Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
File:                     75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft (raw, json)
Hash identifier:          WDe1EN8KXIGpQ4WNf8hKJSMSs+aFggYa45fRHZb4fp8=
Subject key identifier:   56:2A:C0:2A:85:54:8D:79:AA:72:A0:A5:6B:A1:89:BD:D7:AE:01:F3
Authority key identifier: 75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70
Certificate issuer:       /CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
Certificate serial:       0D2DDB790B44B2EE58592DB88C84D0FFBBBE7A8C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
Manifest number:          D2
Signing time:             Fri 31 Jan 2025 01:45:27 +0000
Manifest this update:     Fri 31 Jan 2025 01:40:27 +0000
Manifest next update:     Sat 01 Feb 2025 04:42:27 +0000
Files and hashes:         1: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: ZKnqXWpL638YuDEQpZ7F3g5bqELtKVJQB4+caqr2NiE=)
                          2: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: DeNLRbWhS9WKIEvlMBYaR+2p0F2qMHWNHV7i4if0F4Q=)
                          3: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl (hash: B8Zc1yRMVYye7C5KCDTnegM+GJBk8KD4oZT0NKoWA58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2d:db:79:0b:44:b2:ee:58:59:2d:b8:8c:84:d0:ff:bb:be:7a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
        Validity
            Not Before: Jan 31 01:40:27 2025 GMT
            Not After : Feb  1 04:42:27 2025 GMT
        Subject: CN=562AC02A85548D79AA72A0A56BA189BDD7AE01F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:ac:f2:b6:8e:48:99:e1:8e:8e:76:73:48:
                    31:73:80:d6:06:47:83:7b:1d:7b:60:71:be:c8:a8:
                    05:fb:d7:49:77:ca:18:c4:9e:9a:94:9e:ff:bf:bb:
                    73:e4:2b:d4:44:9c:1b:da:20:45:a0:f3:7d:37:0e:
                    c6:69:6b:59:56:0e:05:c7:0f:04:e4:a6:21:4b:d4:
                    94:66:ee:c7:12:4b:f3:64:e3:44:db:32:5a:82:15:
                    5c:ac:8d:93:99:c6:cc:b2:00:1f:c9:f6:98:5a:d1:
                    c5:77:b9:5a:71:19:07:95:34:66:ae:1a:88:a4:0d:
                    02:c8:d0:db:97:8b:e9:c5:ab:a0:3c:34:80:e7:3d:
                    0d:3a:46:58:ef:ef:61:f3:38:26:3c:50:1c:b0:96:
                    9b:e0:4c:c5:fd:71:79:d8:9e:aa:0e:f6:f5:1a:e0:
                    bb:2f:88:61:3e:c6:a9:f4:0e:c1:e8:14:14:22:2d:
                    da:45:9b:9c:20:7b:30:31:3a:e5:db:37:53:4f:f1:
                    32:66:e4:7a:d8:1b:49:5e:43:11:d3:bf:04:fc:70:
                    12:ad:99:5f:7c:77:8f:a1:5f:43:97:32:20:61:7d:
                    52:7f:cc:25:a6:37:b4:5f:5f:2a:b0:ea:95:f6:dd:
                    61:1e:e8:1b:b0:37:fe:9c:52:f6:44:ff:16:24:3a:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2A:C0:2A:85:54:8D:79:AA:72:A0:A5:6B:A1:89:BD:D7:AE:01:F3
            X509v3 Authority Key Identifier:
                keyid:75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:61:c2:40:b1:20:a8:78:9b:41:76:e1:45:9e:52:c2:6f:
         19:1d:26:cb:38:e4:ff:b3:9b:4a:11:22:22:a0:c3:f1:80:c8:
         e8:bf:b8:e9:cb:d4:90:11:83:cc:63:e0:8b:2f:9b:03:df:75:
         1d:21:da:e9:ad:e2:84:55:65:e8:10:65:cb:34:7e:1d:c7:2b:
         84:d0:0e:61:cf:6d:16:fb:eb:0a:5e:6e:44:08:b3:f9:f1:3e:
         f5:2c:13:21:61:64:25:28:2c:18:8b:89:a8:d9:42:f9:83:de:
         48:68:d5:27:29:ce:04:6f:dd:cc:a1:e5:6f:10:06:97:31:5d:
         41:76:0e:cf:70:43:04:a8:f3:59:66:f3:14:0c:0a:f3:2f:cd:
         be:c9:d0:bb:55:1a:a4:a8:ef:e9:97:86:8d:01:a9:59:cd:44:
         73:7a:a6:7c:de:25:b9:9c:5c:a5:30:12:91:0a:8a:c3:51:63:
         db:ae:fc:bc:ad:7f:cb:27:e3:33:97:1a:56:72:24:64:87:66:
         6f:78:e8:48:13:16:29:0a:25:0f:d0:45:d6:35:d3:93:18:2c:
         49:fa:0b:aa:b8:83:74:90:bc:f1:a1:17:3a:21:14:a3:12:23:
         a3:8a:bd:9f:6c:98:14:70:4c:95:32:1a:38:46:03:13:7c:1d:
         8b:c9:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----