Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
File:                     EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json)
Hash identifier:          P67U+q0VlNgUj5BXPeUDhBa/fWVabxCds3KL6zi6ZfA=
Subject key identifier:   A1:07:03:74:F4:FB:D2:48:2A:9F:6C:ED:9E:9D:97:62:70:6A:13:F4
Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Certificate issuer:       /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Certificate serial:       1437C695D17B4327D6B61367DA074D8E63FFCDE0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
Manifest number:          02A0
Signing time:             Sat 12 Apr 2025 23:41:39 +0000
Manifest this update:     Sat 12 Apr 2025 23:36:39 +0000
Manifest next update:     Mon 14 Apr 2025 01:27:39 +0000
Files and hashes:         1: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=)
                          2: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: vsfC8MmieNSE7qpFzAH7AKIGZheXJCpHlwavw7FZz9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:37:c6:95:d1:7b:43:27:d6:b6:13:67:da:07:4d:8e:63:ff:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
        Validity
            Not Before: Apr 12 23:36:39 2025 GMT
            Not After : Apr 14 01:27:39 2025 GMT
        Subject: CN=A1070374F4FBD2482A9F6CED9E9D9762706A13F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:72:13:cb:65:49:18:d0:e0:4e:51:ea:b6:
                    9d:64:d2:fc:2a:b7:0f:bd:a1:72:80:a4:87:ee:83:
                    fc:79:6a:95:1c:99:4a:76:91:fa:39:1b:44:0e:0c:
                    97:69:0b:56:9a:c4:39:da:22:fa:e9:b6:59:96:17:
                    5d:a2:e1:66:34:9c:22:cf:b7:c7:1e:4d:ce:ef:44:
                    48:e3:d4:1b:8f:09:ba:e3:56:31:2b:0a:5a:e9:fe:
                    71:2e:ed:34:5b:cf:ce:74:b7:11:43:57:d0:9c:03:
                    6e:dd:c6:fb:40:f3:d8:a3:e8:96:bf:e0:b3:df:ae:
                    da:87:60:fd:78:ef:6f:8f:0a:f6:15:e9:f3:dd:63:
                    6e:8b:af:06:fe:c9:0f:4b:7c:08:08:dd:de:22:c0:
                    a9:5d:1c:2d:0f:96:b5:35:5e:0c:0b:5b:c5:6a:22:
                    0f:2c:28:0d:e8:e1:53:db:d0:a8:6b:6a:40:16:5d:
                    c0:50:36:04:ff:e2:23:ac:15:89:fb:49:20:d4:87:
                    12:fa:be:0c:44:7c:ca:75:0d:3f:c2:4f:3a:99:39:
                    0e:76:64:31:e0:e2:d7:9e:4d:7b:f4:b4:42:d3:64:
                    19:ba:53:ca:03:3c:01:f5:37:49:94:61:25:21:f4:
                    a7:33:97:d8:34:9e:67:9f:2e:d9:04:9e:54:0a:75:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:07:03:74:F4:FB:D2:48:2A:9F:6C:ED:9E:9D:97:62:70:6A:13:F4
            X509v3 Authority Key Identifier:
                keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:b6:bb:2f:86:be:73:4a:55:c7:fa:d4:4b:22:64:6f:80:
         23:ee:26:36:95:71:5b:0d:39:5d:cf:a2:df:dd:4c:66:67:f5:
         bc:6b:ba:fe:f9:28:6b:0d:63:5c:93:5c:ad:05:89:ab:09:94:
         87:48:be:16:df:f5:00:42:46:12:a8:af:9e:6a:0d:af:18:39:
         a8:f0:2c:d7:d4:4b:f3:1b:0c:7e:41:e8:7d:b6:82:71:3f:42:
         3a:14:28:c8:b3:75:7f:24:22:5c:9f:85:fe:b5:6f:56:c6:fc:
         b4:07:4f:29:f4:af:a9:f4:4a:ce:79:68:32:d3:d5:1b:10:8a:
         14:3f:10:64:23:26:da:29:dd:e5:f2:e1:28:47:64:ac:92:58:
         82:20:04:29:63:60:92:e1:ee:59:a8:09:1e:5b:90:05:2f:3a:
         1b:9e:db:81:43:37:6f:2d:0c:09:1a:37:76:b5:fe:dc:fd:9e:
         88:d4:ba:d3:4b:7d:b6:ee:ad:12:55:66:3f:fd:16:97:13:32:
         0f:fc:fd:02:9b:ec:e8:ed:b8:53:24:13:b6:b2:2d:0b:eb:24:
         bd:72:69:23:b4:d0:6b:e7:07:dc:af:d6:d0:71:f9:06:8a:70:
         19:13:4c:d3:e0:b1:1c:6b:92:8b:0d:75:d1:24:0e:95:3a:80:
         46:b0:f7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----