Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
File:                     0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json)
Hash identifier:          Y+OUshnmEVSi0IkdcJr06/MQtaAO2Xg4EDpORGgfxls=
Subject key identifier:   D4:81:4D:33:3B:5C:C0:C9:7E:8A:96:46:1C:AC:8D:38:F0:64:6F:B4
Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
Certificate issuer:       /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
Certificate serial:       239B54BAC1BCF60DC0C934724A0022041A8CA234
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
Manifest number:          F0
Signing time:             Fri 31 Jan 2025 04:38:52 +0000
Manifest this update:     Fri 31 Jan 2025 04:33:52 +0000
Manifest next update:     Sat 01 Feb 2025 06:49:52 +0000
Files and hashes:         1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: GOSro5bSH04/LhFcp3jWcxc9uL2by5TiBmqbWGnAjdA=)
                          2: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: Q/vCfWFE6rU25anyFz8xoMKg1AQxykdvu+ZhWUcuW0Q=)
                          3: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: WAEDCXUcEyZrm+AiMC7S/4c05J5m88q64rRSqxpIjho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9b:54:ba:c1:bc:f6:0d:c0:c9:34:72:4a:00:22:04:1a:8c:a2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
        Validity
            Not Before: Jan 31 04:33:52 2025 GMT
            Not After : Feb  1 06:49:52 2025 GMT
        Subject: CN=D4814D333B5CC0C97E8A96461CAC8D38F0646FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:5b:3e:6d:bf:20:f4:1b:ac:76:7e:38:1a:
                    1b:fd:cb:2d:8c:ca:cc:7d:fa:65:4b:a6:60:4a:36:
                    d7:9d:77:dc:78:ef:d6:8a:4a:06:36:39:e3:3d:f9:
                    fd:45:e2:90:31:15:d6:7b:cf:9f:32:fd:d3:cc:04:
                    3a:27:59:fd:76:56:52:fe:a0:19:54:93:a3:9a:1d:
                    14:fb:17:31:b5:bc:95:36:80:e5:48:47:95:2f:ff:
                    71:41:2f:7c:03:40:9d:7e:f3:cf:2f:57:d0:52:06:
                    05:9b:fc:08:00:f0:42:46:c4:7c:06:c9:cc:43:a7:
                    4b:8a:a7:bb:f5:de:13:dc:3c:5e:b1:f7:e1:52:b2:
                    ef:b4:78:e9:f4:a0:74:23:a8:76:5f:c0:f7:e7:a2:
                    a6:61:d7:57:b1:3b:3c:b1:74:c7:a7:c9:8b:6b:37:
                    f0:90:77:56:91:77:3b:c8:9f:1c:75:03:0a:d6:87:
                    39:c2:e6:f9:5a:2b:3e:56:37:9c:bf:46:ca:d7:73:
                    c2:03:1a:87:ad:c5:2c:b1:8e:70:2b:16:58:a5:f7:
                    49:57:66:90:6b:77:db:80:dd:52:87:2b:16:62:2f:
                    28:43:69:c9:51:49:c4:22:5d:16:e7:15:37:4a:cf:
                    0a:c9:56:98:c7:ab:7d:15:4c:cb:b2:df:76:fd:e8:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:81:4D:33:3B:5C:C0:C9:7E:8A:96:46:1C:AC:8D:38:F0:64:6F:B4
            X509v3 Authority Key Identifier:
                keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:73:e1:ff:f6:7a:23:d3:7f:19:84:67:32:56:52:2b:e7:32:
         83:13:43:ea:16:b6:26:42:18:44:ca:e0:64:e7:e9:f1:94:93:
         d0:5a:29:40:09:91:cb:61:dd:1c:a5:09:61:e9:b2:b6:32:e8:
         a2:4d:6a:b4:6e:21:b8:b3:94:20:23:3a:12:73:cb:99:be:e0:
         a4:15:d8:c8:06:37:eb:aa:d4:a3:7d:d1:80:6a:5d:ac:54:ff:
         4a:18:d9:b6:5f:89:28:8a:f7:c2:5e:9a:85:9d:8c:7f:45:62:
         9c:1b:29:dd:94:74:3f:50:22:33:3b:06:7b:86:4d:c3:7e:7e:
         94:2f:ea:93:d8:26:df:d5:71:36:f9:26:6b:04:59:98:3a:35:
         02:95:21:93:e5:3f:85:0d:af:5b:fb:eb:30:85:5d:16:7f:48:
         2e:73:65:92:7b:63:91:49:7d:0e:3f:84:3b:2d:05:90:a3:49:
         78:e7:8d:9e:43:e5:09:e5:65:97:d5:74:47:90:93:39:42:e5:
         58:a5:89:15:c0:c5:34:45:aa:90:6c:da:db:24:b3:d3:01:f4:
         31:2c:bf:39:f4:28:75:88:07:b3:80:08:38:3a:23:1a:7e:99:
         2b:12:aa:21:0c:1f:be:3a:91:ac:7f:2c:a0:13:16:fa:a0:53:
         5e:ac:de:a2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUI5tUusG89g3AyTRySgAiBBqMojQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG
QjgyM0U0NTAeFw0yNTAxMzEwNDMzNTJaFw0yNTAyMDEwNjQ5NTJaMDMxMTAvBgNV
BAMTKEQ0ODE0RDMzM0I1Q0MwQzk3RThBOTY0NjFDQUM4RDM4RjA2NDZGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WFs+bb8g9Busdn44Ghv9yy2M
ysx9+mVLpmBKNtedd9x479aKSgY2OeM9+f1F4pAxFdZ7z58y/dPMBDonWf12VlL+
oBlUk6OaHRT7FzG1vJU2gOVIR5Uv/3FBL3wDQJ1+888vV9BSBgWb/AgA8EJGxHwG
ycxDp0uKp7v13hPcPF6x9+FSsu+0eOn0oHQjqHZfwPfnoqZh11exOzyxdMenyYtr
N/CQd1aRdzvInxx1AwrWhznC5vlaKz5WN5y/RsrXc8IDGoetxSyxjnArFlil90lX
ZpBrd9uA3VKHKxZiLyhDaclRScQiXRbnFTdKzwrJVpjHq30VTMuy33b96GGhAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU1IFNMztcwMl+ipZGHKyNOPBkb7QwHwYDVR0j
BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk
OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE
MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4
NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQc+H/
9noj038ZhGcyVlIr5zKDE0PqFrYmQhhEyuBk5+nxlJPQWilACZHLYd0cpQlh6bK2
MuiiTWq0biG4s5QgIzoSc8uZvuCkFdjIBjfrqtSjfdGAal2sVP9KGNm2X4koivfC
XpqFnYx/RWKcGyndlHQ/UCIzOwZ7hk3Dfn6UL+qT2Cbf1XE2+SZrBFmYOjUClSGT
5T+FDa9b++swhV0Wf0guc2WSe2ORSX0OP4Q7LQWQo0l4542eQ+UJ5WWX1XRHkJM5
QuVYpYkVwMU0RaqQbNrbJLPTAfQxLL859Ch1iAezgAg4OiMafpkrEqohDB++OpGs
fyygExb6oFNerN6i
-----END CERTIFICATE-----