Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
File:                     CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json)
Hash identifier:          NHYAq6nEDfBfZzgvXCaGUf7uHhsE3RbYip4WuWTaiMw=
Subject key identifier:   8E:4C:80:11:8D:47:B4:CC:33:F6:EB:9F:F2:D6:F2:E3:88:EC:C3:78
Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
Certificate issuer:       /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
Certificate serial:       52D4209F6CC5D52A0DD558A2ACE6A9197A22DD8C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
Manifest number:          011F
Signing time:             Sat 12 Apr 2025 23:30:36 +0000
Manifest this update:     Sat 12 Apr 2025 23:25:36 +0000
Manifest next update:     Mon 14 Apr 2025 02:45:36 +0000
Files and hashes:         1: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: ijdRym+EyqsFPE5giNkwg8+zrX6D3y+HQ5dnlgjDnW0=)
                          2: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=)
                          3: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=)
                          4: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=)
                          5: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=)
                          6: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=)
                          7: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d4:20:9f:6c:c5:d5:2a:0d:d5:58:a2:ac:e6:a9:19:7a:22:dd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
        Validity
            Not Before: Apr 12 23:25:36 2025 GMT
            Not After : Apr 14 02:45:36 2025 GMT
        Subject: CN=8E4C80118D47B4CC33F6EB9FF2D6F2E388ECC378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:49:12:8a:e4:be:a1:08:39:a1:d3:eb:2c:
                    33:74:d9:1b:0e:a1:a7:7c:30:8a:e4:97:6b:7d:b8:
                    a3:0c:84:7a:41:c7:a2:81:8a:4a:49:d7:72:53:23:
                    5e:ad:4c:66:bf:22:e0:7a:aa:d0:dc:ab:a4:d0:63:
                    3b:88:65:ba:56:a9:98:9c:e7:69:ff:95:82:2e:c9:
                    eb:f5:07:d5:b3:25:85:78:41:65:eb:b6:2f:27:8e:
                    94:ce:1a:9e:5f:5a:94:9b:b4:48:51:e7:13:3e:b2:
                    58:c9:d3:d0:e5:5c:1f:40:34:ac:7f:88:b0:61:d4:
                    56:8a:2c:27:26:1e:30:1d:bd:7f:fd:cd:9e:80:76:
                    6a:7f:47:c9:11:5f:51:73:73:46:1b:77:4a:65:49:
                    9e:62:9d:af:bd:a3:05:f0:37:20:e7:b3:4a:fd:49:
                    7a:56:d2:a5:a4:05:f0:4d:b6:a7:56:2c:c1:eb:bd:
                    14:72:19:8b:4c:c3:64:9e:b4:2b:b8:23:f3:01:6d:
                    e4:61:cc:b7:32:0a:fc:f5:f9:61:60:d8:8b:68:df:
                    5a:d0:d1:b2:d9:0f:6e:f9:56:b8:70:d2:1c:7e:9d:
                    cd:f6:50:4b:d9:2f:dd:89:a2:1e:98:7a:0a:51:de:
                    67:5c:4e:ab:43:2f:61:0a:87:8c:61:e6:c2:01:8f:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:80:11:8D:47:B4:CC:33:F6:EB:9F:F2:D6:F2:E3:88:EC:C3:78
            X509v3 Authority Key Identifier:
                keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:d2:0a:7e:ff:51:76:e3:23:e1:cb:2a:29:41:f1:c2:51:
         2b:18:2c:44:1a:58:48:f4:cc:9b:4e:02:b2:d3:f3:f1:f9:5e:
         50:48:6a:a9:d0:f8:75:6a:8f:d5:ec:9f:79:5c:53:f1:29:c4:
         3a:c1:6a:fc:64:65:a8:cf:2e:ab:98:80:70:21:a3:23:3e:52:
         ac:c2:23:8b:14:3e:a2:42:5c:1e:26:c2:d6:10:4c:4f:d7:db:
         c0:71:21:7c:93:dc:73:a0:a3:17:97:e5:fe:2f:e0:40:45:18:
         cd:85:6d:96:d5:55:82:04:34:27:4b:77:b0:3a:c6:aa:27:78:
         c7:e0:20:97:00:dd:19:7f:0b:b2:32:78:6e:7e:1d:c9:54:2d:
         12:0d:c6:fb:42:3c:d8:fd:c4:5d:a3:06:01:cd:ab:23:e8:3d:
         5e:65:dc:32:75:fc:fc:1b:c6:98:bb:f6:73:ff:6f:fa:b8:21:
         b1:e0:d9:15:f3:52:c4:cd:82:7b:23:c8:85:c5:6c:18:6b:5e:
         71:ec:56:dd:62:f5:0c:34:8e:e9:aa:57:26:de:2d:09:6b:da:
         e9:c9:b4:44:5d:f3:c4:6b:87:06:1a:6c:5d:05:66:12:8d:b7:
         c9:e1:c9:ab:f0:b1:98:d8:32:0f:bb:d9:92:61:26:64:10:31:
         c3:ee:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----