Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft
File:                     FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft (raw, json)
Hash identifier:          RhzPIyzLxaK7U30RrUqXyjmw+g5n/2FJ4ZarUYljgqM=
Subject key identifier:   9A:8B:79:90:64:7C:3F:11:5F:FA:9A:F6:32:B3:75:48:F6:C4:52:7F
Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Certificate issuer:       /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Certificate serial:       5302CA0E2C3319104D6CEA74932794F579B76DDB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft
Manifest number:          9A
Signing time:             Mon 14 Apr 2025 05:16:49 +0000
Manifest this update:     Mon 14 Apr 2025 05:11:49 +0000
Manifest next update:     Tue 15 Apr 2025 08:40:49 +0000
Files and hashes:         1: 323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (hash: 0zlxQTxh7vvfaeWuK2Hw3nih0UKatPrmAKiXcV1p/ig=)
                          2: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl (hash: 6xWJMo0QnCs+z3rqNwE8+d9Txp2GzdWdWNaDzbx+qxE=)
                          3: 323630323a663736313a3a2f34302d3438203d3e20333937373330.roa (hash: UabIBDSP/jRxPjVYe42Rz6FfziQlrmtKMNVTrVjL1tk=)
                          4: 323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa (hash: L5IT8JeK38uNLCiVqoJ/A1O+xsuyrDeUorstCcbnlko=)
                          5: 32332e3133322e39322e302f32342d3234203d3e20333937373330.roa (hash: BrbquvaT7gSaBvF2dUV9AqKeXE06mRUUDpvsSUbe408=)
                          6: 32332e3133322e39322e302f32342d3234203d3e20323134373638.roa (hash: NdlK1zYqdrKSuU5F6Cse146TEQ/3Wx9fQDxzRBJIZZw=)
                          7: 323630323a663736313a3a2f34302d3430203d3e20333937373330.roa (hash: nA09F4i7ezyxrO7OoVlToYHyYyAdhivh99ADt+i0fxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:02:ca:0e:2c:33:19:10:4d:6c:ea:74:93:27:94:f5:79:b7:6d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
        Validity
            Not Before: Apr 14 05:11:49 2025 GMT
            Not After : Apr 15 08:40:49 2025 GMT
        Subject: CN=9A8B7990647C3F115FFA9AF632B37548F6C4527F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:5b:e6:cd:eb:25:71:49:0a:b1:4a:cc:6f:
                    dc:7d:c5:cb:c8:8f:a5:be:04:5d:eb:07:55:8c:40:
                    de:a1:d8:18:9d:ab:a4:da:55:e1:1a:ba:43:19:52:
                    f4:09:ee:46:e5:a5:8c:ba:04:24:2f:7c:13:b3:6b:
                    02:77:1e:be:18:f4:e1:80:d2:5f:a0:68:43:88:a8:
                    d1:05:a4:0a:da:3b:cd:87:82:f5:a3:c7:79:df:8c:
                    92:e7:8c:07:ae:51:ec:20:97:5b:b3:50:3a:6c:32:
                    d7:24:95:02:59:4d:bd:bf:52:7c:bd:d1:79:66:30:
                    e3:74:00:4e:4b:2b:e5:e0:87:4c:42:c8:f7:9d:b7:
                    fc:74:34:96:bd:1f:c6:c5:1b:0b:c9:eb:74:69:74:
                    0b:de:aa:d5:2e:7c:eb:46:32:19:2c:2f:b7:46:9b:
                    60:b3:38:e4:3a:96:c9:93:e9:77:df:c6:85:4f:3a:
                    d8:7d:7e:b3:ca:5d:27:e1:94:51:dd:19:11:af:6a:
                    3a:ae:d9:43:b3:f2:3d:bb:42:9c:22:b1:bf:25:1f:
