Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File:                     52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier:          GJOWFKhDo5AyuV6Hg2vI66oTgMWGrN3wv5uUzQsZL9g=
Subject key identifier:   C7:CF:5D:C3:58:31:27:E0:15:56:F8:04:30:6A:E6:9F:D4:89:5C:AF
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer:       /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial:       2A2D8F828D8DBECD51E226784FCC36119B2F8B4D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number:          0130
Signing time:             Fri 31 Jan 2025 07:34:00 +0000
Manifest this update:     Fri 31 Jan 2025 07:29:00 +0000
Manifest next update:     Sat 01 Feb 2025 07:50:00 +0000
Files and hashes:         1: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: HVQR2cbKt8VVrQisjkBAhrhp4KsXJej/OLSmUeqTsY0=)
                          2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: pcBpSLX6wjD10TMOktRdBOucXd2A5gfG7C3Lecbh8gI=)
                          3: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: Bu8eu+s1xKEjCs05/XkV2x0FQLM16iFsGrYGYNvS9M8=)
                          4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: 5jLn1tYtti5DJK9TqNkdMibH5mGLzDQe1BN0OVxqnag=)
                          5: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: wCkqI51ZDmUZi/WHamPJcq+o7hsjYpe/ZEp5XfuM9zk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2d:8f:82:8d:8d:be:cd:51:e2:26:78:4f:cc:36:11:9b:2f:8b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
        Validity
            Not Before: Jan 31 07:29:00 2025 GMT
            Not After : Feb  1 07:50:00 2025 GMT
        Subject: CN=C7CF5DC3583127E01556F804306AE69FD4895CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:70:58:7d:e8:4b:ed:a5:bb:67:49:e8:52:
                    4b:9b:e9:d1:fb:8c:ac:8e:b0:9e:17:ef:f2:61:59:
                    75:47:d4:04:dd:d6:50:08:d3:61:5e:63:32:24:b7:
                    1f:8b:a7:90:de:46:b5:75:6d:31:9a:11:f5:50:1c:
                    dc:2b:a7:59:f0:20:87:48:a5:f4:81:55:0d:af:ba:
                    03:f8:cd:57:f5:e4:3b:d7:e0:55:e1:c6:5a:cb:e1:
                    10:05:ff:df:b4:ce:5d:c6:ef:ef:5d:ee:a3:c1:4b:
                    15:50:7b:e5:ab:f5:9f:f0:64:be:aa:07:ad:49:57:
                    d3:09:0d:b9:f8:77:d2:05:8e:f3:a3:bf:44:55:06:
                    13:f0:b5:da:7e:c6:2a:ef:96:c8:52:b5:82:6a:90:
                    e3:25:95:9c:5b:9d:2a:c0:a9:7b:e2:f8:0c:b5:57:
                    0d:f0:83:a1:58:44:90:9d:d5:ac:f7:9c:d7:2d:0d:
                    b6:ed:4c:39:f9:67:8b:d1:82:ab:be:2d:22:3b:d6:
                    85:5e:51:76:c8:53:60:a4:b8:39:07:89:54:d6:d5:
                    8c:9f:ec:43:34:6d:e3:0d:21:63:19:cb:bc:93:ab:
                    29:32:b9:d3:74:b7:fa:d6:ca:3f:d9:31:64:bc:a2:
                    1a:1f:16:c9:21:9f:db:23:7a:64:8e:c8:e1:28:84:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CF:5D:C3:58:31:27:E0:15:56:F8:04:30:6A:E6:9F:D4:89:5C:AF
            X509v3 Authority Key Identifier:
                keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d0:82:13:c3:93:f5:fa:c7:1b:c1:90:cf:dd:98:a0:75:2b:
         db:a4:93:1f:44:b3:7c:d2:8f:3d:38:fc:8d:36:54:37:b6:4d:
         33:2c:dd:c6:95:4d:53:e2:a9:d2:16:84:03:e3:69:22:06:45:
         1a:03:ac:a4:fd:de:4b:7d:f7:dc:b2:28:95:7a:06:82:c4:e6:
         22:b5:94:b5:35:94:45:62:e7:63:85:f9:3d:0b:bc:b9:0f:70:
         40:be:df:fa:c3:92:5b:db:c6:5c:3b:4d:2f:75:a7:57:62:96:
         02:c0:d5:18:ed:03:82:13:84:16:e6:c2:de:a7:1c:b8:60:0b:
         83:2e:bf:40:1c:7c:41:c6:35:7d:1f:70:e1:43:42:1e:2b:b7:
         90:c8:fe:2d:1d:44:12:4e:c3:8b:26:3e:17:2c:c2:e6:c9:6f:
         9e:33:e9:a2:b2:98:a6:66:d4:e7:55:b7:26:79:71:ac:64:c0:
         2a:01:53:b1:76:65:26:93:5e:99:8e:23:43:0b:95:8c:cb:10:
         cc:63:d8:24:57:88:05:25:3e:e3:cd:1b:84:18:a3:56:d9:8c:
         32:ef:f5:ab:ee:1f:8a:2c:ef:60:d6:fc:a2:12:0c:19:87:7d:
         64:a1:9e:99:01:3d:34:0d:2a:0a:21:c1:46:77:41:a3:eb:8d:
         9d:6f:44:8f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKi2Pgo2Nvs1R4iZ4T8w2EZsvi00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz
QjM3MzIwQzAeFw0yNTAxMzEwNzI5MDBaFw0yNTAyMDEwNzUwMDBaMDMxMTAvBgNV
BAMTKEM3Q0Y1REMzNTgzMTI3RTAxNTU2RjgwNDMwNkFFNjlGRDQ4OTVDQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uHBYfehL7aW7Z0noUkub6dH7
jKyOsJ4X7/JhWXVH1ATd1lAI02FeYzIktx+Lp5DeRrV1bTGaEfVQHNwrp1nwIIdI
pfSBVQ2vugP4zVf15DvX4FXhxlrL4RAF/9+0zl3G7+9d7qPBSxVQe+Wr9Z/wZL6q
B61JV9MJDbn4d9IFjvOjv0RVBhPwtdp+xirvlshStYJqkOMllZxbnSrAqXvi+Ay1
Vw3wg6FYRJCd1az3nNctDbbtTDn5Z4vRgqu+LSI71oVeUXbIU2CkuDkHiVTW1Yyf
7EM0beMNIWMZy7yTqykyudN0t/rWyj/ZMWS8ohofFskhn9sjemSOyOEohP7XAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUx89dw1gxJ+AVVvgEMGrmn9SJXK8wHwYDVR0j
BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2
NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC
ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3
NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCG0IIT
w5P1+scbwZDP3ZigdSvbpJMfRLN80o89OPyNNlQ3tk0zLN3GlU1T4qnSFoQD42ki
BkUaA6yk/d5LfffcsiiVegaCxOYitZS1NZRFYudjhfk9C7y5D3BAvt/6w5Jb28Zc
O00vdadXYpYCwNUY7QOCE4QW5sLepxy4YAuDLr9AHHxBxjV9H3DhQ0IeK7eQyP4t
HUQSTsOLJj4XLMLmyW+eM+mispimZtTnVbcmeXGsZMAqAVOxdmUmk16ZjiNDC5WM
yxDMY9gkV4gFJT7jzRuEGKNW2Ywy7/Wr7h+KLO9g1vyiEgwZh31koZ6ZAT00DSoK
IcFGd0Gj642db0SP
-----END CERTIFICATE-----