Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File:                     3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier:          sdKgX/Zs9yEtWS5Yo9ftRMtBvwGvruBpD4BYHL0w9yU=
Subject key identifier:   53:47:EA:AC:FC:4C:8E:A5:77:06:EC:2A:A1:91:7E:6F:66:DF:9C:0E
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer:       /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial:       462376BF6C48680C85F56B3D8B1177F855F89451
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number:          EB
Signing time:             Mon 14 Apr 2025 15:39:16 +0000
Manifest this update:     Mon 14 Apr 2025 15:34:16 +0000
Manifest next update:     Tue 15 Apr 2025 17:50:16 +0000
Files and hashes:         1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: uNVAj+08RkEtqCUkI7HQEIUGKaJdFxRVoxhxVVnxxp0=)
                          2: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=)
                          3: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:23:76:bf:6c:48:68:0c:85:f5:6b:3d:8b:11:77:f8:55:f8:94:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
        Validity
            Not Before: Apr 14 15:34:16 2025 GMT
            Not After : Apr 15 17:50:16 2025 GMT
        Subject: CN=5347EAACFC4C8EA57706EC2AA1917E6F66DF9C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:42:0d:12:fd:5e:6c:21:f5:ac:47:ff:9c:
                    f3:52:c8:39:3a:a7:e5:93:44:fb:3d:2e:51:12:f7:
                    89:c6:26:1a:11:17:17:e9:dd:3c:fe:4d:8a:45:0c:
                    62:15:2f:2f:3d:5e:5b:bc:b5:97:72:56:57:c5:a4:
                    b3:94:23:81:97:9e:98:77:32:10:d5:55:c2:84:57:
                    f6:58:27:16:39:c6:49:fd:c0:26:e2:60:95:da:24:
                    7b:6a:bb:8e:33:2a:36:3f:40:30:38:1f:ba:90:ee:
                    4d:71:7e:33:87:8d:3b:0d:fc:95:21:2e:af:67:c1:
                    b6:c9:2b:86:9f:b6:6b:94:87:63:3c:01:5b:be:23:
                    db:a1:60:a9:12:09:1b:97:92:40:17:e6:ad:be:b8:
                    a5:4e:01:0c:16:e1:6f:e1:aa:98:1c:2c:a7:ad:ec:
                    bc:6b:15:a5:a2:0b:f9:f2:6b:6b:5e:1f:01:9c:bb:
                    c8:e5:95:22:9d:ab:d6:f9:bb:6d:39:04:c6:1f:58:
                    47:f1:6e:e0:dd:9e:af:2a:35:14:b4:64:b4:01:34:
                    f5:dd:45:d0:38:e9:8a:af:34:e6:07:b7:d5:1e:ed:
                    4b:25:5c:e0:5d:fc:97:1c:f9:7e:52:68:f2:8a:0d:
                    46:a3:a4:ac:30:ee:2b:69:75:74:59:2b:01:e8:09:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:47:EA:AC:FC:4C:8E:A5:77:06:EC:2A:A1:91:7E:6F:66:DF:9C:0E
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:75:48:c2:59:23:69:72:c5:97:1c:70:e9:52:44:e3:a6:
         8e:c8:6f:fe:40:52:4a:a0:73:38:cc:7c:a3:c5:bf:3d:ba:c3:
         4c:4d:92:5f:e7:40:46:22:04:13:0e:c0:bc:da:4f:01:6d:17:
         cd:d2:36:e7:7d:bb:84:ba:cd:f9:28:69:31:20:54:00:46:77:
         d4:07:52:ef:92:02:7d:85:23:70:93:5b:03:9f:d7:5e:e0:b2:
         83:10:c1:00:ab:20:08:82:08:e1:9c:8b:dd:6d:18:70:9f:3c:
         38:b0:f7:4b:0e:55:2f:4d:fa:b6:9c:cf:7a:52:f0:c8:3e:c5:
         28:c4:cb:9b:c9:09:b2:29:90:06:e3:f4:2e:1a:52:9c:13:7e:
         e6:8e:f7:06:76:ff:35:fa:12:88:b8:a1:fe:b1:dc:bc:c8:6a:
         56:d1:c6:44:18:f6:eb:5d:b6:c7:22:1e:46:f0:40:09:9b:0e:
         33:d6:1a:b8:5c:ae:d7:3b:64:06:6e:97:b1:5e:ac:f9:89:2f:
         6f:d6:8e:22:2f:af:3f:3b:58:cf:0f:10:ad:b3:b3:f3:35:ce:
         b6:36:c5:7e:68:3b:7e:62:7a:1a:33:19:8c:1c:03:23:04:f3:
         9b:dd:03:11:9c:4c:8c:75:19:23:ed:63:23:d7:23:39:eb:44:
         45:ee:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----