Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File:                     52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier:          VA6xlmI4neHG1Aa61zEEGZL6/aHlgxfk/jcpM7RSjIk=
Subject key identifier:   7F:14:A7:E3:4F:33:DC:EB:91:C1:E9:57:DB:2E:3C:F1:55:D8:85:0A
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer:       /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial:       7C106F6B13EF26466FBB6521B0C9D9350894AD15
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number:          017F
Signing time:             Sat 12 Apr 2025 23:28:29 +0000
Manifest this update:     Sat 12 Apr 2025 23:23:29 +0000
Manifest next update:     Mon 14 Apr 2025 02:46:29 +0000
Files and hashes:         1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: y15b3L6uLTMqG4INcWf/PQvBbONd0NCsnwSZb2w1TkI=)
                          2: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: 5jLn1tYtti5DJK9TqNkdMibH5mGLzDQe1BN0OVxqnag=)
                          3: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: HVQR2cbKt8VVrQisjkBAhrhp4KsXJej/OLSmUeqTsY0=)
                          4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: pcBpSLX6wjD10TMOktRdBOucXd2A5gfG7C3Lecbh8gI=)
                          5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: Bu8eu+s1xKEjCs05/XkV2x0FQLM16iFsGrYGYNvS9M8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:10:6f:6b:13:ef:26:46:6f:bb:65:21:b0:c9:d9:35:08:94:ad:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
        Validity
            Not Before: Apr 12 23:23:29 2025 GMT
            Not After : Apr 14 02:46:29 2025 GMT
        Subject: CN=7F14A7E34F33DCEB91C1E957DB2E3CF155D8850A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:fa:91:4e:d2:68:cb:3d:c7:20:5e:fe:0d:
                    5b:75:34:7f:aa:12:cd:9a:77:90:76:2a:59:a9:79:
                    b2:d5:f0:a6:17:aa:93:57:2d:c5:7d:c8:64:46:4b:
                    fb:54:da:7e:61:0f:78:69:dd:02:6d:e7:c8:8e:08:
                    f6:c1:46:39:78:80:2c:98:5e:1b:39:12:67:d0:b9:
                    32:47:fc:66:c1:99:6a:78:b2:38:d7:a9:de:1e:da:
                    64:fd:ed:db:e7:ff:05:36:65:9f:1d:29:f0:d9:5a:
                    47:38:18:c7:3c:4c:41:a1:bd:57:b2:34:39:30:ee:
                    9d:de:ab:cd:4a:72:de:24:b6:37:80:8e:e5:ca:f4:
                    0e:6f:93:48:4c:5d:d4:a5:e7:39:65:52:20:6f:70:
                    ac:eb:89:b2:17:1c:1d:25:78:eb:4b:dd:b6:c6:43:
                    d0:8a:08:46:6f:e4:45:a0:0f:a9:2e:c9:9a:6e:18:
                    5b:b3:3a:51:6d:d7:5b:54:44:40:12:2f:1f:aa:2d:
                    69:48:30:b7:6d:3e:5c:de:b6:e8:35:11:57:36:96:
                    85:96:87:dc:66:a7:2b:84:94:65:59:27:c1:c3:a6:
                    97:68:e1:1c:b7:e3:ee:35:c2:32:61:0d:54:05:db:
                    24:7c:6a:c2:2f:28:55:fe:55:43:a9:fc:e2:db:79:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:14:A7:E3:4F:33:DC:EB:91:C1:E9:57:DB:2E:3C:F1:55:D8:85:0A
            X509v3 Authority Key Identifier:
                keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0a:ad:0c:f4:2d:09:41:2a:0a:85:9a:83:2c:61:54:c2:a4:
         2e:10:f7:8f:e2:35:ff:60:d9:fc:13:43:c6:60:22:4b:58:a8:
         55:2d:53:82:c5:e8:29:03:8c:c7:f1:1f:b3:1d:08:f8:5a:09:
         56:73:31:17:fe:16:3f:af:be:ce:50:82:99:3c:73:c0:cb:b0:
         44:09:1b:dd:7b:f7:90:77:b0:d9:a8:bf:66:b9:3c:0c:3a:37:
         a9:88:3b:14:f2:15:c1:5c:8d:51:70:28:17:b4:dc:fc:f4:a7:
         30:70:52:f0:f7:b8:2d:87:e4:f9:f2:5e:98:5a:a5:0d:ff:ad:
         10:e0:59:e6:81:4e:ea:40:de:fa:88:71:ac:b4:66:30:12:d9:
         11:86:04:dc:dc:05:e6:78:8a:9a:07:04:d7:bd:e9:3b:8e:85:
         66:4c:5c:2b:0b:aa:5e:05:0c:39:f0:6a:82:eb:1f:4a:db:58:
         ee:2c:e9:47:f5:82:9d:99:b2:7b:08:b2:c1:1d:7c:41:2b:54:
         b1:cb:25:ab:fb:41:b8:5a:8c:20:a9:53:20:fc:2e:c4:c0:09:
         37:3a:9a:50:f7:86:20:76:bc:7f:89:18:8c:da:36:e9:1f:07:
         0f:fd:de:06:5a:1b:cf:a8:de:b6:78:14:17:60:c0:5b:aa:51:
         09:46:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----