Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          cYpqRaQJIlJhxKigcfOnjJTDZSjI//bHM5L9ayyuvCA=
Subject key identifier:   18:BA:D6:3C:39:49:CB:6A:AA:3A:1D:FD:72:DC:B8:52:16:EC:B3:5D
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       5206C71884CCEB6A7BD74BACA821D84104ED0CD2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          02E4
Signing time:             Tue 15 Apr 2025 13:23:18 +0000
Manifest this update:     Tue 15 Apr 2025 13:18:18 +0000
Manifest next update:     Wed 16 Apr 2025 15:57:18 +0000
Files and hashes:         1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: lTvrEcisngpuOs/hX2lLJhoF43I+GuvkWrJ36StuwCA=)
                          2: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=)
                          3: 32332e3137342e3230302e302f32342d3234203d3e203135333533.roa (hash: FFpmdrmFTQ1EwGGJtpsh2GlWAknLs7PduieofwpgPt8=)
                          4: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:06:c7:18:84:cc:eb:6a:7b:d7:4b:ac:a8:21:d8:41:04:ed:0c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Apr 15 13:18:18 2025 GMT
            Not After : Apr 16 15:57:18 2025 GMT
        Subject: CN=18BAD63C3949CB6AAA3A1DFD72DCB85216ECB35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:09:15:f3:a8:5f:e6:a0:43:e9:35:e5:ab:
                    df:aa:24:d6:3a:ad:f9:a2:16:93:fb:5b:33:5a:5a:
                    b3:04:61:71:a2:c3:2e:9c:0a:a3:8d:74:e8:1b:82:
                    38:72:d7:e9:54:52:b5:63:29:0f:79:1b:4a:b6:69:
                    7d:63:2a:35:08:9d:09:8d:cc:a9:cd:99:ce:27:2f:
                    c9:fa:f8:af:b0:ca:e6:b0:a3:df:4d:ea:ef:a8:04:
                    a3:dc:b5:86:7a:63:c9:a6:b9:a2:7d:39:df:3f:09:
                    2a:61:62:19:94:ec:4c:a5:60:61:86:72:d4:b7:c8:
                    ac:68:f6:83:0d:c6:f2:48:83:1d:2b:59:af:40:4a:
                    01:4f:e7:69:76:c4:c8:08:31:19:a3:1f:32:5c:ff:
                    e9:00:3c:11:4b:13:8f:48:bc:1c:10:d8:71:f7:7e:
                    88:59:fa:61:45:b1:52:12:d3:6d:98:e2:aa:ca:71:
                    ea:be:c0:81:db:5f:7b:11:5c:00:b4:41:c3:95:6c:
                    65:c1:a2:f6:aa:a5:62:90:b9:f3:f6:f3:c1:e6:b6:
                    8d:f6:48:2c:05:44:77:3d:4d:96:84:68:df:3f:2e:
                    0a:b5:16:68:74:5a:54:1b:93:99:55:97:ed:81:c4:
                    40:5c:ff:ad:a7:72:64:d7:80:25:9a:f5:e8:91:ba:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BA:D6:3C:39:49:CB:6A:AA:3A:1D:FD:72:DC:B8:52:16:EC:B3:5D
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7f:65:9e:07:af:42:af:7d:ed:d3:b7:77:57:01:ce:cc:d2:
         5b:dc:de:61:7e:a3:a6:76:8a:a6:b6:1f:f1:b7:f0:24:2e:fc:
         0d:22:9a:19:ce:f5:f0:c9:ac:65:5a:f6:01:2a:cb:50:7e:12:
         4d:09:52:9b:ab:58:74:e6:27:f7:87:f6:f5:9a:aa:1e:ef:2c:
         ff:81:bf:7c:cf:3b:18:3c:b3:a6:68:9e:b7:90:37:05:1f:b3:
         cb:97:df:32:4e:0f:6a:3a:7b:04:6f:2e:c0:0d:1d:fb:01:5d:
         85:43:18:7d:7c:49:a3:b4:10:e8:57:8c:22:5a:81:ec:88:81:
         a4:50:8f:b9:1e:12:4f:93:c4:85:a9:29:e2:4e:e6:aa:a2:e5:
         c0:31:9b:e0:6b:3c:50:85:d4:ea:84:1f:4c:b5:8f:d2:d2:a1:
         55:a2:f8:e7:96:86:c4:9e:5a:59:46:4b:01:24:ed:da:33:fd:
         71:ec:7d:ad:39:c0:c6:13:67:f5:f6:fb:6e:85:8c:5b:68:4b:
         c6:5e:48:6d:65:bf:d5:77:14:2f:ae:d8:b0:47:2d:82:b0:6c:
         51:91:ae:0a:af:4b:c9:71:0f:e7:5c:c3:63:f6:71:04:3f:9d:
         6d:20:b8:8f:ca:b7:79:b0:a4:d2:f1:e5:80:cd:fd:b6:09:3b:
         f0:b4:35:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----