Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft
File:                     FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json)
Hash identifier:          fqgu8p0H6uttG9OrhrJymcjXG9MURFYD/SzFUy3IvRQ=
Subject key identifier:   4A:BF:48:25:2C:7D:A9:BE:7E:7B:78:C4:AA:C6:AC:67:CC:25:6A:52
Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B
Certificate issuer:       /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B
Certificate serial:       7727DDE7689BC63F42F98EC92E2422968B792403
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft
Manifest number:          0356
Signing time:             Fri 31 Jan 2025 16:59:42 +0000
Manifest this update:     Fri 31 Jan 2025 16:54:42 +0000
Manifest next update:     Sat 01 Feb 2025 19:52:42 +0000
Files and hashes:         1: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: LryRrkJBzL4Dn7/pXgrdWTDFwsyuUE/3H6WRlSAUUC0=)
                          2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: lh1Ohfa3ToxmF5E1m7erqbdCbn0T+JzZxF0dzSFXjBU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:27:dd:e7:68:9b:c6:3f:42:f9:8e:c9:2e:24:22:96:8b:79:24:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B
        Validity
            Not Before: Jan 31 16:54:42 2025 GMT
            Not After : Feb  1 19:52:42 2025 GMT
        Subject: CN=4ABF48252C7DA9BE7E7B78C4AAC6AC67CC256A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:f4:0c:0f:44:77:b8:ab:30:3b:a2:82:51:
                    98:aa:60:23:01:0b:8e:e1:e0:a1:ef:3a:fb:5d:e1:
                    ea:f5:a6:1f:9b:5f:f1:ce:c0:5b:4a:08:ee:25:e9:
                    be:c7:8e:0e:d8:59:bc:e9:f3:76:10:c4:65:3f:27:
                    ee:2e:5c:62:dd:a6:9e:8a:30:f9:17:a5:a1:db:d4:
                    a3:38:3d:41:36:1f:e9:75:bf:b3:ff:d1:c2:80:d1:
                    68:03:39:8e:3b:5a:0a:b1:3e:cf:96:39:84:ed:2d:
                    e9:0f:c3:07:af:04:c7:7f:6a:09:6f:ae:f8:dc:77:
                    af:fd:22:a9:a3:ce:c2:2f:94:ef:c2:b6:75:a8:d5:
                    64:c9:98:b6:10:a6:1f:95:7b:03:a4:0d:b5:9c:29:
                    92:ed:ec:cf:09:c0:06:e5:99:3c:2e:40:da:89:05:
                    f4:57:29:12:b7:c0:51:01:22:73:be:60:e7:0b:1e:
                    7d:8c:a9:23:b6:41:1b:b2:3f:1c:0e:a7:7c:67:0f:
                    89:63:57:64:c3:9d:10:3c:44:92:76:74:aa:d8:b2:
                    d6:d1:50:35:2a:e6:47:d0:df:33:11:1d:4e:29:83:
                    14:34:1b:e2:4c:3a:6b:37:b3:b9:68:54:b5:7e:2a:
                    65:4f:72:16:c2:4f:b9:32:2d:4e:1d:c6:26:30:fe:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BF:48:25:2C:7D:A9:BE:7E:7B:78:C4:AA:C6:AC:67:CC:25:6A:52
            X509v3 Authority Key Identifier:
                keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:13:92:a3:75:92:31:66:e4:0e:bf:9d:3e:b0:ee:fe:27:63:
         53:88:f5:a5:3b:37:55:b4:9f:c9:37:81:0c:12:a3:d1:db:0c:
         5c:af:dc:20:07:d7:8a:e4:48:9c:9c:64:b8:b6:d4:78:ba:65:
         79:0b:48:d4:56:df:d2:af:6b:ad:ba:14:02:e3:a6:37:eb:f6:
         30:7e:ad:70:5e:61:be:14:ad:98:8f:5d:f1:1e:83:96:d1:87:
         49:53:32:ca:67:11:93:ae:b4:3f:b4:b7:5e:84:b1:a3:ae:54:
         6a:5e:ba:25:5a:cd:6c:b2:d5:7c:81:6e:f3:8a:68:ad:b4:c0:
         c3:6b:f2:1d:b3:b3:a5:7d:93:b7:04:a9:3c:f8:7d:9e:a1:35:
         f8:95:c1:73:18:2d:17:4f:00:7a:fb:88:51:38:bc:bc:79:40:
         2d:47:ee:bc:e1:36:a6:67:ad:2d:70:06:ec:e1:31:49:79:35:
         91:06:b3:19:db:ed:46:1d:ff:81:ae:14:95:1a:37:fb:9c:86:
         30:01:dc:8c:82:1a:f4:c1:1f:e7:22:bb:58:90:5d:14:68:62:
         8d:90:03:38:13:3e:50:82:d9:51:6b:93:0a:1d:49:a7:fb:21:
         d9:97:35:42:c0:52:2d:f4:9d:87:7a:d1:8d:cc:47:61:11:06:
         8e:e4:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----