Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
File:                     94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json)
Hash identifier:          azV+HFYGUMKf7sfbCvuYKrZIN8xj4v6ErO9c2X4TKlo=
Subject key identifier:   3C:C1:2A:62:F2:11:0F:B1:49:71:BC:CA:9D:BF:19:E8:4B:BD:74:D2
Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
Certificate issuer:       /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Certificate serial:       4F21100F91AB75317851BFA589C295BC2F2D4CB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
Manifest number:          F3
Signing time:             Fri 31 Jan 2025 01:49:00 +0000
Manifest this update:     Fri 31 Jan 2025 01:44:00 +0000
Manifest next update:     Sat 01 Feb 2025 04:35:00 +0000
Files and hashes:         1: AS153176.asa (hash: /+ek3eQprTHJME6ajHWXgm5USGPGbTDv5Vh1iiV6z/8=)
                          2: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: Hm6Zisp9rtO1MRy4fuc8qXTfS/nQ+EU71DsoKF+5F24=)
                          3: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: 606LdQ77xTf5QhbbVfMsHVkuUohIz/zrEHBAxZviR88=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:21:10:0f:91:ab:75:31:78:51:bf:a5:89:c2:95:bc:2f:2d:4c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
        Validity
            Not Before: Jan 31 01:44:00 2025 GMT
            Not After : Feb  1 04:35:00 2025 GMT
        Subject: CN=3CC12A62F2110FB14971BCCA9DBF19E84BBD74D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:b0:de:ec:d5:14:2f:19:04:72:ee:31:3a:
                    96:70:5f:86:dc:a5:50:ed:36:79:be:ef:08:29:b0:
                    33:f1:79:92:9d:58:1c:6f:d3:08:48:5d:56:c2:c0:
                    20:7b:7e:09:28:dd:50:f6:30:a2:80:2d:c8:13:e4:
                    e4:9e:da:43:87:40:6a:d4:49:7a:3d:52:03:05:29:
                    34:7a:ec:2e:1d:54:f8:d7:78:bf:61:54:b9:f0:12:
                    dd:ff:7c:9e:53:93:a0:67:2b:57:aa:1a:36:df:1f:
                    26:16:7b:08:21:a6:33:4c:ab:67:aa:36:9a:12:a7:
                    2a:77:99:e2:53:b5:e8:11:df:8b:21:f4:b9:31:6d:
                    2d:fa:15:27:39:e4:88:27:e1:47:7a:f5:bf:f1:a5:
                    2f:75:bd:34:5c:3b:ae:11:7e:3d:b3:1e:72:6b:d8:
                    cb:99:0b:79:88:f7:88:4f:76:32:ba:ba:e1:dc:ca:
                    ac:0e:41:9e:12:48:74:15:c4:85:e2:38:89:6a:0c:
                    dc:06:9d:26:fe:5a:71:0c:0f:9b:cd:ac:23:32:20:
                    8a:c8:fe:68:3a:72:ec:cc:27:41:8c:f9:ba:40:eb:
                    58:cf:4d:54:44:dc:a2:6f:78:fe:94:a2:0a:93:5a:
                    5b:75:41:b3:32:6f:61:46:0f:ca:ca:f6:13:7f:53:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C1:2A:62:F2:11:0F:B1:49:71:BC:CA:9D:BF:19:E8:4B:BD:74:D2
            X509v3 Authority Key Identifier:
                keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:92:c7:91:e0:94:e9:f2:c3:34:78:cf:d8:ed:db:b8:4c:ac:
         8b:45:26:0c:38:4d:a5:db:84:27:7a:fc:d3:82:4a:ae:c4:fd:
         a4:44:4a:86:52:e3:2d:e3:48:d3:97:57:dd:37:8c:a2:cf:24:
         a8:bf:4d:8e:be:11:d4:bc:e7:d5:83:70:65:fa:4b:35:78:16:
         b4:67:13:e7:24:ec:bb:db:6c:fa:fa:88:68:e6:0d:82:04:ae:
         3a:ea:cb:20:3c:88:a2:fc:72:7b:c0:e4:60:a0:f2:f7:2b:95:
         b7:d7:e0:01:0d:82:8e:f7:22:2c:ee:0c:ec:54:f5:59:d2:de:
         21:17:c1:64:0a:8a:ca:60:53:ea:c7:8d:ed:4f:fa:96:42:b4:
         2f:e6:0e:c4:36:10:e5:01:6a:03:c8:0d:0f:88:fa:a3:61:8e:
         fb:59:f1:e8:80:69:e4:d7:8a:51:4e:2a:1a:00:c4:a0:af:0f:
         ca:f5:7d:d4:9a:b8:d0:93:61:17:10:4b:af:e7:b0:3b:b6:6e:
         74:36:0d:41:16:00:b0:e1:71:c7:e7:dd:64:01:5a:82:32:e7:
         e1:0e:53:7c:d5:f8:38:03:ef:88:1e:15:c7:f0:21:44:d2:b6:
         88:07:3d:6f:af:83:67:b4:9e:4e:06:41:15:a1:99:a7:b5:8c:
         44:4f:b6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----