Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
File:                     EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json)
Hash identifier:          yGqY9Vq2+WIQ9hAGzxfXMm67AGkWwo/QRcEyEEGiONo=
Subject key identifier:   7E:AD:D1:BD:F0:0C:D3:4A:CD:1A:EA:D7:46:AE:31:0C:DA:B2:1C:D5
Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Certificate issuer:       /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Certificate serial:       22B9C43E06887DD8B61BF357E9687BAE78BC3371
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
Manifest number:          023C
Signing time:             Fri 31 Jan 2025 04:49:32 +0000
Manifest this update:     Fri 31 Jan 2025 04:44:32 +0000
Manifest next update:     Sat 01 Feb 2025 05:30:32 +0000
Files and hashes:         1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: OEzoGfRwoMZmMBkrsbgElz6RNw2sbp8LCbUvsxl6sXM=)
                          2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:c4:3e:06:88:7d:d8:b6:1b:f3:57:e9:68:7b:ae:78:bc:33:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
        Validity
            Not Before: Jan 31 04:44:32 2025 GMT
            Not After : Feb  1 05:30:32 2025 GMT
        Subject: CN=7EADD1BDF00CD34ACD1AEAD746AE310CDAB21CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:b5:f8:c4:cf:00:2e:c5:e1:10:6b:a4:b3:
                    71:db:8e:e2:db:39:a6:d6:a9:9f:18:0d:d0:ae:34:
                    16:0c:fb:d0:bd:b6:1f:61:0c:3d:52:6c:f2:ed:5c:
                    b8:ac:66:e9:f7:03:d7:5a:07:e0:18:c2:17:35:6f:
                    d9:bb:60:90:8e:49:ef:ce:bc:c1:da:86:37:ad:c4:
                    68:8e:40:ce:61:a9:a8:73:9c:ed:8c:48:55:c7:2d:
                    ea:0c:81:45:e3:cd:28:76:06:5b:c7:98:48:37:4e:
                    2a:87:91:c2:58:a5:e1:80:2a:35:fc:fa:ca:cf:b0:
                    a9:a2:01:fc:d4:16:14:14:11:e1:ad:dd:ad:85:1c:
                    dd:b9:1c:80:09:3a:b4:19:ae:7a:77:34:49:a1:ea:
                    74:fa:4f:a9:2d:38:2a:5f:04:e4:6e:a3:9c:29:74:
                    8d:60:be:f6:cc:74:ba:82:c1:4d:81:c5:d7:31:40:
                    8f:7e:ca:b8:ea:c3:56:a9:40:f1:78:52:2e:d5:11:
                    ea:20:96:e7:1d:d2:3e:27:80:ee:28:ff:89:a3:b7:
                    64:67:56:ca:07:76:9d:18:12:02:e2:69:4e:63:46:
                    06:7c:26:0d:a7:8a:2c:65:d7:5a:1e:3a:78:f3:4a:
                    02:fb:31:57:3d:9b:b7:f0:5b:bf:0b:37:97:4a:02:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:D1:BD:F0:0C:D3:4A:CD:1A:EA:D7:46:AE:31:0C:DA:B2:1C:D5
            X509v3 Authority Key Identifier:
                keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:88:97:95:05:78:3d:d6:63:31:90:e7:1d:84:0d:1f:c3:56:
         b4:44:97:e0:9f:18:c5:01:50:93:46:75:7a:04:38:bc:3d:79:
         fa:9f:32:8a:1f:b1:88:70:78:24:e9:70:ab:27:39:26:6d:97:
         48:43:1b:19:ae:31:e2:9a:1a:83:52:e1:43:57:1b:1e:69:83:
         de:d2:87:02:a6:76:0d:31:0c:2c:07:58:1f:43:66:95:f3:d2:
         31:63:40:c6:ae:13:db:5f:e5:49:64:a6:9b:a0:4a:b2:4e:4f:
         43:30:53:bd:2c:1b:7a:aa:fa:bd:87:fa:91:6a:9c:e9:20:7f:
         c6:b8:bc:c9:d8:b7:8c:29:a5:5b:2e:5b:30:5f:20:4c:86:bf:
         99:76:db:b3:24:01:fd:b5:ac:56:87:53:b6:7c:a1:9a:92:e8:
         c8:7c:03:85:d7:fe:3d:c8:af:61:98:cb:58:07:a7:fc:8d:90:
         38:96:d3:c4:4f:8d:0b:59:8d:c8:ee:31:eb:0c:4b:9b:de:38:
         11:27:06:10:50:3e:c1:7b:d0:f1:41:c7:32:7b:a3:2a:9a:36:
         1b:07:e2:12:4c:ac:c1:75:8a:e1:b9:9c:f6:16:36:4a:7a:83:
         80:88:fe:4c:2d:6e:b3:01:f4:71:03:7c:1c:7e:8a:93:a2:17:
         dd:8f:09:c7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUIrnEPgaIfdi2G/NX6Wh7rni8M3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC
OUVFREU1MjAeFw0yNTAxMzEwNDQ0MzJaFw0yNTAyMDEwNTMwMzJaMDMxMTAvBgNV
BAMTKDdFQUREMUJERjAwQ0QzNEFDRDFBRUFENzQ2QUUzMTBDREFCMjFDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqLX4xM8ALsXhEGuks3HbjuLb
OabWqZ8YDdCuNBYM+9C9th9hDD1SbPLtXLisZun3A9daB+AYwhc1b9m7YJCOSe/O
vMHahjetxGiOQM5hqahznO2MSFXHLeoMgUXjzSh2BlvHmEg3TiqHkcJYpeGAKjX8
+srPsKmiAfzUFhQUEeGt3a2FHN25HIAJOrQZrnp3NEmh6nT6T6ktOCpfBORuo5wp
dI1gvvbMdLqCwU2BxdcxQI9+yrjqw1apQPF4Ui7VEeoglucd0j4ngO4o/4mjt2Rn
VsoHdp0YEgLiaU5jRgZ8Jg2niixl11oeOnjzSgL7MVc9m7fwW78LN5dKAvhpAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUfq3RvfAM00rNGurXRq4xDNqyHNUwHwYDVR0j
BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy
NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB
MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDEiJeV
BXg91mMxkOcdhA0fw1a0RJfgnxjFAVCTRnV6BDi8PXn6nzKKH7GIcHgk6XCrJzkm
bZdIQxsZrjHimhqDUuFDVxseaYPe0ocCpnYNMQwsB1gfQ2aV89IxY0DGrhPbX+VJ
ZKaboEqyTk9DMFO9LBt6qvq9h/qRapzpIH/GuLzJ2LeMKaVbLlswXyBMhr+Zdtuz
JAH9taxWh1O2fKGakujIfAOF1/49yK9hmMtYB6f8jZA4ltPET40LWY3I7jHrDEub
3jgRJwYQUD7Be9DxQccye6MqmjYbB+ISTKzBdYrhuZz2FjZKeoOAiP5MLW6zAfRx
A3wcfoqTohfdjwnH
-----END CERTIFICATE-----