Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
File:                     5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json)
Hash identifier:          Z/1+/aOzZ5SqAG99T6/24Al7Mmxx0pgy+W/jVjcjG4c=
Subject key identifier:   1B:CB:09:ED:88:45:65:C2:6B:E0:B7:FD:02:C1:F6:A1:EF:9D:48:70
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Certificate issuer:       /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial:       42955A6109981FBCB7CC0EDDBDEA41F5CE691A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
Manifest number:          03B2
Signing time:             Fri 31 Jan 2025 06:45:57 +0000
Manifest this update:     Fri 31 Jan 2025 06:40:57 +0000
Manifest next update:     Sat 01 Feb 2025 08:55:57 +0000
Files and hashes:         1: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: PegGwAisvX3gWdbPAAYgG4l6LNoFbuBNIzNzUH+jNgg=)
                          2: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: kGVNeEKX35ugOpsFmA5GwCl6f0GnZpLJS8pEn3cyWJI=)
                          3: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: Y0ZApSmGCRch+djTYBN+U0p8LaOUa+NCEgyRR8hvTcU=)
                          4: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: 7ySWNlqh8pfpYqSc3fbfv+VTSwiuDNFNlc7aZa5se9U=)
                          5: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: 6mlMjNOsZdfSHBkw79+MCCeJRNG4d50x4WhGKA7ev9M=)
                          6: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: LaBCcb8mjeERCC5tHKO7thlovLIwutTtPGiGYEZVPF8=)
                          7: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: PgFKkZH0aQaFuwRYs1mJhheMQU+0AR2Y9C0+BkBTwpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:95:5a:61:09:98:1f:bc:b7:cc:0e:dd:bd:ea:41:f5:ce:69:1a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
        Validity
            Not Before: Jan 31 06:40:57 2025 GMT
            Not After : Feb  1 08:55:57 2025 GMT
        Subject: CN=1BCB09ED884565C26BE0B7FD02C1F6A1EF9D4870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:36:a3:72:de:be:4c:4c:f8:5f:bb:41:3f:
                    80:18:6e:7f:b0:65:3e:85:64:64:06:77:45:72:f0:
                    80:8b:1a:4d:d6:a8:0b:3f:f6:d2:30:90:27:ad:4e:
                    01:b0:89:c2:e0:04:6b:94:13:9e:a1:3a:9a:81:b2:
                    21:78:a1:fa:c8:a8:36:d8:02:b8:4b:55:18:04:b1:
                    17:ef:8e:9c:58:ad:c0:2b:c1:37:36:72:18:4a:64:
                    9a:f6:be:84:70:91:32:e1:69:7a:d1:ac:5b:f8:6b:
                    94:c9:fb:e5:93:97:79:f0:b3:fe:1d:57:e0:76:90:
                    f3:ba:63:2d:f6:09:ae:5d:b9:d0:f8:8e:c7:a7:f9:
                    15:e4:bc:27:1f:96:2f:ce:cd:11:b7:0e:26:a1:88:
                    73:bf:75:2b:6d:ac:f6:9c:de:17:07:ce:eb:16:ee:
                    8a:42:d9:0c:9b:12:33:8e:a8:e5:7c:fa:f9:78:25:
                    a1:7d:64:b8:2f:5a:04:6b:7b:67:63:f0:f0:19:24:
