Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
File:                     5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft (raw, json)
Hash identifier:          Llman0paiq+mKK2X7gYo7lzcWNCqrGD854yxR7s2UPE=
Subject key identifier:   F0:1D:D3:EA:99:47:25:5A:CE:6E:71:2C:EB:75:F8:43:13:6F:1C:C0
Authority key identifier: 5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
Certificate issuer:       /CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Certificate serial:       3E996D9A62555081FE18D67ABC8FA17AA67A34AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
Manifest number:          032B
Signing time:             Fri 31 Jan 2025 16:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 15:55:57 +0000
Manifest next update:     Sat 01 Feb 2025 19:12:57 +0000
Files and hashes:         1: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl (hash: b90BoPo6kXMfNGLpTG6VALUROQ5nxjVpv8NJL5EPcE4=)
                          2: 39312e3232392e3138302e302f32342d3234203d3e2036303739.roa (hash: bCYrFGO5+3HokoUx2GJHt6aSIxx1pD6sGnDFjj+OxlU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:99:6d:9a:62:55:50:81:fe:18:d6:7a:bc:8f:a1:7a:a6:7a:34:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
        Validity
            Not Before: Jan 31 15:55:57 2025 GMT
            Not After : Feb  1 19:12:57 2025 GMT
        Subject: CN=F01DD3EA9947255ACE6E712CEB75F843136F1CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:e8:e1:25:33:c2:55:39:d5:ab:f6:90:28:
                    de:09:2e:e7:5c:03:98:be:87:72:22:fe:06:cd:aa:
                    c6:17:a7:7e:f4:12:d3:d7:80:33:99:13:d5:8f:4b:
                    93:95:d1:19:2f:72:3d:dc:a9:41:08:a5:54:eb:5c:
                    00:49:3d:06:ee:e0:bf:68:c7:db:5e:44:ae:0c:ea:
                    cd:6e:cc:d1:bf:1c:dc:7d:89:fa:69:1a:88:bc:cd:
                    07:58:43:d3:13:8f:37:3e:c2:3e:63:b5:51:e1:70:
                    b6:46:22:47:48:fe:79:83:40:a0:88:85:de:0e:39:
                    0f:60:93:d3:28:5c:cc:f7:cb:4f:95:71:2c:73:63:
                    96:94:00:6c:0f:5c:dd:17:59:9b:75:e5:7e:dc:13:
                    87:79:bc:36:dd:ee:22:6e:44:cd:c4:2b:76:05:34:
                    28:d6:f5:dc:b7:c8:7e:25:77:77:f9:2a:a4:a0:3b:
                    5b:b1:c4:c1:c9:3e:13:be:f3:2b:5d:52:bd:01:31:
                    5e:0e:2a:4f:5e:61:fe:12:1e:7d:a7:0c:e2:f1:68:
                    40:c2:ed:21:6e:db:e6:66:20:c2:b1:bf:39:1d:dd:
                    60:08:39:42:d8:31:63:49:22:d5:14:85:b9:27:1c:
                    d7:bf:8e:b6:7b:3f:3a:ef:b9:08:e8:47:fe:20:e0:
                    69:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1D:D3:EA:99:47:25:5A:CE:6E:71:2C:EB:75:F8:43:13:6F:1C:C0
            X509v3 Authority Key Identifier:
                keyid:5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:6f:98:dd:44:42:7a:d7:59:92:5a:24:68:82:4e:10:24:
         e4:85:39:32:c3:1b:af:9e:27:59:07:d3:5a:f8:32:40:d0:16:
         50:06:1f:f2:c6:4b:54:30:36:18:5f:5a:a5:cd:28:81:25:71:
         ae:f5:57:f6:45:91:fb:f9:a9:e5:7b:69:50:91:7d:0f:db:63:
         8b:82:ad:c0:e1:42:18:f4:d0:26:f3:75:06:fc:4c:73:e4:ac:
         67:fd:0d:af:50:c5:e1:17:d1:6f:eb:7b:45:e6:07:a7:dd:16:
         ca:92:d8:22:e7:49:31:31:cd:fb:4d:f2:a4:27:97:02:fd:0d:
         ee:94:25:58:36:83:83:61:22:92:71:96:e9:23:de:c6:c1:b3:
         74:b8:ec:e5:c3:81:9a:66:7a:09:14:1b:8b:69:86:83:21:d0:
         a3:23:4d:da:11:59:08:f2:28:b5:78:cd:74:d9:c8:c8:63:ff:
         6e:5e:80:94:ed:37:df:8e:c4:94:70:47:dc:6e:f4:5d:d8:d9:
         09:db:01:64:94:7a:4c:90:2e:0a:81:19:1e:99:d1:e6:a1:a0:
         79:a4:70:96:ec:94:5e:5e:b6:c7:dd:00:1c:a4:70:45:2e:df:
         a3:5d:89:6f:eb:5e:7c:44:3e:d8:f7:23:1b:2d:81:0e:f3:bf:
         08:3e:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----