Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
File:                     5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft (raw, json)
Hash identifier:          xzDiVLDYLpBh3OgdfZVfEUl1uQI7OBT85e9lnrtqp2U=
Subject key identifier:   7F:A4:2A:25:84:33:57:DC:56:D5:B0:75:EC:C1:6F:D9:6C:00:5E:3A
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Certificate issuer:       /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial:       669AB822979F7AB8802B591B33B6DADC5D2E2E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
Manifest number:          02AE
Signing time:             Fri 31 Jan 2025 04:51:36 +0000
Manifest this update:     Fri 31 Jan 2025 04:46:36 +0000
Manifest next update:     Sat 01 Feb 2025 05:03:36 +0000
Files and hashes:         1: 5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl (hash: ry72VtzS9TkVsqKUyWt1+F229FHmcHtYWNAvlH52YPk=)
                          2: 3139332e3230302e3130322e302f32332d3234203d3e20323134373835.roa (hash: 02yFXexx0RukReo8+AwmPQHmksLCVOWv/mWLCeyTOYY=)
                          3: 3139332e3230312e37322e302f32342d3234203d3e20313439343537.roa (hash: gs+C9gPrMKo4jxayW40fvLZlBxHQJvt9Vlsdc+lownc=)
                          4: 3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa (hash: DJT+evwL05shXYMw2l+gChQuoHddBV1Ru1l/+OaF1Ik=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9a:b8:22:97:9f:7a:b8:80:2b:59:1b:33:b6:da:dc:5d:2e:2e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
        Validity
            Not Before: Jan 31 04:46:36 2025 GMT
            Not After : Feb  1 05:03:36 2025 GMT
        Subject: CN=7FA42A25843357DC56D5B075ECC16FD96C005E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:54:a8:70:89:b3:06:4a:8b:a0:0d:e9:c4:
                    99:00:b3:33:94:36:38:24:42:e2:46:cd:44:74:bd:
                    d9:9a:01:74:bf:c4:49:c2:76:61:d7:e5:87:e1:04:
                    ab:55:9a:87:6c:53:84:fc:71:f7:70:78:7f:c2:5a:
                    80:63:87:38:66:d4:ca:ed:a5:87:cc:69:af:7e:a1:
                    8c:ea:ee:99:cd:a9:4b:9f:c2:7d:06:7b:98:c4:d1:
                    33:20:0c:36:55:05:51:40:ce:13:f5:46:d4:71:f2:
                    33:15:e5:a8:f5:d6:2d:66:49:de:ea:f3:87:00:db:
                    61:94:da:9d:73:3c:4c:e8:f3:5d:6e:35:1e:78:0c:
                    cc:79:1e:99:7a:2d:ff:5a:6f:34:b7:f4:b3:0f:01:
                    d5:ea:0a:f1:eb:54:c2:80:f2:38:cc:90:0e:e0:b1:
                    43:0d:36:6b:30:2d:ed:00:f9:ad:20:14:25:35:db:
                    fe:88:6b:21:2b:79:76:0e:81:8c:98:b8:e2:3d:3f:
                    64:d8:96:3e:10:a2:76:b9:e7:24:91:c0:9a:60:19:
                    2e:28:23:2b:7c:ac:ff:ab:13:1b:f1:e8:c5:f0:72:
                    6c:47:64:ae:3e:3f:9c:4e:4c:6c:fe:49:a4:f4:46:
