Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft
File:                     94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft (raw, json)
Hash identifier:          e/kBvZvY2vJY7MCsYR9TmrV6w8rqknEFXCOrnCR9bYI=
Subject key identifier:   73:81:76:BB:D8:73:EE:D3:3C:10:98:B4:A5:0A:9A:86:A3:9B:73:10
Authority key identifier: 94:89:8B:0A:CE:E9:CF:62:56:CF:0D:5C:BB:FB:73:C2:6F:D2:11:A4
Certificate issuer:       /CN=94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4
Certificate serial:       08445CFA9281373A8D8740636965FC23704F7BE7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft
Manifest number:          01A1
Signing time:             Fri 31 Jan 2025 06:14:27 +0000
Manifest this update:     Fri 31 Jan 2025 06:09:27 +0000
Manifest next update:     Sat 01 Feb 2025 08:06:27 +0000
Files and hashes:         1: 3132382e3235342e3230352e302f32342d3234203d3e203437323732.roa (hash: Ta6ZRrzsiBqSiC/F8bv/X4Kr7SwSmv9MXisgrAM2vZo=)
                          2: 94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.crl (hash: UfInSb6ZGRiC3VDpXZmpkRyOgImN5LJfjXPgxmnPPK0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:44:5c:fa:92:81:37:3a:8d:87:40:63:69:65:fc:23:70:4f:7b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4
        Validity
            Not Before: Jan 31 06:09:27 2025 GMT
            Not After : Feb  1 08:06:27 2025 GMT
        Subject: CN=738176BBD873EED33C1098B4A50A9A86A39B7310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:21:0c:41:f9:e0:f6:91:3f:10:98:d2:de:
                    1b:96:46:a8:8a:00:46:b6:34:5b:55:62:6f:fd:15:
                    c7:92:fe:83:d9:fa:19:43:b6:98:e2:6c:c2:b5:af:
                    be:05:95:1f:fd:80:e6:55:9b:c9:ac:5b:86:54:9a:
                    95:5d:e8:1f:05:b8:a9:8c:c9:96:f8:cf:44:fa:fb:
                    e1:23:04:bf:52:9a:6d:31:1d:76:8f:b0:4a:51:db:
                    14:13:5c:75:ba:f4:11:f1:26:7b:d1:34:84:a8:1a:
                    a5:3f:22:43:2f:08:06:d3:47:13:85:6b:0d:48:0a:
                    cb:00:5d:d6:c5:b8:79:37:5f:84:88:06:a4:f1:b9:
                    3d:78:fc:bb:fb:55:8c:4d:b6:08:e3:21:f0:42:6b:
                    bf:2d:71:8e:1e:5e:68:3f:66:2c:cb:87:ff:3e:04:
                    e3:fe:af:98:ac:fe:79:5b:83:e2:10:52:19:39:bc:
                    a2:01:ad:d0:47:93:07:0f:55:f4:b6:ee:c7:73:d8:
                    10:51:83:59:e1:d2:6d:ed:69:17:3f:23:41:76:49:
                    df:1c:78:a2:97:bf:03:c2:64:83:d4:2c:f3:0a:74:
                    8d:99:a9:ec:01:2b:2d:8d:64:33:38:d8:16:5f:06:
                    ae:81:e7:bb:f5:80:7f:7f:50:d0:d3:50:40:a1:8c:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:81:76:BB:D8:73:EE:D3:3C:10:98:B4:A5:0A:9A:86:A3:9B:73:10
