:1B:8F:0E:F7:99:BF:10:4D:2E:E3:66:A8:AB:D4:12:5E
Authority key identifier: 4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
Certificate issuer:       /CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Certificate serial:       5C76E94FE01F68A533DB2C4FC49A4030F0DC6297
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.mft
Manifest number:          4D
Signing time:             Fri 31 Jan 2025 14:52:31 +0000
Manifest this update:     Fri 31 Jan 2025 14:47:31 +0000
Manifest next update:     Sat 01 Feb 2025 17:53:31 +0000
Files and hashes:         1: 326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa (hash: Uf7sibhXbuGSKkyjvqGUtuCPbvF86SYm/FoSXvpK1hY=)
                          2: 326130613a363034343a633131303a3a2f34382d3438203d3e20323134323233.roa (hash: xD5NJiXnL5lwJzvoK9ot41eteZ5CQ+UpAdesDXuBcxg=)
                          3: 4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.crl (hash: IaIFFxxNaXc0SAdVYfg9I3S5y9jH7TUgV6gyvUv7ZAk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:76:e9:4f:e0:1f:68:a5:33:db:2c:4f:c4:9a:40:30:f0:dc:62:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
        Validity
            Not Before: Jan 31 14:47:31 2025 GMT
            Not After : Feb  1 17:53:31 2025 GMT
        Subject: CN=983066901B8F0EF799BF104D2EE366A8ABD4125E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:30:88:0f:ad:30:20:32:52:85:4c:13:b4:29:
                    a3:b2:ab:d1:3b:c2:bb:56:c4:b2:56:22:9a:59:7e:
                    8f:f3:b8:39:07:d4:16:b5:64:8b:e3:7b:ad:94:75:
                    a5:cb:c5:92:99:c2:20:2f:45:73:1a:aa:64:fd:fc:
                    5a:c2:7c:0d:e9:c7:cb:af:d3:61:aa:91:4f:4c:0b:
                    42:8c:6f:7c:d9:f7:de:73:83:83:47:a0:cb:28:b4:
                    51:f8:9d:20:fc:4e:b4:f1:e2:97:1d:3a:2f:d2:9c:
                    f3:1f:f7:a8:a2:08:a8:9a:fa:36:c0:36:e8:ae:f3:
                    17:44:cc:5e:a1:c8:82:c6:7b:2c:11:ad:87:44:91:
                    69:96:ee:33:a6:4b:25:83:7d:ee:c1:3a:3b:02:d3:
                    c9:e1:a7:ab:f3:3c:bd:a9:7d:af:5e:44:ff:79:17:
                    10:7a:72:47:bb:a9:9c:23:80:7f:9f:de:94:29:3d:
                    cb:21:b4:ab:ca:61:8b:76:04:84:19:89:f3:e9:a9:
                    78:76:74:25:cf:e8:a8:63:ee:b7:52:ec:e5:f2:9b:
                    30:32:c1:3f:71:bf:07:9f:c6:cc:81:c7:9a:da:39:
                    91:43:01:bd:d1:65:44:39:c6:d9:db:45:12:8b:6f:
                    5b:5e:ca:5f:bd:f7:3c:7f:12:26:13:ea:6a:e7:c7:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:30:66:90:1B:8F:0E:F7:99:BF:10:4D:2E:E3:66:A8:AB:D4:12:5E
            X509v3 Authority Key Identifier:
                keyid:4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:16:f0:30:82:82:b6:75:0b:a2:75:95:51:25:21:24:9b:ad:
         21:49:04:ed:c9:70:ae:05:51:81:5d:ef:09:d1:3a:17:bb:ed:
         40:74:95:77:8a:a2:8b:35:9d:6e:e5:5d:fe:09:63:d8:69:58:
         b9:d5:10:b0:bd:96:a4:97:49:c6:b9:34:6a:2e:c3:f4:d1:e3:
         17:2e:ea:ae:c1:00:79:69:b7:7e:4e:d9:4f:37:79:7a:63:2b:
         4f:8b:92:6c:0e:31:f8:59:a5:9c:f7:64:85:27:50:49:ed:d6:
         03:07:d4:85:d0:cb:b7:24:01:71:7c:ff:f2:60:9f:d7:65:a8:
         ab:19:5f:a8:1c:d8:c4:6f:29:1f:06:38:06:2a:e1:1a:10:ba:
         cb:53:fa:2b:92:27:1e:55:b9:08:74:d3:0a:ee:a6:c7:47:dd:
         d8:90:91:21:f3:cb:25:e3:51:6d:42:68:cc:b9:10:61:14:fb:
         81:66:80:e2:40:28:87:90:9b:c1:d6:d6:b9:6e:74:37:b8:50:
         1b:2e:4a:c5:1b:c4:f9:0c:7f:d8:74:7e:74:f2:00:f8:59:b5:
         b8:24:59:1e:b2:e0:39:44:ec:a9:84:ea:19:3f:ea:cc:4b:36:
         5f:40:cf:3a:4f:b5:2d:8c:da:8e:f0:43:89:b7:d8:88:dc:29:
         4f:88:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----