Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft
File:                     10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json)
Hash identifier:          Ua9xHXTzxFao3nc0LJxU7YMapMHAQ0JgcinLuZEOCzU=
Subject key identifier:   E9:E4:EB:62:F7:2D:64:BD:B0:5C:83:CD:AB:8C:2D:62:13:A1:CD:DC
Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4
Certificate issuer:       /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39
Certificate serial:       544DC90339178E2D8167C196356A9A79559E016E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft
Manifest number:          020E
Signing time:             Fri 31 Jan 2025 04:44:00 +0000
Manifest this update:     Fri 31 Jan 2025 04:39:00 +0000
Manifest next update:     Sat 01 Feb 2025 06:51:00 +0000
Files and hashes:         1: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=)
                          2: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: sN0dyNvKuMNIQIGxX8neWQp68q7HnEblt2kVSkD8RY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4d:c9:03:39:17:8e:2d:81:67:c1:96:35:6a:9a:79:55:9e:01:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39
        Validity
            Not Before: Jan 31 04:39:00 2025 GMT
            Not After : Feb  1 06:51:00 2025 GMT
        Subject: CN=E9E4EB62F72D64BDB05C83CDAB8C2D6213A1CDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:df:2e:5a:e9:a6:7e:7f:12:f5:55:24:89:
                    9d:75:96:48:70:d2:ea:2d:52:bd:c6:67:f5:5b:0e:
                    2f:2f:2b:92:7c:a6:88:d9:63:82:e1:a6:a4:49:3a:
                    9f:1b:a0:b8:ee:a8:02:72:59:84:0d:e2:8d:a1:e1:
                    57:72:6f:ed:7d:d6:7a:ac:78:7b:aa:a6:02:3e:ef:
                    30:4f:28:7c:18:eb:b2:e3:4e:f9:4d:5f:a8:02:b3:
                    31:8f:39:ca:23:e2:13:d3:f5:d3:49:ef:44:d2:27:
                    25:97:7b:83:93:5d:73:28:77:9e:31:f4:22:11:f6:
                    1c:7e:7e:0f:2f:ec:c0:4d:a6:08:a0:93:0e:46:03:
                    49:bd:ef:ae:a5:0e:7e:06:b6:02:5e:4e:22:f8:68:
                    a2:ed:f6:67:74:c3:d1:26:c5:07:7f:7a:fa:ad:4d:
                    5b:03:3e:25:da:82:ec:ef:f2:97:4c:90:15:01:ac:
                    fb:bd:e4:d8:e9:a4:db:f8:1b:65:43:13:24:9d:12:
                    88:76:8b:40:f8:b9:b8:fe:a9:b6:76:98:91:ec:42:
                    62:d8:5a:78:7f:66:66:a8:03:31:a0:a7:d3:53:2e:
                    47:29:0d:1c:4c:8a:ae:4a:9c:a9:2c:8a:6d:62:fd:
                    b9:18:f3:50:e0:59:bb:01:d4:28:65:0c:64:c6:3d:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:EB:62:F7:2D:64:BD:B0:5C:83:CD:AB:8C:2D:62:13:A1:CD:DC
            X509v3 Authority Key Identifier:
                keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:49:a4:c7:e6:5c:9f:0c:68:01:9b:3f:06:23:4d:85:7e:f2:
         84:26:dd:7a:4e:bf:6c:54:6b:0a:c0:d4:1f:30:55:53:c8:21:
         d3:75:ea:39:f6:54:8f:7a:2b:a8:a1:39:ba:62:45:86:12:05:
         f0:76:95:30:e9:d6:c0:8a:45:c0:cd:5e:16:f0:c0:77:97:47:
         9b:9b:d1:8f:d2:d2:54:5e:4e:a3:d6:5b:39:60:a6:42:8f:9a:
         de:56:1d:09:fc:97:ff:6b:a6:8f:b9:56:c8:d3:75:5c:62:5b:
         d5:8a:10:36:e6:a2:30:f2:6f:31:62:98:65:52:d3:4a:db:3b:
         d6:aa:10:bc:bb:a1:48:b3:12:7b:5b:2a:b6:09:46:79:f5:23:
         3e:5e:6f:d4:ca:53:bf:aa:63:5c:9f:3b:97:99:57:db:8a:28:
         8e:f0:6f:03:a9:bf:52:72:e0:05:dd:a7:6e:e8:bc:5c:4d:9d:
         5b:85:61:3d:12:45:c2:67:33:4a:79:79:85:6f:9e:36:86:eb:
         49:99:47:7e:b5:29:57:86:ef:99:d4:4e:ed:66:f4:2d:67:5f:
         e3:a4:74:c5:eb:39:2d:b4:15:0f:c6:4d:b1:fe:5e:9f:15:4a:
         cc:2b:72:c0:c8:5a:3a:73:c6:f6:54:16:6c:d0:38:d6:e5:0b:
         d3:42:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----