Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft
File:                     090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json)
Hash identifier:          ynrKasE8xclsH57UY3smwXq1J4t1GgjkkV/F47D5vT0=
Subject key identifier:   97:40:7B:65:84:E8:0C:73:90:C5:C3:C9:83:85:C0:3D:DA:8B:E0:98
Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1
Certificate issuer:       /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1
Certificate serial:       6451ECEC21BE5BC39F14C2A8AA44AC9B6BA20340
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft
Manifest number:          025F
Signing time:             Fri 31 Jan 2025 12:07:54 +0000
Manifest this update:     Fri 31 Jan 2025 12:02:54 +0000
Manifest next update:     Sat 01 Feb 2025 13:47:54 +0000
Files and hashes:         1: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: hrfboGOP6GGZ9SirpXU9dap+ilAU7ZFg9KU2v80wwFo=)
                          2: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=)
                          3: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=)
                          4: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: JTZ2kGdERi3x7YRf0uNux1d/BSMy9hym6sHhRS3lDNw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:51:ec:ec:21:be:5b:c3:9f:14:c2:a8:aa:44:ac:9b:6b:a2:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1
        Validity
            Not Before: Jan 31 12:02:54 2025 GMT
            Not After : Feb  1 13:47:54 2025 GMT
        Subject: CN=97407B6584E80C7390C5C3C98385C03DDA8BE098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:96:75:e6:58:eb:39:a9:d7:0c:13:ce:bb:
                    8b:d9:56:aa:c7:fb:d9:76:7f:6f:cf:a8:10:0c:6c:
                    da:74:ba:ef:55:9f:37:e6:8b:bc:30:3e:18:a1:2a:
                    b1:82:3f:35:d1:22:b0:9a:a1:f3:ee:c2:ef:44:51:
                    90:fd:7f:c1:25:81:8f:07:34:c9:37:fb:c3:7b:8b:
                    5b:0b:ad:4f:0d:67:ec:cb:38:af:54:fa:dc:6d:0f:
                    ef:cc:e0:d0:7b:51:a3:b0:f7:60:72:f9:cf:0d:be:
                    50:17:96:1a:8c:ec:bd:b5:52:5e:b7:5a:a0:cc:33:
                    84:39:78:6e:77:7c:e1:c3:2e:be:15:6e:4e:9e:49:
                    2d:aa:02:20:2e:f2:7c:f2:64:fc:02:49:04:9f:2f:
                    65:8c:50:a5:6f:76:25:2d:78:6f:13:b1:a0:1d:b4:
                    34:40:6f:19:af:bd:b7:6d:54:78:92:b6:3a:13:15:
                    c1:ca:fc:b9:41:3a:87:5f:26:dd:98:b7:ae:03:d8:
                    54:77:0f:92:18:62:db:d7:72:b0:58:09:ec:20:42:
                    fb:de:5b:c5:41:62:04:54:82:a7:c5:dd:7a:90:96:
                    22:63:64:1e:94:66:c6:9d:14:f3:a1:92:8a:ae:5c:
                    24:13:5d:fb:22:4b:34:56:4b:72:a4:d1:1d:05:c9:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:40:7B:65:84:E8:0C:73:90:C5:C3:C9:83:85:C0:3D:DA:8B:E0:98
            X509v3 Authority Key Identifier:
                keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9d:63:29:2e:2f:e0:dc:cc:e8:e6:4c:82:9b:ae:ca:29:25:
         fb:f3:9e:47:81:d0:e2:cc:73:75:d6:fa:5c:4c:81:53:78:3b:
         a8:43:6f:ab:93:44:be:29:65:23:ab:4c:50:30:d7:dc:26:3e:
         61:f1:1d:72:16:a8:e3:a1:66:61:dd:e8:b0:17:7f:d9:45:95:
         89:45:8d:54:9e:a9:17:db:57:37:d9:81:66:6d:0b:d6:d0:41:
         b9:60:a9:68:4f:aa:7b:56:91:b2:91:55:3e:12:c6:9a:28:a1:
         27:f5:79:c0:d3:77:d5:3f:17:f6:e0:88:3b:14:71:a2:b5:61:
         84:4e:1e:1d:65:b7:b2:63:42:52:ae:c7:54:1b:0b:c2:79:fc:
         c0:07:83:a4:7b:b8:47:11:63:b3:fb:de:8f:87:0a:fd:10:f7:
         d0:1d:26:8f:74:0d:70:41:c7:8c:38:8e:15:39:80:d9:6a:b6:
         49:24:86:de:2c:1c:a8:30:0e:d4:4f:cd:f4:4b:09:1f:45:98:
         27:f5:7c:0f:91:54:e8:bd:40:38:da:8f:d4:98:97:15:15:d5:
         62:ed:27:40:e7:7b:f2:d6:5d:88:d9:4f:a6:bf:ce:82:4b:3c:
         49:3a:d6:ef:48:62:ad:b4:0a:4d:39:52:31:a4:36:19:7d:e2:
         b8:1a:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----