Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft
File:                     F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft (raw, json)
Hash identifier:          bh3XF0eUAau/ba6ZWjElbMPDi2Y4qZG1UGTaUafj2W0=
Subject key identifier:   A5:C8:0F:AF:21:60:A4:0E:78:32:91:D4:DC:F1:66:F8:F2:1A:97:46
Authority key identifier: F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
Certificate issuer:       /CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
Certificate serial:       0463A5BA4737536067AEA79408F66C541ADA60C3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft
Manifest number:          11
Signing time:             Sun 13 Apr 2025 15:03:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:58:50 +0000
Manifest next update:     Mon 14 Apr 2025 16:10:50 +0000
Files and hashes:         1: F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.crl (hash: EeFvM24t5rtQObCKMgxihh5IsZtE/VlS15zyccmIR/8=)
                          2: 3230322e35302e35332e302f32342d3234203d3e20323133373037.roa (hash: iaFeacRadeJFe1GETpDvF5UZqc5zJysNy36E46llZNg=)
                          3: 326130363a396634303a3a2f34382d3438203d3e20323133373037.roa (hash: RxP3G9Dz65dSnJ+P11VF2MeHIurw059gZkJBqC2EPl8=)
                          4: 326130363a396634303a313a3a2f34382d3438203d3e20323133373037.roa (hash: n27iqAXuEam/zakDHlq3DR1FmT6AVTRE8CLqIku5Ff8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:63:a5:ba:47:37:53:60:67:ae:a7:94:08:f6:6c:54:1a:da:60:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
        Validity
            Not Before: Apr 13 14:58:50 2025 GMT
            Not After : Apr 14 16:10:50 2025 GMT
        Subject: CN=A5C80FAF2160A40E783291D4DCF166F8F21A9746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:77:f4:18:3d:96:f3:80:00:5f:fd:bf:0d:
                    d0:c0:76:a4:8e:2a:d6:fe:e8:76:6e:77:2f:c2:2c:
                    8e:2d:a7:e8:d5:0e:92:b0:bd:75:ca:26:18:99:98:
                    1c:6a:d5:e9:fb:3a:67:31:ff:79:8c:e0:57:23:e1:
                    29:3f:97:13:16:a3:9a:f0:c5:f1:16:d2:ae:b0:23:
                    8e:ea:fc:b9:28:fe:75:5c:ff:7a:30:b6:e0:82:3e:
                    61:34:c7:79:25:05:99:29:ca:50:81:2a:da:65:fa:
                    5e:bc:b4:4d:9a:d7:0a:72:38:98:9f:7d:9a:da:55:
                    4c:7c:2f:75:ec:6a:62:06:01:8c:0b:6c:e8:46:87:
                    d9:36:c7:f9:9b:aa:f9:45:65:f9:70:db:1d:65:2e:
                    3e:33:3e:2e:26:8f:52:d2:5f:00:f8:55:44:9d:6e:
                    e2:9b:b3:e7:e1:ff:f8:b4:65:d8:2d:2b:5c:83:f4:
                    39:0b:16:d3:b6:b4:11:fb:5b:7a:47:78:54:ed:52:
                    0e:a4:82:cf:d3:7d:31:bf:c7:71:61:e9:7a:2a:c3:
                    fc:18:11:61:08:b2:96:86:51:37:16:22:7f:69:79:
                    e8:ec:55:8c:97:d2:ce:f0:4f:7f:d7:d9:59:ee:8f:
                    63:b7:e7:ff:46:f5:d4:32:04:f4:be:3d:ec:e3:95:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C8:0F:AF:21:60:A4:0E:78:32:91:D4:DC:F1:66:F8:F2:1A:97:46
            X509v3 Authority Key Identifier:
                keyid:F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:82:82:66:49:f4:c3:21:a9:3b:35:4f:c7:e9:3f:82:1c:3a:
         62:d9:c9:30:5b:7b:6f:92:41:28:cf:18:e7:b1:b8:f6:b9:85:
         0e:a4:a4:5e:88:f1:37:39:d0:1d:1b:8f:5f:e5:58:42:1f:08:
         4c:fc:86:35:0d:d3:2f:b7:73:da:fa:e8:8d:3e:95:82:b1:aa:
         86:85:8d:23:6b:4b:18:1c:90:34:5c:75:58:1e:cc:f5:c7:83:
         6b:b6:c0:a4:ba:99:be:2e:8b:42:c4:4d:b1:fd:27:7e:75:a2:
         fd:b7:7a:3a:d5:1c:82:9f:f4:e9:e8:f2:96:b1:bd:94:1c:86:
         10:7e:47:0a:a5:5d:4f:02:10:82:25:8d:5a:e0:c0:d7:d3:44:
         c2:64:29:97:dc:3e:19:1b:d8:38:19:e1:9e:8a:1e:fe:32:d7:
         70:d6:4c:22:f5:b7:f2:64:f1:b5:20:d4:57:ae:c6:37:8f:18:
         1d:40:5c:35:45:76:7f:93:b6:6f:dc:f3:dc:48:4d:8d:27:7f:
         98:20:0e:a6:8a:2e:a0:3c:ab:f7:95:09:b6:c5:2c:3b:7a:59:
         78:2e:43:43:f2:b0:3a:e5:54:00:a3:ee:51:e7:db:69:d0:3a:
         6e:fe:08:36:66:bc:63:a5:c6:c0:f6:ff:02:d1:00:b6:1b:79:
         f3:8e:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----