Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File:                     3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier:          o25PZm3xe+EzPmkB7/pkeYmAGWuE948PcYgDk8EGV60=
Subject key identifier:   E6:C6:89:16:9B:5E:EE:9E:DB:84:E3:18:9C:BD:77:70:5A:15:9D:02
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer:       /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial:       5496D5D71020E34B841BF11D1839236B05D387BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number:          84
Signing time:             Fri 31 Jan 2025 17:23:11 +0000
Manifest this update:     Fri 31 Jan 2025 17:18:11 +0000
Manifest next update:     Sat 01 Feb 2025 20:02:11 +0000
Files and hashes:         1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: T/odhgyGk5ejaWyEExplOBoteVwCDrZxowRsfx4h3FQ=)
                          2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=)
                          3: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:96:d5:d7:10:20:e3:4b:84:1b:f1:1d:18:39:23:6b:05:d3:87:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
        Validity
            Not Before: Jan 31 17:18:11 2025 GMT
            Not After : Feb  1 20:02:11 2025 GMT
        Subject: CN=E6C689169B5EEE9EDB84E3189CBD77705A159D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:db:f4:8b:30:f9:c9:a5:e7:d3:ac:99:2e:
                    61:e7:f2:a5:fe:b7:0b:b0:ce:a0:f6:19:72:d0:a7:
                    f9:58:2a:69:82:ac:04:4c:df:a8:bf:14:e0:2a:25:
                    38:ec:ce:71:60:cb:5f:35:01:07:9e:e5:11:91:13:
                    64:c8:8d:de:b4:d5:b2:1f:42:b2:7b:10:45:78:6f:
                    e4:c6:4d:68:6e:f2:a8:87:34:65:92:f6:6a:8c:9c:
                    2c:b0:fd:a5:64:43:48:64:a5:e4:7f:8f:53:44:38:
                    2a:13:ba:27:f7:ed:48:92:1f:fd:24:a4:bf:0f:04:
                    f8:cd:74:52:e0:53:e3:2e:42:f4:91:31:ad:93:fb:
                    da:2d:a5:73:95:4f:b3:e6:72:d4:6e:4e:cb:6b:0b:
                    d1:ef:f6:c2:71:8d:8c:69:2e:b2:99:85:f1:42:e7:
                    1b:f5:f7:e2:c5:ff:46:3e:ce:1a:00:1f:ac:48:cd:
                    3c:f1:8d:f9:ac:dd:83:1b:c5:a6:42:6c:90:e9:ac:
                    ac:b6:1e:b4:33:35:86:8d:29:63:4b:11:85:10:ba:
                    1c:11:bf:f1:c0:33:69:21:d3:7e:3a:8d:42:09:35:
                    7e:02:b2:d2:de:8c:c4:ef:3c:40:4c:1e:bd:11:b2:
                    03:9a:e5:e5:2c:72:b7:56:d8:49:70:a9:4c:b7:a4:
                    45:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C6:89:16:9B:5E:EE:9E:DB:84:E3:18:9C:BD:77:70:5A:15:9D:02
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:29:6f:51:79:8c:14:66:72:89:24:49:cb:c0:c2:af:8a:
         53:f0:99:ce:f2:38:45:8d:7c:d0:f2:63:80:30:24:ee:0d:2d:
         a6:5c:fe:9f:5b:28:61:54:ec:f6:e4:28:e5:1a:b2:9a:f1:af:
         bc:b0:b9:7e:e0:71:32:38:8b:9a:47:c4:08:5c:de:e9:05:be:
         e3:60:96:f7:29:ad:46:84:d0:d4:f5:50:99:3a:7a:03:cd:eb:
         7b:cf:6c:c4:1b:fc:3b:68:ed:43:ea:6f:82:98:10:28:8f:eb:
         5e:b6:bd:5b:a2:f8:9d:a6:5d:94:34:61:7a:84:1b:61:14:91:
         ab:a3:b2:f7:0c:c0:35:65:fe:d2:80:cc:94:0b:2b:7b:c3:26:
         7f:ab:d9:c5:9c:4f:c4:eb:61:e4:c3:2a:dd:a1:e4:4b:23:49:
         3c:24:57:0c:9b:b7:88:66:79:5e:d3:b4:5c:00:52:1d:96:27:
         00:15:a0:41:fa:3d:32:cd:71:35:8f:76:e6:1f:7a:ae:d8:58:
         75:ca:ed:f4:9a:aa:1b:49:7a:10:a5:9a:b5:16:71:1e:cc:8b:
         ff:73:fb:d8:ea:c8:aa:0a:4d:0c:70:58:25:81:32:dd:ad:89:
         1a:03:04:26:fa:89:43:c5:21:cb:25:6a:b8:8c:1b:43:76:ee:
         c8:7d:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----