Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.mft
File:                     6F184C05E9A68EF8ED5B077D11D0A9D93084A508.mft (raw, json)
Hash identifier:          rSx11UGtvj2whriU/RSb8+3cXtyiw6EDa/2rkVAJ2go=
Subject key identifier:   53:53:A6:73:2A:90:43:23:88:42:46:DB:6D:E2:F8:3C:C4:C1:D1:0F
Authority key identifier: 6F:18:4C:05:E9:A6:8E:F8:ED:5B:07:7D:11:D0:A9:D9:30:84:A5:08
Certificate issuer:       /CN=6F184C05E9A68EF8ED5B077D11D0A9D93084A508
Certificate serial:       03F5C541A503FDBCF8258CD7E81AAB38DD249D58
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.mft
Manifest number:          3F
Signing time:             Thu 23 Jan 2025 03:34:42 +0000
Manifest this update:     Thu 23 Jan 2025 03:29:42 +0000
Manifest next update:     Fri 24 Jan 2025 06:25:42 +0000
Files and hashes:         1: 326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa (hash: 2eUlfOyHgmU4D6Jh0JcmBvp2wwPjwOyZEtlMrKbtYMA=)
                          2: 6F184C05E9A68EF8ED5B077D11D0A9D93084A508.crl (hash: N8Ua7UheKaobK+Vxgb6fFw0voK+gt9JwKZeMLLzCrFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f5:c5:41:a5:03:fd:bc:f8:25:8c:d7:e8:1a:ab:38:dd:24:9d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F184C05E9A68EF8ED5B077D11D0A9D93084A508
        Validity
            Not Before: Jan 23 03:29:42 2025 GMT
            Not After : Jan 24 06:25:42 2025 GMT
        Subject: CN=5353A6732A904323884246DB6DE2F83CC4C1D10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:b1:40:09:e5:d0:67:9a:61:1d:4c:2c:ca:
                    d5:64:3a:ae:2a:7e:ac:9a:d0:d3:36:fc:dd:71:e8:
                    09:3b:be:c5:e0:21:82:8d:95:03:0d:07:b1:c5:a8:
                    fc:bc:da:23:1d:68:e2:7d:72:3c:71:c6:36:6d:1d:
                    41:cb:cf:9f:d4:e1:a3:32:62:20:7e:10:18:d0:50:
                    79:e8:0c:0e:e1:a6:6c:ac:38:0a:b8:1a:85:87:53:
                    4c:3c:37:cf:c4:e8:bf:41:eb:05:b7:26:1f:ce:88:
                    4e:2f:40:8a:de:6f:c3:a6:a9:da:52:9c:05:05:7a:
                    18:3e:50:0b:7c:3a:e9:3b:34:45:57:8c:4b:04:fe:
                    30:5c:95:36:66:95:c4:59:28:dd:06:eb:3b:fc:5b:
                    2b:ac:f3:d2:bc:6d:fe:da:c1:a0:64:6e:81:8d:59:
                    1a:11:92:1a:2d:6d:67:9e:31:83:ad:f9:66:36:0e:
                    a4:0d:fe:0f:dd:75:8c:ec:be:bf:14:11:93:a4:4e:
                    3d:a0:c7:a2:df:dd:73:57:9f:d2:ff:98:50:f2:07:
                    72:07:36:38:df:bd:ba:10:95:3a:f3:b0:39:b3:62:
                    0a:30:ef:26:a0:8f:30:43:f7:20:76:21:2b:d1:49:
                    64:8b:0c:00:6a:d7:f0:30:7d:0f:ee:e1:6a:5e:04:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:53:A6:73:2A:90:43:23:88:42:46:DB:6D:E2:F8:3C:C4:C1:D1:0F
            X509v3 Authority Key Identifier:
                keyid:6F:18:4C:05:E9:A6:8E:F8:ED:5B:07:7D:11:D0:A9:D9:30:84:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:8d:d8:88:4b:df:bd:3a:91:ec:f5:8c:ea:bf:b3:59:b1:9b:
         88:1b:8c:5f:af:71:5f:82:50:3a:90:75:a9:5a:5b:d7:78:68:
         39:f5:99:c8:a9:27:20:f8:b5:01:98:be:81:2f:66:5a:e0:4f:
         c9:89:63:fa:4f:f9:d6:b2:33:84:80:51:55:d9:c7:69:42:b9:
         52:10:8f:90:7d:b0:7e:25:2e:57:d6:91:5a:b6:0b:72:96:91:
         e1:29:12:1f:0e:fe:c8:ba:f9:4b:71:e3:20:0c:69:e8:08:e5:
         72:be:96:3b:ad:69:b4:85:1a:8f:ac:fc:39:39:f3:60:a1:40:
         50:4e:7f:08:8d:e4:55:0b:c0:52:fc:91:45:39:62:09:4e:b0:
         3d:8d:67:0d:5f:82:db:4c:f2:0b:fe:4b:02:c0:01:34:b7:0e:
         40:4b:94:a7:43:86:6c:7f:3e:7f:ac:71:64:76:e4:b0:30:94:
         af:e7:11:fe:9d:01:90:4a:3a:92:5b:40:2a:5b:18:f7:6f:6a:
         f2:d4:8a:50:3d:aa:3d:8d:a8:4a:23:69:0b:34:43:5b:00:23:
         f3:4c:d4:2e:86:58:52:21:8a:f7:16:5e:0a:3a:8b:9e:1d:91:
         e8:be:18:34:83:3e:55:fe:5f:ea:1d:e7:10:5a:e2:26:41:ff:
         4a:57:74:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----