Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          /mXx7XU/Q+DZACLBE4mSVfImIv9CF4UwRSTdx0zE9dI=
Subject key identifier:   12:C3:6C:E8:38:EF:D0:9D:E1:7F:D9:A2:50:1A:1B:8E:4C:7D:5B:E0
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       52B94B2BCE79D930180A8F4DFA9CD30DA3FE02EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          51
Signing time:             Sat 12 Apr 2025 22:46:36 +0000
Manifest this update:     Sat 12 Apr 2025 22:41:36 +0000
Manifest next update:     Mon 14 Apr 2025 02:39:36 +0000
Files and hashes:         1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=)
                          2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=)
                          3: AS215296.asa (hash: KrR5zn63OO70MAFM8gtDuEtBLfsmvIW52AgRXOTcWcs=)
                          4: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: zllZskf7DAhXsH4QRSx08proOZVoTcD4DybjWfhggl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b9:4b:2b:ce:79:d9:30:18:0a:8f:4d:fa:9c:d3:0d:a3:fe:02:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Apr 12 22:41:36 2025 GMT
            Not After : Apr 14 02:39:36 2025 GMT
        Subject: CN=12C36CE838EFD09DE17FD9A2501A1B8E4C7D5BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:08:88:6f:1c:a0:67:88:ed:2a:05:80:de:
                    25:ac:35:6f:b2:a7:84:09:be:ec:20:78:53:a5:61:
                    fa:b1:4d:b5:80:b6:22:4c:32:e1:9c:7b:bc:00:c2:
                    c9:ea:1a:f0:af:b0:36:6f:26:2a:33:d5:97:29:2b:
                    bc:1b:eb:9e:c1:44:2b:fc:96:6b:a4:12:27:48:9b:
                    b7:52:ae:c0:e3:64:78:eb:3b:9d:1a:7d:9f:1d:ce:
                    45:0b:b5:8c:61:91:94:c3:48:d5:75:0d:d2:71:cd:
                    87:e1:05:19:49:21:5f:4a:5c:d5:b7:bc:76:6c:a1:
                    c3:f9:ba:90:8c:d4:1c:54:52:15:ed:e7:ae:63:ee:
                    43:5f:48:ce:c2:5f:5d:a7:ff:d4:06:2e:2c:79:ed:
                    e2:95:6a:cb:37:55:41:8a:8e:e5:22:5b:09:12:50:
                    85:ab:2d:87:36:3b:64:20:91:9d:af:02:cf:db:c5:
                    69:93:5d:17:09:0a:51:55:5a:8d:a6:76:4e:68:62:
                    8b:f5:b3:8c:e5:3e:a1:a6:3f:10:d6:da:d0:9a:5b:
                    b9:c7:69:4f:80:bb:a3:0e:4e:40:e7:a3:d0:14:00:
                    57:05:ee:4d:6f:e7:53:c0:16:92:bf:01:57:6c:c2:
                    ff:bb:84:2c:c6:f9:45:16:2e:48:1a:5f:22:15:79:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:6C:E8:38:EF:D0:9D:E1:7F:D9:A2:50:1A:1B:8E:4C:7D:5B:E0
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:5e:80:ca:05:b8:eb:f1:97:88:5d:d4:9d:97:41:75:0e:
         d9:b5:67:ff:10:45:43:e9:81:bb:29:a6:81:b0:45:b9:51:57:
         1d:80:e7:1a:3f:22:c8:a2:1c:2f:7a:a3:25:10:25:16:ee:d0:
         c8:c4:b2:bf:1c:72:64:51:ab:74:22:5c:2d:e4:d9:88:2d:6e:
         34:25:d3:0e:b3:10:a8:38:b2:ba:b0:72:da:71:f3:63:66:64:
         34:74:b6:9e:48:66:76:f0:a6:c9:76:89:c8:cb:e5:45:87:a1:
         06:e8:d5:81:e2:3a:0a:9f:72:b8:4e:a4:ab:0d:38:80:35:17:
         37:10:7c:b5:c9:29:c8:3a:ab:86:46:10:e3:28:59:cb:ab:27:
         69:4e:f3:fa:57:18:be:07:1a:a6:99:5f:93:cf:1a:bf:2e:7f:
         5a:a4:11:a1:c5:25:bd:02:9e:3a:b6:9b:bf:52:b3:82:0c:15:
         03:40:f5:5b:64:d4:7c:f6:02:cc:0f:71:bf:4c:71:ff:2b:2b:
         5a:e7:7e:f8:0b:e6:5a:f6:08:3a:d1:20:b0:1f:ff:31:95:64:
         1d:46:ff:79:81:08:92:c0:8b:a3:7b:3c:2b:14:83:e5:70:98:
         5e:6d:9b:5c:e9:7a:5b:12:62:05:0c:f4:c8:3c:3a:1a:2d:78:
         4d:47:98:02
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUrlLK8552TAYCo9N+pzTDaP+Au4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1
ODM3MDhiMzAeFw0yNTA0MTIyMjQxMzZaFw0yNTA0MTQwMjM5MzZaMDMxMTAvBgNV
BAMTKDEyQzM2Q0U4MzhFRkQwOURFMTdGRDlBMjUwMUExQjhFNEM3RDVCRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8wiIbxygZ4jtKgWA3iWsNW+y
p4QJvuwgeFOlYfqxTbWAtiJMMuGce7wAwsnqGvCvsDZvJioz1ZcpK7wb657BRCv8
lmukEidIm7dSrsDjZHjrO50afZ8dzkULtYxhkZTDSNV1DdJxzYfhBRlJIV9KXNW3
vHZsocP5upCM1BxUUhXt565j7kNfSM7CX12n/9QGLix57eKVass3VUGKjuUiWwkS
UIWrLYc2O2QgkZ2vAs/bxWmTXRcJClFVWo2mdk5oYov1s4zlPqGmPxDW2tCaW7nH
aU+Au6MOTkDno9AUAFcF7k1v51PAFpK/AVdswv+7hCzG+UUWLkgaXyIVeaQNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUEsNs6Djv0J3hf9miUBobjkx9W+AwHwYDVR0j
BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1
YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn
M0NMTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2EyNTM1MC05
ZTNmLTQ2ZTEtYWUyYi0xYzYxYjZlYTVhZTIvMC81NzhEN0RDOTc3OUIyNzgxNUVC
QjVDM0Y1RkNGMDdDQzU4MzcwOEIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvRegMoFuOvxl4hd1J2X
QXUO2bVn/xBFQ+mBuymmgbBFuVFXHYDnGj8iyKIcL3qjJRAlFu7QyMSyvxxyZFGr
dCJcLeTZiC1uNCXTDrMQqDiyurBy2nHzY2ZkNHS2nkhmdvCmyXaJyMvlRYehBujV
geI6Cp9yuE6kqw04gDUXNxB8tckpyDqrhkYQ4yhZy6snaU7z+lcYvgcapplfk88a
vy5/WqQRocUlvQKeOrabv1KzggwVA0D1W2TUfPYCzA9xv0xx/ysrWud++AvmWvYI
OtEgsB//MZVkHUb/eYEIksCLo3s8KxSD5XCYXm2bXOl6WxJiBQz0yDw6Gi14TUeY
Ag==
-----END CERTIFICATE-----