Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File:                     EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier:          oLo7+knTZQoqjtfUBi7e/BOIskKY3JpNNYtkJHlJgyo=
Subject key identifier:   58:FC:62:25:41:FA:FD:9A:07:1D:B3:F2:91:CC:AD:86:DB:97:1C:EF
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer:       /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial:       2D57C689258B4F2B1F255BB7C60746D432A3419D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number:          02A5
Signing time:             Fri 31 Jan 2025 05:05:57 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 06:10:57 +0000
Files and hashes:         1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: IiDcFsyctvNetV0CEpURi0yRO509dQv2uP7LoCigoyQ=)
                          2: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: huwsUB31uBfbleT8W3liIVEEjjwoWiPQyT4oqqDXvCQ=)
                          3: 3138352e33372e3231362e302f32332d3234203d3e20323132323338.roa (hash: JrvLFX+5o0GBehhUiUJJUuZWmKqwIyrrY1oYHebpeaY=)
                          4: 3138352e35352e38332e302f32342d3234203d3e20323135323837.roa (hash: OwBYRFjUW3/GMJvAg1ftyjTYl7sljINQpVoQJtB1Im4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:57:c6:89:25:8b:4f:2b:1f:25:5b:b7:c6:07:46:d4:32:a3:41:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
        Validity
            Not Before: Jan 31 05:00:57 2025 GMT
            Not After : Feb  1 06:10:57 2025 GMT
        Subject: CN=58FC622541FAFD9A071DB3F291CCAD86DB971CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:c4:6a:4f:e4:be:6b:07:42:d9:0a:e8:b6:
                    09:c3:8c:a9:9c:63:ef:0a:85:34:2e:99:57:8c:d2:
                    0c:71:d4:6e:e9:46:04:03:d1:2e:e2:e4:51:18:fb:
                    cc:c4:ca:a0:c5:76:9a:19:48:5e:1b:cf:07:dc:05:
                    09:da:b1:1d:bb:4a:26:be:b0:04:0a:97:cb:be:ed:
                    f1:cb:70:b9:c7:84:71:93:5f:e6:27:d6:3a:50:56:
                    17:55:18:1e:6a:0d:08:79:59:49:f1:a6:a5:d7:d5:
                    31:e3:54:3a:1c:95:dd:71:71:5f:31:65:2d:e9:d9:
                    92:23:43:21:bf:b5:77:24:c2:8e:bc:a9:32:3c:20:
                    bf:24:31:5a:e0:5b:d7:da:74:93:21:71:0a:94:c4:
                    16:50:1d:4c:6d:92:49:54:48:64:69:26:84:28:44:
                    5e:ad:86:f2:28:55:2d:0d:e5:a3:e7:84:aa:bb:ee:
                    ae:96:f1:c3:64:60:c4:bb:3a:4e:d1:88:a4:24:71:
                    21:60:27:ef:57:27:47:72:88:a0:5d:6d:2e:30:6c:
                    1d:ab:a3:be:26:25:52:a5:d5:0a:1e:5e:41:ed:4e:
                    58:2b:8d:59:ae:6c:d4:99:3b:2e:b8:dd:fc:e5:55:
                    87:00:d1:f9:aa:e8:7e:16:48:0f:43:0c:58:02:11:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FC:62:25:41:FA:FD:9A:07:1D:B3:F2:91:CC:AD:86:DB:97:1C:EF
            X509v3 Authority Key Identifier:
                keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:53:a1:31:6b:dc:b3:8d:43:a4:4c:8e:56:c7:95:0c:04:12:
         a3:5b:15:cc:99:bd:c1:ef:91:ca:1b:2e:10:31:a0:76:ea:6f:
         55:2b:80:fc:a2:8d:cb:0e:ef:d3:30:7b:3d:47:27:7c:00:4c:
         c7:0d:51:58:d5:71:06:e1:8d:8e:41:f8:5c:98:68:70:8e:9e:
         0e:9a:db:28:34:cb:59:3b:53:af:36:db:6e:cc:f9:2c:53:c7:
         2f:03:18:e1:b4:ae:1d:ec:6c:89:4b:88:f6:6c:d7:6d:94:a6:
         6a:53:9c:dd:3f:3b:5a:29:9f:01:64:4b:a6:4f:a9:27:c5:e5:
         a0:7e:ba:f9:d6:0d:d7:63:bc:44:65:4d:7f:2b:74:79:1b:e3:
         43:0e:1c:14:fc:fb:43:f8:fb:81:91:b6:fd:0d:74:46:a7:9a:
         92:5d:38:8b:5d:a1:cb:e3:d4:f8:00:e9:e5:7d:78:c9:39:8c:
         ce:32:7c:20:8a:fa:b6:04:36:91:f5:5c:e8:de:6c:0f:ea:1b:
         79:d6:52:d7:de:4b:cf:a4:a5:7c:b3:40:c2:53:4e:43:eb:08:
         cf:23:3e:22:a9:fb:75:4c:33:9c:6e:a0:4c:33:4d:41:63:72:
         37:85:4a:cd:57:c7:ca:1f:22:b2:f6:11:1f:2f:f6:c4:1e:b0:
         3c:a6:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----