Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft
File:                     27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft (raw, json)
Hash identifier:          P9W2NUgT+14Midz1OSsSES5EVDvMp5TOEHnF+77VZYg=
Subject key identifier:   2A:85:B3:F9:BB:C9:C5:9A:B7:E0:04:75:46:6C:4D:EF:93:64:70:53
Authority key identifier: 27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4
Certificate issuer:       /CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4
Certificate serial:       7A33844063F9EE7483992648FCF6A2978E3E5E59
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft
Manifest number:          F2
Signing time:             Fri 31 Jan 2025 03:54:32 +0000
Manifest this update:     Fri 31 Jan 2025 03:49:32 +0000
Manifest next update:     Sat 01 Feb 2025 04:58:32 +0000
Files and hashes:         1: 27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl (hash: e6B5dethXyHfcCw9wtWDafjjD2qpZrn0wGLwdDjhPVU=)
                          2: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: GViZfHMCVcNIucTv4+7C3lATwPTkTgeprUKS+i8yn+k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:33:84:40:63:f9:ee:74:83:99:26:48:fc:f6:a2:97:8e:3e:5e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4
        Validity
            Not Before: Jan 31 03:49:32 2025 GMT
            Not After : Feb  1 04:58:32 2025 GMT
        Subject: CN=2A85B3F9BBC9C59AB7E00475466C4DEF93647053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:d7:70:4e:0b:6c:b8:8f:b0:3e:20:c9:dc:
                    7b:61:3f:4a:71:0c:0b:16:d6:0a:fd:a9:35:f3:7c:
                    b8:ef:89:ad:a8:38:d7:7b:a2:66:f5:02:cb:b4:dd:
                    99:55:85:9c:52:af:40:da:51:09:e1:1d:b5:9f:78:
                    d2:c1:eb:c9:ff:d3:6e:f1:32:d1:71:90:bf:c7:32:
                    36:ed:43:a3:25:cf:99:d5:20:d0:ef:cc:81:2d:d8:
                    a7:2f:87:36:5b:72:26:8b:d0:28:42:57:3b:12:ec:
                    54:06:1f:5b:71:07:66:c9:69:62:14:a1:86:8a:51:
                    15:fc:44:0e:c0:97:7b:39:14:fd:d4:78:9f:ea:79:
                    74:cd:11:e6:b2:e7:1f:a5:84:8c:61:ad:88:34:9c:
                    6e:01:14:75:5c:06:c9:a6:ea:74:4b:7f:dd:72:27:
                    af:e2:7b:f7:74:0b:2a:3d:95:c9:60:d4:7b:65:5e:
                    1d:15:83:19:d3:1c:c3:7c:75:ec:b4:cd:ca:a9:f7:
                    db:44:b9:dd:62:c8:46:be:52:0a:aa:92:ef:3b:3e:
                    d4:54:f8:1b:24:0a:bf:b1:08:e0:7c:66:d8:e8:c6:
                    95:12:2a:ba:b0:b9:5d:c4:a6:14:8c:2e:6b:cb:73:
                    e4:b4:32:f8:1c:84:76:07:e3:68:ad:77:6f:32:a4:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:B3:F9:BB:C9:C5:9A:B7:E0:04:75:46:6C:4D:EF:93:64:70:53
            X509v3 Authority Key Identifier:
                keyid:27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:19:b0:9c:3c:44:a1:5d:69:85:b6:7c:07:2e:b0:00:33:61:
         0f:e4:72:0e:ac:55:72:e5:58:8f:1d:6b:d9:15:62:7c:68:80:
         12:4c:e5:64:51:b7:78:58:01:53:37:62:5d:00:e2:08:f2:e1:
         13:86:3c:2a:18:d0:db:31:22:4a:a1:65:d2:af:82:30:f7:78:
         0a:a8:21:16:d2:00:62:4f:4c:20:58:aa:34:bc:e8:ca:0a:b1:
         bc:5a:0d:0e:59:ce:04:8b:77:03:10:74:ca:dd:1d:5a:1b:8e:
         ef:c2:39:61:d9:46:60:25:ea:54:81:76:f8:05:4c:8f:75:77:
         87:64:c6:eb:6f:72:43:9b:8b:50:26:5a:ac:34:e0:72:2a:03:
         5b:d6:d1:70:63:f9:70:74:46:18:cb:06:96:4e:b2:a4:98:a5:
         87:d2:98:eb:a5:58:0d:31:6e:e0:19:3c:47:09:e3:0c:ba:db:
         58:a5:a5:1a:55:8d:6f:da:8c:1e:4f:b3:d2:55:ac:2c:da:b0:
         d5:3d:9c:9d:80:d2:50:a8:f6:7a:87:df:2d:c6:83:17:3a:5c:
         e1:68:81:61:ec:44:df:88:66:a3:a0:e4:38:14:da:36:9a:b5:
         bd:2e:10:91:5b:e6:c2:8b:24:4b:71:12:bf:25:e8:e4:b3:52:
         9a:64:8c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----