Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft
File:                     178395FF98E8AEA645CFCD7DF742855D46457BAF.mft (raw, json)
Hash identifier:          BUtHmf7c0zUWQAdkYQjdTJA1UH/2xTdncfTk3HS/Dac=
Subject key identifier:   A0:21:DF:DD:AD:5A:88:FC:B7:A3:14:32:C4:C7:A0:C7:66:20:17:47
Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF
Certificate issuer:       /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF
Certificate serial:       57DB585BDDCFE6D328647EAC9069844C45F23062
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft
Manifest number:          50
Signing time:             Sun 13 Apr 2025 11:43:41 +0000
Manifest this update:     Sun 13 Apr 2025 11:38:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:30:41 +0000
Files and hashes:         1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: tFQ4zhgC2iPnwqXyLnNzgEkZZIC1LjVxrVLEJzRxX40=)
                          2: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: wALn/kuHRs3MtX4loe3ndPMMd8kJpkWDJTPFOhhGFZ0=)
                          3: 178395FF98E8AEA645CFCD7DF742855D46457BAF.crl (hash: /lF5O8BhLI/ySMuf/kF9LccXgvTH7yJY6fBTpv2TkpM=)
                          4: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: DJIGVPPFdKw8WztsRwxSv88N7qWJk5uvTreoiT8psfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:db:58:5b:dd:cf:e6:d3:28:64:7e:ac:90:69:84:4c:45:f2:30:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF
        Validity
            Not Before: Apr 13 11:38:41 2025 GMT
            Not After : Apr 14 12:30:41 2025 GMT
        Subject: CN=A021DFDDAD5A88FCB7A31432C4C7A0C766201747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:78:32:63:a5:f8:1b:d3:3b:d5:ec:9b:d0:
                    a6:28:ba:05:f0:ea:c5:d9:cc:04:25:8e:0b:12:4e:
                    f2:36:3f:5a:7b:a5:f7:23:d9:1a:69:ae:72:18:02:
                    0c:85:b4:d6:b3:7f:db:fc:bd:02:e0:c0:e0:f0:46:
                    16:67:fa:96:9a:6e:6c:4d:ea:87:cb:16:b5:59:4c:
                    b9:1d:f4:c8:87:20:38:ff:7a:dd:74:47:df:27:a0:
                    7b:51:ff:9b:89:bf:3e:71:ac:32:4d:be:d6:9d:b6:
                    47:ea:77:1d:7e:36:60:01:e6:49:0a:e5:06:08:45:
                    25:f6:d6:14:21:9e:5a:c0:55:57:20:70:69:bf:a0:
                    41:de:42:f3:c8:d0:be:fc:7a:82:a1:5b:35:d1:09:
                    a1:aa:e8:ed:2d:96:8a:e7:73:a8:63:5a:07:8b:d1:
                    18:4b:02:92:8c:71:9e:01:e2:14:60:fb:ef:a8:2f:
                    3f:84:43:38:c4:26:f1:66:5b:84:47:b4:69:da:e0:
                    31:45:63:6d:04:34:ee:bb:e1:94:ce:2b:60:ec:6c:
                    40:a9:73:f7:0f:c5:8b:8a:e0:c1:42:4a:af:9e:4d:
                    c8:2e:4e:f9:c7:11:25:8a:9a:f2:86:1f:ae:20:7a:
                    95:7f:bd:8c:ea:ee:f4:77:5e:7a:18:e3:84:a7:fe:
                    55:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:21:DF:DD:AD:5A:88:FC:B7:A3:14:32:C4:C7:A0:C7:66:20:17:47
            X509v3 Authority Key Identifier:
                keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:34:06:36:9f:9a:74:89:1e:1e:da:d2:6f:74:c9:21:f4:c4:
         e0:d4:c6:ee:d3:f0:cf:58:9f:eb:15:92:80:aa:ef:04:a4:9b:
         7a:4e:90:3e:93:34:b0:66:51:34:1b:d8:71:cb:75:6e:d9:45:
         89:2e:cf:8d:f4:b2:dc:ac:93:d4:b2:e6:70:0e:32:a8:b3:70:
         38:16:f4:4f:7a:c4:7a:94:69:3c:22:ac:ce:ca:39:e3:95:bb:
         4c:87:80:dc:ec:72:ff:1d:61:f5:35:db:b0:1a:cc:87:4d:a0:
         a5:13:61:7a:c7:ab:41:8b:b2:45:c9:e2:22:dd:fe:d3:ac:6c:
         d9:55:bd:60:fe:2c:44:5f:af:9f:27:0e:97:0b:cc:36:75:18:
         d3:ca:ed:bc:da:df:4e:dc:5e:e7:8d:92:21:25:50:8e:f7:96:
         4e:6b:bb:b5:e1:ec:1e:85:62:5f:5d:5f:d0:74:55:ae:0f:63:
         1b:a8:f7:15:e0:0b:a4:7e:ce:12:35:98:7f:1f:21:6c:ac:6f:
         fd:01:b6:07:f0:d4:bb:30:56:14:d8:ce:c7:65:ac:af:36:a5:
         a2:45:ad:99:bc:e5:96:c0:17:90:3b:d7:a2:44:dc:9d:47:26:
         a0:88:e1:f2:5b:f0:ed:9e:30:b0:d5:36:2f:d3:88:ab:43:9c:
         46:fa:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----