Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
File:                     974E186C2E15C12700D0165ACC54D7A585EE383C.mft (raw, json)
Hash identifier:          je230a7JetWV3txRAPkC9ALsJifkZ+1Cpg5qB2L31Vg=
Subject key identifier:   82:DA:21:EE:E0:B6:18:4B:D5:40:38:C8:EE:54:EB:1F:D6:C0:BD:B3
Authority key identifier: 97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C
Certificate issuer:       /CN=974E186C2E15C12700D0165ACC54D7A585EE383C
Certificate serial:       3293C3D4E298D91A98F15EEB05AA64AE0E5ECEAE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
Manifest number:          C6
Signing time:             Wed 22 Jan 2025 22:49:59 +0000
Manifest this update:     Wed 22 Jan 2025 22:44:59 +0000
Manifest next update:     Fri 24 Jan 2025 01:52:59 +0000
Files and hashes:         1: 974E186C2E15C12700D0165ACC54D7A585EE383C.crl (hash: LTIiePI+afsPeINzj1oPtxdmtdSd+wjnzjA5GOsV+Zc=)
                          2: 3139342e35382e36352e302f32342d3234203d3e20333937373330.roa (hash: InhM34Dmb3sJqcOLafSmmmFS9YJK3J8Zdwo6bmOS8R4=)
                          3: 3139342e35382e36352e302f32342d3234203d3e20323134373638.roa (hash: y/fox/NDWEI298o75eeGijkFXnfs+27YTJMVLS6ZcwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:93:c3:d4:e2:98:d9:1a:98:f1:5e:eb:05:aa:64:ae:0e:5e:ce:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974E186C2E15C12700D0165ACC54D7A585EE383C
        Validity
            Not Before: Jan 22 22:44:59 2025 GMT
            Not After : Jan 24 01:52:59 2025 GMT
        Subject: CN=82DA21EEE0B6184BD54038C8EE54EB1FD6C0BDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:00:f6:39:df:e1:e8:2d:b0:34:7a:26:66:
                    b3:7d:a3:ef:e3:ba:fe:aa:8c:40:30:f3:3e:6c:b5:
                    00:ba:97:3b:5f:3a:19:7a:dd:c2:a7:dd:07:6b:1f:
                    44:42:55:3f:df:28:76:67:7e:1e:f6:a2:9b:bf:a5:
                    8e:4e:a5:c9:41:7f:ed:85:28:b4:c1:a0:45:45:87:
                    00:69:e5:6a:06:65:d4:8a:df:4b:f0:5a:40:b1:28:
                    bf:ef:5f:3b:13:f8:b2:0b:1e:8b:9e:74:5f:21:87:
                    08:78:f6:b0:d9:fd:18:90:b0:1a:48:43:71:af:94:
                    71:14:64:d3:59:33:3a:c7:3d:6e:69:ae:4b:b9:9b:
                    20:7e:69:fa:be:75:4c:a8:9d:5d:be:41:27:81:6b:
                    8c:e8:e1:44:2a:a2:89:fe:a0:21:0a:20:cb:4a:2b:
                    67:11:c6:65:a3:18:be:ec:54:74:92:6e:f4:76:2e:
                    5b:8c:11:12:8c:4f:d8:d1:da:66:bc:c4:62:f4:09:
                    da:fd:5e:93:c5:f8:fd:7e:43:d4:99:28:3a:7e:3c:
                    92:1f:d2:32:e5:9c:9c:70:40:cc:9b:d4:52:d0:57:
                    66:80:ad:70:3a:e2:83:96:39:3e:b2:b8:e4:c8:c9:
                    67:af:93:cd:dc:2e:19:e0:b8:63:a6:8c:37:1b:0e:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DA:21:EE:E0:B6:18:4B:D5:40:38:C8:EE:54:EB:1F:D6:C0:BD:B3
            X509v3 Authority Key Identifier:
                keyid:97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:14:8f:2e:0f:01:49:0b:c7:1b:59:80:63:0f:5c:a2:8f:
         3c:f6:32:dd:ff:3f:d9:4c:aa:1f:92:6f:f0:b8:79:e8:6d:46:
         43:34:6a:12:4b:c7:9b:05:6c:44:2c:29:d7:ed:8d:c7:fb:f3:
         0a:d2:dd:49:44:31:c0:26:13:95:9f:d7:c8:12:ad:f5:f3:5b:
         a1:16:ed:50:93:dd:44:92:f5:8d:60:a3:96:24:b5:5a:7a:47:
         b4:fd:28:ce:5a:39:1f:cc:d8:8d:47:6e:e9:3b:92:0d:fb:24:
         8b:a4:23:21:f9:ba:44:cc:eb:e9:5d:16:2e:c3:f2:cc:03:4a:
         93:2d:7e:b7:50:a0:fc:9b:0f:19:20:e8:24:f7:b7:87:c4:6a:
         da:01:f4:d5:2b:09:b9:76:cf:c7:57:a2:02:45:99:2b:01:69:
         2f:d5:6a:a2:f4:1e:e2:4e:c0:a9:c6:b6:bc:5e:78:65:73:90:
         14:5d:b0:4f:f3:23:f7:6d:e2:c9:27:26:56:b6:4d:ce:9a:69:
         1f:19:fe:95:7f:1b:80:52:e1:64:84:d9:7a:e9:ea:96:1a:06:
         48:7a:43:07:a1:6f:77:df:92:25:cb:cc:3a:5c:97:9e:f4:bb:
         3f:20:6b:56:27:61:1c:d5:b1:94:3f:bf:b2:aa:3a:3b:df:e7:
         d9:57:74:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----