                    ca:53:07:ef:22:27:5e:fc:ae:b4:24:e9:8e:d7:4a:
                    66:a0:2d:d8:9f:43:de:60:36:3d:b5:18:1c:ad:24:
                    d8:79:a9:52:10:dc:d8:27:a7:02:f3:36:f2:81:a9:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8B:79:90:64:7C:3F:11:5F:FA:9A:F6:32:B3:75:48:F6:C4:52:7F
            X509v3 Authority Key Identifier:
                keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:98:46:13:89:94:f3:46:1f:39:5f:2e:f9:fd:bb:cf:b3:
         36:74:d7:3b:6c:32:c2:ab:1c:2e:11:6a:bc:94:ff:15:e5:da:
         06:b2:e0:0a:03:63:2b:11:c5:fc:ed:9b:fc:25:47:e6:bd:42:
         9a:4e:51:b4:d3:c9:76:76:ad:62:14:76:fd:d0:30:ef:68:c4:
         df:65:fb:c0:3a:66:96:c0:c8:12:99:b7:d6:32:52:f6:ce:9a:
         b1:d8:f5:1e:0f:1b:35:10:1b:5c:d8:cf:22:47:95:31:7d:a0:
         38:df:16:84:fb:80:39:ec:8b:ff:c8:0b:de:44:b7:42:fe:b2:
         7e:04:20:a9:31:07:36:b9:43:c6:16:1e:6c:21:81:41:36:67:
         45:56:ec:61:ca:0e:c5:20:0c:38:ed:3a:9c:32:33:ea:9c:75:
         03:b1:ef:ff:ca:e1:92:aa:e7:a1:0a:1a:d2:90:46:92:85:3b:
         b3:ed:95:4c:67:32:6a:57:19:8e:38:ef:7b:03:27:1e:47:9f:
         7b:66:77:97:bc:19:1c:bf:47:a1:9a:2f:bf:f5:55:3f:ec:d2:
         a8:af:6b:e9:23:a1:e1:ff:04:10:1e:34:5e:30:21:6f:92:c4:
         d6:87:47:ec:3c:b0:38:2b:f0:67:9d:a1:da:35:93:77:21:a4:
         a7:75:17:3a
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUUwLKDiwzGRBNbOp0kyeU9Xm3bdswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj
NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwNDE0MDUxMTQ5WhcNMjUwNDE1MDg0MDQ5
WjAzMTEwLwYDVQQDEyg5QThCNzk5MDY0N0MzRjExNUZGQTlBRjYzMkIzNzU0OEY2
QzQ1MjdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxRb5s3rJXFJ
CrFKzG/cfcXLyI+lvgRd6wdVjEDeodgYnauk2lXhGrpDGVL0Ce5G5aWMugQkL3wT
s2sCdx6+GPThgNJfoGhDiKjRBaQK2jvNh4L1o8d534yS54wHrlHsIJdbs1A6bDLX
JJUCWU29v1J8vdF5ZjDjdABOSyvl4IdMQsj3nbf8dDSWvR/GxRsLyet0aXQL3qrV
LnzrRjIZLC+3RptgszjkOpbJk+l338aFTzrYfX6zyl0n4ZRR3RkRr2o6rtlDs/I9
u0KcIrG/JR/KUwfvIide/K60JOmO10pmoC3Yn0PeYDY9tRgcrSTYealSENzYJ6cC
8zbygakmWQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFJqLeZBkfD8RX/qa9jKzdUj2
xFJ/MB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz
LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy
NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt
NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i
ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj
MzZkMTMyNDI4NWFhODAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
MjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdmZTc5LzMvRkFBNkM0MjUy
OTNDOEE3RjlDMkZDOTg0RUYwRTI2QTI3NjNEOTc3RC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFS0mEYT
iZTzRh85Xy75/bvPszZ01ztsMsKrHC4RaryU/xXl2gay4AoDYysRxfztm/wlR+a9
QppOUbTTyXZ2rWIUdv3QMO9oxN9l+8A6ZpbAyBKZt9YyUvbOmrHY9R4PGzUQG1zY
zyJHlTF9oDjfFoT7gDnsi//IC95Et0L+sn4EIKkxBza5Q8YWHmwhgUE2Z0VW7GHK
DsUgDDjtOpwyM+qcdQOx7//K4ZKq56EKGtKQRpKFO7PtlUxnMmpXGY4473sDJx5H
n3tmd5e8GRy/R6GaL7/1VT/s0qiva+kjoeH/BBAeNF4wIW+SxNaHR+w8sDgr8Ged
odo1k3chpKd1Fzo=
-----END CERTIFICATE-----