Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
File:                     2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json)
Hash identifier:          TDz3d2SiVL1hGTHdwgW+uMH1d54DyEB7WQaYqRIvPoI=
Subject key identifier:   78:68:05:D1:4E:98:87:0D:D6:77:8D:50:B8:88:D2:CB:72:A7:56:46
Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
Certificate issuer:       /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Certificate serial:       38111511D3359BAC25AFC5979E47EA8ADE103CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
Manifest number:          5F
Signing time:             Sun 13 Apr 2025 04:15:37 +0000
Manifest this update:     Sun 13 Apr 2025 04:10:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:00:36 +0000
Files and hashes:         1: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=)
                          2: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=)
                          3: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: Kadz6YSL4Ozl4qtLe0w4UgJszeDydTG7nKGbc49C29U=)
                          4: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:11:15:11:d3:35:9b:ac:25:af:c5:97:9e:47:ea:8a:de:10:3c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
        Validity
            Not Before: Apr 13 04:10:36 2025 GMT
            Not After : Apr 14 07:00:36 2025 GMT
        Subject: CN=786805D14E98870DD6778D50B888D2CB72A75646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:95:3f:d6:44:97:30:1c:24:28:a9:30:c0:
                    d2:6a:79:55:c8:2c:a5:1f:9a:13:96:ad:3a:47:1d:
                    d9:29:d1:88:61:5b:9b:9d:c1:01:62:20:29:0b:72:
                    5d:63:a3:c1:e7:61:1b:70:08:22:8f:cf:3c:0c:c2:
                    28:9c:02:3c:f8:26:e3:0a:fd:68:4d:0e:1e:d5:e6:
                    f6:18:90:9a:eb:42:ad:6f:f3:44:b1:c7:f1:a5:9f:
                    d9:80:62:0f:7e:57:be:ea:79:72:7f:09:03:48:0a:
                    a0:fe:17:64:eb:33:62:96:c3:c1:c5:74:50:a3:62:
                    1b:d5:25:6e:6b:3b:e8:b4:1b:cb:e3:f3:2b:c7:f1:
                    b4:6f:60:1d:c2:93:da:78:d0:ed:56:33:76:77:b0:
                    de:ea:6b:09:6f:a1:f1:b5:cd:8b:bc:67:8f:c7:d8:
                    2b:9e:35:cb:fd:92:67:0c:2d:58:5f:09:2d:b5:3c:
                    20:dc:39:fb:4e:23:bb:7e:0f:62:93:d5:94:a2:d9:
                    c0:c7:d7:aa:d8:0f:73:66:33:8a:a4:d9:6d:41:bc:
                    7f:48:15:91:27:ca:98:2d:05:3e:83:5d:28:69:62:
                    57:91:67:c4:7a:43:0c:3d:4c:69:58:e1:b5:2a:50:
                    5c:9a:dd:cc:9b:a8:4c:14:20:ae:07:ef:ee:5f:8a:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:68:05:D1:4E:98:87:0D:D6:77:8D:50:B8:88:D2:CB:72:A7:56:46
            X509v3 Authority Key Identifier:
                keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f0:b8:5c:fd:d9:0d:2b:7d:4f:a6:45:78:25:f7:c0:5a:31:
         8f:c0:40:a8:f0:c9:ef:e5:14:57:57:1c:42:8d:01:da:e1:8c:
         90:99:b3:4c:67:aa:06:a6:cb:5d:5c:a5:4c:0f:7e:d5:21:9f:
         50:ed:8f:59:19:56:df:0d:68:68:5b:ea:ca:6b:f1:e7:a0:8e:
         b0:59:5b:e7:c6:a2:1d:2e:11:1b:fc:ae:7c:5d:78:a1:b6:e1:
         3a:54:24:70:d5:7b:d0:31:52:90:87:13:f1:d4:9e:48:3e:72:
         c7:a8:b7:a6:71:68:85:6d:f2:89:20:c6:d3:6c:49:8e:ad:4f:
         d1:a0:90:41:88:45:dd:3f:cd:84:6b:38:fd:2c:f5:43:93:68:
         1f:05:41:71:f9:41:ba:4c:03:3d:f3:52:2d:89:b4:f3:49:d4:
         11:be:1d:c0:cc:2f:ba:ae:40:41:67:92:96:2c:65:7c:50:3d:
         97:17:a1:9f:f3:4d:34:d9:bc:11:62:a9:f3:f4:a7:ec:3d:db:
         b9:a3:2e:9f:11:da:c9:6e:5d:fb:24:e0:c0:5e:c0:62:00:74:
         6f:ac:8d:01:b3:3b:ca:27:b2:d5:43:77:f1:8d:f2:7e:7b:38:
         3f:2e:ed:a3:da:ae:ae:6d:32:66:37:83:04:18:15:17:6b:73:
         ba:c1:db:e3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOBEVEdM1m6wlr8WXnkfqit4QPLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2
N2FhZDA1ZTAeFw0yNTA0MTMwNDEwMzZaFw0yNTA0MTQwNzAwMzZaMDMxMTAvBgNV
BAMTKDc4NjgwNUQxNEU5ODg3MERENjc3OEQ1MEI4ODhEMkNCNzJBNzU2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhI5U/1kSXMBwkKKkwwNJqeVXI
LKUfmhOWrTpHHdkp0YhhW5udwQFiICkLcl1jo8HnYRtwCCKPzzwMwiicAjz4JuMK
/WhNDh7V5vYYkJrrQq1v80Sxx/Gln9mAYg9+V77qeXJ/CQNICqD+F2TrM2KWw8HF
dFCjYhvVJW5rO+i0G8vj8yvH8bRvYB3Ck9p40O1WM3Z3sN7qawlvofG1zYu8Z4/H
2CueNcv9kmcMLVhfCS21PCDcOftOI7t+D2KT1ZSi2cDH16rYD3NmM4qk2W1BvH9I
FZEnypgtBT6DXShpYleRZ8R6Qww9TGlY4bUqUFya3cybqEwUIK4H7+5fikTJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUeGgF0U6Yhw3Wd41QuIjSy3KnVkYwHwYDVR0j
BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi
NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl
cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k
MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy
NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPC4XP3ZDSt9T6ZFeCX3
wFoxj8BAqPDJ7+UUV1ccQo0B2uGMkJmzTGeqBqbLXVylTA9+1SGfUO2PWRlW3w1o
aFvqymvx56COsFlb58aiHS4RG/yufF14obbhOlQkcNV70DFSkIcT8dSeSD5yx6i3
pnFohW3yiSDG02xJjq1P0aCQQYhF3T/NhGs4/Sz1Q5NoHwVBcflBukwDPfNSLYm0
80nUEb4dwMwvuq5AQWeSlixlfFA9lxehn/NNNNm8EWKp8/Sn7D3buaMunxHayW5d
+yTgwF7AYgB0b6yNAbM7yiey1UN38Y3yfns4Py7to9qurm0yZjeDBBgVF2tzusHb
4w==
-----END CERTIFICATE-----