Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft
File:                     32F267CC5A6C13207B7228C9D0A849752F5036FF.mft (raw, json)
Hash identifier:          H3H6exx08+Z8Wua/HYsd178IOKCANl3gORzsGz9P6Xc=
Subject key identifier:   52:A7:E6:EB:2C:5B:85:10:88:6D:E5:EC:63:01:E0:75:E0:D8:A5:B2
Authority key identifier: 32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF
Certificate issuer:       /CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
Certificate serial:       6AF7C87C87A0849CC0ABB5817A2470465185DF85
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft
Manifest number:          0152
Signing time:             Wed 22 Jan 2025 19:04:42 +0000
Manifest this update:     Wed 22 Jan 2025 18:59:42 +0000
Manifest next update:     Thu 23 Jan 2025 21:55:42 +0000
Files and hashes:         1: 32F267CC5A6C13207B7228C9D0A849752F5036FF.crl (hash: wyhlLvtzPp6q391UCmxxlxMD+WqQwmkEN2QP/ZHt8eU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f7:c8:7c:87:a0:84:9c:c0:ab:b5:81:7a:24:70:46:51:85:df:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
        Validity
            Not Before: Jan 22 18:59:42 2025 GMT
            Not After : Jan 23 21:55:42 2025 GMT
        Subject: CN=52A7E6EB2C5B8510886DE5EC6301E075E0D8A5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:8d:a6:9e:68:4f:2a:cc:69:78:60:1b:5f:
                    ea:8e:74:45:dd:23:7e:6c:15:c4:56:a4:b7:cf:1f:
                    08:93:ab:f2:24:a6:79:91:35:be:96:5e:e2:fc:34:
                    82:b7:46:7b:c6:d6:c3:bc:7e:52:0e:d0:c5:90:7c:
                    ac:f1:18:b5:6d:c3:76:dc:42:7f:98:b7:8a:9d:d7:
                    51:22:71:c0:4d:00:6d:82:04:93:1d:9c:a2:97:86:
                    91:c0:3f:d3:f7:85:5b:a2:c6:b0:18:ce:16:29:c5:
                    e7:20:27:e8:8a:df:21:cd:6e:5b:76:66:37:1c:7d:
                    a2:fd:e2:7a:9b:cd:36:ee:d2:cc:36:76:f5:67:d2:
                    da:d5:5d:ae:bd:db:ca:a9:45:0e:bb:42:9b:10:1e:
                    19:8a:e2:80:07:04:bb:c3:01:45:fe:b2:73:6f:13:
                    3e:e3:c3:32:25:67:3e:86:d2:ed:97:55:91:4b:e6:
                    07:3f:ff:1a:2c:63:ea:d2:43:8a:9f:17:58:8d:53:
                    06:df:e4:95:39:71:94:de:67:cf:ed:7f:00:63:31:
                    c1:a3:66:e1:21:c1:81:6e:c3:42:95:91:35:00:64:
                    9a:0c:46:d8:64:82:97:6b:bc:d7:7f:60:45:f1:63:
                    de:46:00:cf:6a:c7:c1:4f:00:fe:98:c5:01:86:b7:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:E6:EB:2C:5B:85:10:88:6D:E5:EC:63:01:E0:75:E0:D8:A5:B2
            X509v3 Authority Key Identifier:
                keyid:32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bb:de:5b:32:cb:7b:57:a4:4c:0e:04:65:d3:62:73:2c:a1:
         75:28:2f:0a:5b:89:60:9b:c1:26:92:3e:48:5d:5e:e9:54:83:
         0d:ef:48:73:19:51:6f:7e:8c:c8:4d:de:6c:2a:24:f8:21:be:
         77:33:4e:5b:f5:91:66:b7:a6:f2:39:2f:25:5e:32:1a:ac:d9:
         ea:90:4b:38:8f:28:9c:01:e7:27:c9:4b:43:10:0e:8c:5f:06:
         82:b5:be:8c:a4:5b:76:a3:38:aa:44:4c:0c:35:62:76:c3:28:
         b8:be:96:79:8a:7a:d2:67:b2:67:27:7f:3b:12:c3:8a:39:0e:
         6a:1d:53:6d:58:e9:96:cb:5f:f1:c8:88:86:46:7d:d1:55:15:
         b9:a0:fa:40:2d:b2:c8:7e:da:ca:94:64:84:da:56:80:46:ac:
         73:f5:ae:07:ef:5a:a3:1e:9a:e3:d2:5d:a0:3c:ba:31:ea:cd:
         a3:d7:a1:62:10:8b:21:92:30:cb:c5:e9:0a:25:d3:f2:af:47:
         e9:10:81:51:10:f9:03:bd:8d:b1:e2:01:d5:b4:7d:6c:a2:27:
         b2:03:f6:51:76:cc:9b:90:75:b4:0d:d9:7e:1f:1a:13:42:ef:
         a9:d5:43:cc:9f:35:64:27:1c:d2:2a:1a:e0:26:70:a6:01:2b:
         27:41:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----