                    62:03:5c:bb:88:66:5a:54:f0:fe:52:90:10:27:e2:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A4:2A:25:84:33:57:DC:56:D5:B0:75:EC:C1:6F:D9:6C:00:5E:3A
            X509v3 Authority Key Identifier:
                keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:53:b6:00:d7:25:1c:52:e3:f0:88:84:c4:b1:7d:26:fb:ec:
         2e:ba:df:37:9a:73:1f:d6:c3:64:95:92:00:4a:e3:ba:62:64:
         44:5e:fe:72:3c:52:8e:ae:43:b0:76:90:ac:49:f0:27:9b:e6:
         c2:0b:13:c6:f4:bb:d7:42:45:2e:44:6f:4b:bb:14:67:9f:32:
         f8:15:f2:ef:b3:e1:55:dc:53:eb:94:29:1e:62:5d:7a:0a:65:
         7b:f1:4a:16:25:68:ef:7c:9a:56:fd:0a:b0:f0:10:e1:10:7d:
         83:76:a2:c2:b4:ee:38:80:8d:9e:c7:8a:cc:4c:e5:64:5d:ca:
         0e:93:f0:a9:fb:93:8d:a2:b0:c2:ee:1d:c6:66:1a:ff:41:54:
         0c:09:0c:93:7d:2f:af:7a:46:ae:57:ec:7e:db:41:f0:e5:d0:
         1b:45:aa:86:9b:f1:1a:53:e8:66:7d:79:df:f5:f3:9a:1e:68:
         6a:07:fb:79:f7:22:2c:4b:6d:f5:eb:1d:1c:ef:91:82:c5:7d:
         72:cc:09:e2:88:b5:53:32:a5:24:a2:cf:07:e9:dd:45:fe:6e:
         ed:fd:ee:87:2b:b1:aa:ce:b3:3b:10:54:69:89:61:ac:1f:be:
         4b:96:6d:d3:fa:6a:20:c7:35:1f:3c:c2:d2:6c:82:b6:ff:f6:
         10:07:cc:81
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZpq4IpeferiAK1kbM7ba3F0uLlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUxMWY2ZDdkZWY0YzBmZmI2ZTJiM2IzZjBjNDQ1NWRj
ZDE0YzE2MDAeFw0yNTAxMzEwNDQ2MzZaFw0yNTAyMDEwNTAzMzZaMDMxMTAvBgNV
BAMTKDdGQTQyQTI1ODQzMzU3REM1NkQ1QjA3NUVDQzE2RkQ5NkMwMDVFM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCby1SocImzBkqLoA3pxJkAszOU
NjgkQuJGzUR0vdmaAXS/xEnCdmHX5YfhBKtVmodsU4T8cfdweH/CWoBjhzhm1Mrt
pYfMaa9+oYzq7pnNqUufwn0Ge5jE0TMgDDZVBVFAzhP1RtRx8jMV5aj11i1mSd7q
84cA22GU2p1zPEzo811uNR54DMx5Hpl6Lf9abzS39LMPAdXqCvHrVMKA8jjMkA7g
sUMNNmswLe0A+a0gFCU12/6IayEreXYOgYyYuOI9P2TYlj4Qona55ySRwJpgGS4o
Iyt8rP+rExvx6MXwcmxHZK4+P5xOTGz+SaT0RmIDXLuIZlpU8P5SkBAn4q8fAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUf6QqJYQzV9xW1bB17MFv2WwAXjowHwYDVR0j
BBgwFoAUVRH21970wP+24rOz8MRFXc0UwWAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA4YmM0OWQtMDMzOC00YjVmLTgyMDQtMDAwNGE2NjEw
NWM5LzAvNTUxMUY2RDdERUY0QzBGRkI2RTJCM0IzRjBDNDQ1NURDRDE0QzE2MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZSSDIxOTcwd1AtMjRyT3o4TVJGWGMw
VXdXQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDhiYzQ5ZC0w
MzM4LTRiNWYtODIwNC0wMDA0YTY2MTA1YzkvMC81NTExRjZEN0RFRjRDMEZGQjZF
MkIzQjNGMEM0NDU1RENEMTRDMTYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFO2ANclHFLj8IiExLF9
JvvsLrrfN5pzH9bDZJWSAErjumJkRF7+cjxSjq5DsHaQrEnwJ5vmwgsTxvS710JF
LkRvS7sUZ58y+BXy77PhVdxT65QpHmJdegple/FKFiVo73yaVv0KsPAQ4RB9g3ai
wrTuOICNnseKzEzlZF3KDpPwqfuTjaKwwu4dxmYa/0FUDAkMk30vr3pGrlfsfttB
8OXQG0WqhpvxGlPoZn153/Xzmh5oagf7efciLEtt9esdHO+RgsV9cswJ4oi1UzKl
JKLPB+ndRf5u7f3uhyuxqs6zOxBUaYlhrB++S5Zt0/pqIMc1HzzC0myCtv/2EAfM
gQ==
-----END CERTIFICATE-----