                    4a:eb:c5:f7:b6:8e:30:08:d0:42:88:13:61:1c:1d:
                    75:ba:21:b4:0e:94:ae:bf:20:36:ac:6e:0a:1c:20:
                    ec:8b:7b:b2:9d:25:b4:25:30:d5:69:da:87:aa:1c:
                    5f:99:39:60:56:ec:84:d0:0f:2c:6e:84:6c:fb:3b:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:09:ED:88:45:65:C2:6B:E0:B7:FD:02:C1:F6:A1:EF:9D:48:70
            X509v3 Authority Key Identifier:
                keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2c:dd:af:f1:a2:bd:8b:c1:a2:6a:7d:1d:6c:5e:33:84:28:
         62:0b:05:08:ad:5c:7d:ed:49:b0:bc:4b:cd:a8:41:d9:ea:d1:
         40:db:9b:78:2b:67:fe:80:a0:32:eb:f6:2b:a1:6a:db:e8:48:
         23:0c:3f:f6:74:0f:f7:df:8e:73:18:a7:5d:c9:23:52:a1:3d:
         ac:ba:bd:3a:c3:40:9a:e3:11:97:d7:00:33:2a:a8:6f:e3:0b:
         6a:72:44:8a:b7:33:65:f5:6e:d3:9a:5b:44:9f:4f:4a:b7:36:
         0b:00:44:5f:d9:a2:79:0f:2c:f9:34:ab:bc:0a:08:93:6c:11:
         06:0e:ba:39:22:a8:2a:21:e0:02:e0:22:a9:d0:6e:bb:a5:a2:
         a3:8e:5f:c2:ed:7e:a3:4f:5f:bb:a5:fd:5b:bb:2f:69:a5:c8:
         66:53:4a:a2:fd:52:ec:fd:24:3c:63:a2:40:55:10:ef:ac:ca:
         84:10:b2:55:b1:74:13:76:9c:61:2e:e2:74:35:94:8e:b4:94:
         2b:87:8f:90:b3:90:ef:6b:72:b3:44:6c:15:49:7f:5c:d3:1e:
         7d:cb:28:89:78:c4:02:33:ad:c7:db:4b:29:4d:b4:e3:d1:af:
         9c:55:d9:a6:bd:52:09:21:03:62:96:17:1a:78:92:ad:c6:5b:
         b4:2f:76:d0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQpVaYQmYH7y3zA7dvepB9c5pGl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy
ZTkwZGRmZTAeFw0yNTAxMzEwNjQwNTdaFw0yNTAyMDEwODU1NTdaMDMxMTAvBgNV
BAMTKDFCQ0IwOUVEODg0NTY1QzI2QkUwQjdGRDAyQzFGNkExRUY5RDQ4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrajajct6+TEz4X7tBP4AYbn+w
ZT6FZGQGd0Vy8ICLGk3WqAs/9tIwkCetTgGwicLgBGuUE56hOpqBsiF4ofrIqDbY
ArhLVRgEsRfvjpxYrcArwTc2chhKZJr2voRwkTLhaXrRrFv4a5TJ++WTl3nws/4d
V+B2kPO6Yy32Ca5dudD4jsen+RXkvCcfli/OzRG3DiahiHO/dSttrPac3hcHzusW
7opC2QybEjOOqOV8+vl4JaF9ZLgvWgRre2dj8PAZJErrxfe2jjAI0EKIE2EcHXW6
IbQOlK6/IDasbgocIOyLe7KdJbQlMNVp2oeqHF+ZOWBW7ITQDyxuhGz7O6QVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUG8sJ7YhFZcJr4Lf9AsH2oe+dSHAwHwYDVR0j
BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj
Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2
UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03
YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3
MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCzdr/GivYvBomp9HWxe
M4QoYgsFCK1cfe1JsLxLzahB2erRQNubeCtn/oCgMuv2K6Fq2+hIIww/9nQP99+O
cxinXckjUqE9rLq9OsNAmuMRl9cAMyqob+MLanJEirczZfVu05pbRJ9PSrc2CwBE
X9mieQ8s+TSrvAoIk2wRBg66OSKoKiHgAuAiqdBuu6Wio45fwu1+o09fu6X9W7sv
aaXIZlNKov1S7P0kPGOiQFUQ76zKhBCyVbF0E3acYS7idDWUjrSUK4ePkLOQ72ty
s0RsFUl/XNMefcsoiXjEAjOtx9tLKU2049GvnFXZpr1SCSEDYpYXGniSrcZbtC92
0A==
-----END CERTIFICATE-----