Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
File:                     77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft (raw, json)
Hash identifier:          XFe/Z393V5dSbiPTwMXibprBtKzaQUxoL1C75bUrFzI=
Subject key identifier:   4C:4B:4B:2E:10:2C:7A:55:21:98:76:13:F6:1F:99:B7:64:20:AF:CB
Authority key identifier: 77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2
Certificate issuer:       /CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72
Certificate serial:       7AC5FCC16F2D331322A301D3DCC5972150B82D5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
Manifest number:          ED
Signing time:             Fri 28 Feb 2025 08:21:26 +0000
Manifest this update:     Fri 28 Feb 2025 08:16:26 +0000
Manifest next update:     Sat 01 Mar 2025 08:24:26 +0000
Files and hashes:         1: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Pz8YuajHR3RKHabgAdN5D6D4yfaEKoRCNMV/secsEfc=)
                          2: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: oP/+2n5Cjna0fXd3Uue3NmDpz4g1Sc9gKwpKaACd5fA=)
                          3: 77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl (hash: GRKREv+GYo+wahPjZt8+TIm83Y7TGKIrhr6ysAZswsg=)
                          4: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 97vZ9tjE/B2cFID5TaKGht939nhzUnF3N3C8Tt+dRqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c5:fc:c1:6f:2d:33:13:22:a3:01:d3:dc:c5:97:21:50:b8:2d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72
        Validity
            Not Before: Feb 28 08:16:26 2025 GMT
            Not After : Mar  1 08:24:26 2025 GMT
        Subject: CN=4C4B4B2E102C7A5521987613F61F99B76420AFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:d4:f8:37:c6:02:a1:e6:3c:bc:a8:6e:2f:
                    3e:dd:5f:7f:87:16:74:21:45:ea:8b:7e:67:13:0d:
                    f4:84:4a:3e:47:7d:05:04:1a:fb:43:d7:79:4e:48:
                    f0:66:41:c2:27:e2:9a:ab:44:69:6b:cd:85:84:2c:
                    ef:09:9a:8a:e2:2b:72:45:1d:40:3b:68:61:a1:5f:
                    18:a3:fa:f2:ba:a2:b1:4d:c5:45:7a:41:20:27:fc:
                    5d:cd:6d:56:88:3f:85:d2:36:86:3d:01:b8:65:a8:
                    82:a6:08:cf:79:cd:fe:5d:2a:d3:ee:fb:23:d8:aa:
                    b7:13:ca:84:72:0a:b4:20:ee:d8:8e:45:69:9b:58:
                    59:9d:3c:73:5b:a4:f4:45:a9:4b:c2:69:b7:7a:ed:
                    6d:18:06:17:0a:f4:1b:f8:bc:f5:4b:01:95:1e:63:
                    7a:ed:90:6b:a2:c6:bb:0d:d5:cd:f0:e0:59:da:51:
                    08:ed:1e:df:bf:6e:5a:47:7b:96:53:52:8b:02:ed:
                    5b:b8:e4:a2:af:bd:e5:38:8c:d8:2e:b0:c4:d4:83:
                    0b:7c:1a:46:d9:dd:2c:2a:64:56:97:cc:e5:40:5f:
                    40:1c:f2:5d:03:b9:a0:d1:fc:76:8a:61:d5:77:67:
                    23:b0:03:52:31:60:59:61:f1:7f:48:23:e1:7e:99:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4B:4B:2E:10:2C:7A:55:21:98:76:13:F6:1F:99:B7:64:20:AF:CB
            X509v3 Authority Key Identifier:
                keyid:77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b3:85:f1:dd:fb:5f:9f:94:61:fc:b2:da:94:db:db:ee:ac:
         a8:f9:ec:7e:ce:ad:8f:4f:ce:40:b1:1d:7a:1d:fc:0a:c9:1d:
         63:93:f8:19:5d:52:a5:de:1e:ad:24:d5:24:66:43:97:dd:64:
         1d:85:f1:4a:1e:bc:e5:f3:2d:94:a2:73:1c:f0:25:94:9f:aa:
         d6:7f:72:c5:38:c0:36:a8:82:ef:ce:d4:3e:f6:c0:d3:7a:ea:
         bd:a6:e8:5f:d9:3f:86:db:96:e1:d7:ea:83:ca:5d:4c:64:73:
         65:d6:e7:c7:e8:a1:74:fe:d9:ad:eb:aa:4f:e9:cd:7a:bb:ec:
         3e:4c:94:41:ca:85:5f:61:af:72:ed:37:7d:a4:8f:86:7b:4e:
         eb:0c:06:7a:7c:33:5f:ea:f6:9f:79:41:1a:66:8e:97:41:1b:
         29:bf:72:73:68:15:bd:e2:df:3e:c3:60:7a:74:f4:82:bf:29:
         46:dd:ed:ea:75:2e:40:90:8d:ae:7d:fc:c2:68:4b:58:09:f3:
         d2:c5:82:41:36:18:94:42:22:d6:32:f1:cb:e8:8f:67:3e:ef:
         80:19:43:37:28:06:9d:1c:51:95:24:7d:73:21:58:bc:25:2a:
         66:d9:a3:81:26:2a:d4:25:4a:4d:94:be:28:96:18:18:d3:df:
         29:97:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----