            X509v3 Authority Key Identifier:
                keyid:94:89:8B:0A:CE:E9:CF:62:56:CF:0D:5C:BB:FB:73:C2:6F:D2:11:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:a4:d3:99:24:bf:56:b1:9a:bf:d2:0b:ae:3f:b0:e6:03:
         9e:62:e0:ee:30:da:f3:5c:cb:cf:9c:ff:96:57:bb:5c:a5:5c:
         d2:86:b3:f9:4f:36:cf:43:2c:66:59:36:4b:3a:de:01:42:db:
         f9:c7:a1:b1:1e:b3:b4:e5:1f:44:b8:31:ab:f3:ad:b6:af:38:
         50:b9:05:95:ad:8d:3c:71:16:10:b3:db:a1:45:36:36:c4:28:
         33:e1:f7:49:47:96:04:ed:e8:f2:1b:76:14:3a:f3:74:10:2a:
         f1:e7:67:b8:d6:44:16:e7:a7:22:2b:56:77:c3:61:a7:83:11:
         69:a2:1b:dc:f4:88:f3:aa:f4:ab:d1:18:ec:b0:f3:51:97:16:
         07:85:bd:ae:c8:20:4f:de:d6:86:e6:38:c0:ce:e0:7d:a0:ea:
         97:0a:4a:9d:14:d1:75:27:06:06:c5:9f:db:69:2a:57:a5:c6:
         07:b5:43:c3:d8:ac:2c:a3:8c:77:36:b9:72:71:33:78:70:df:
         20:db:ee:ce:a7:36:82:bb:f1:77:f8:51:78:61:58:29:76:f9:
         06:1e:dc:ab:68:56:b6:c7:8f:3f:10:cf:0e:26:c0:0f:c0:8a:
         f8:57:d3:15:b4:46:e8:e0:41:ec:e4:8e:99:1e:54:87:ac:ca:
         2a:4b:02:35
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUCERc+pKBNzqNh0BjaWX8I3BPe+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ4OThCMEFDRUU5Q0Y2MjU2Q0YwRDVDQkJGQjczQzI2
RkQyMTFBNDAeFw0yNTAxMzEwNjA5MjdaFw0yNTAyMDEwODA2MjdaMDMxMTAvBgNV
BAMTKDczODE3NkJCRDg3M0VFRDMzQzEwOThCNEE1MEE5QTg2QTM5QjczMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gSEMQfng9pE/EJjS3huWRqiK
AEa2NFtVYm/9FceS/oPZ+hlDtpjibMK1r74FlR/9gOZVm8msW4ZUmpVd6B8FuKmM
yZb4z0T6++EjBL9Smm0xHXaPsEpR2xQTXHW69BHxJnvRNISoGqU/IkMvCAbTRxOF
aw1ICssAXdbFuHk3X4SIBqTxuT14/Lv7VYxNtgjjIfBCa78tcY4eXmg/ZizLh/8+
BOP+r5is/nlbg+IQUhk5vKIBrdBHkwcPVfS27sdz2BBRg1nh0m3taRc/I0F2Sd8c
eKKXvwPCZIPULPMKdI2ZqewBKy2NZDM42BZfBq6B57v1gH9/UNDTUEChjH21AgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUc4F2u9hz7tM8EJi0pQqahqObcxAwHwYDVR0j
BBgwFoAUlImLCs7pz2JWzw1cu/tzwm/SEaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzYvOTQ4OThCMEFDRUU5Q0Y2MjU2Q0YwRDVDQkJGQjczQzI2RkQyMTFBNC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzEvOTQ4OThCMEFDRUU5Q0Y2MjU2Q0YwRDVDQkJGQjczQzI2RkQy
MTFBNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1k
NWJmLTQ1NDEtYmNjMS0yNzY1NDNhMjVjN2QvNi85NDg5OEIwQUNFRTlDRjYyNTZD
RjBENUNCQkZCNzNDMjZGRDIxMUE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1Wk05kkv1axmr/SC64/
sOYDnmLg7jDa81zLz5z/lle7XKVc0oaz+U82z0MsZlk2SzreAULb+cehsR6ztOUf
RLgxq/Ottq84ULkFla2NPHEWELPboUU2NsQoM+H3SUeWBO3o8ht2FDrzdBAq8edn
uNZEFuenIitWd8Nhp4MRaaIb3PSI86r0q9EY7LDzUZcWB4W9rsggT97WhuY4wM7g
faDqlwpKnRTRdScGBsWf22kqV6XGB7VDw9isLKOMdza5cnEzeHDfINvuzqc2grvx
d/hReGFYKXb5Bh7cq2hWtsePPxDPDibAD8CK+FfTFbRG6OBB7OSOmR5Uh6zKKksC
NQ==
-----END CERTIFICATE-----