Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
File:                     75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft (raw, json)
Hash identifier:          iJBscRVbI6H1lB/RBksU9y69aexggtBDfmZ/39ZYrEo=
Subject key identifier:   3A:BF:D3:00:EF:79:FC:10:F3:20:BD:51:6D:FB:1B:BD:51:17:20:CA
Authority key identifier: 75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70
Certificate issuer:       /CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
Certificate serial:       64228193C683082387EE4B73AF3A5F7234CCA924
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
Manifest number:          01A1
Signing time:             Thu 03 Jul 2025 01:50:58 +0000
Manifest this update:     Thu 03 Jul 2025 01:45:58 +0000
Manifest next update:     Fri 04 Jul 2025 03:40:58 +0000
Files and hashes:         1: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: ZKnqXWpL638YuDEQpZ7F3g5bqELtKVJQB4+caqr2NiE=)
                          2: 5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer (hash: s62YWKeFlE1bDzhZO2SkyAxMHud2ywPfovj8Y4ybUvA=)
                          3: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: DeNLRbWhS9WKIEvlMBYaR+2p0F2qMHWNHV7i4if0F4Q=)
                          4: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl (hash: 2M2kI/tlm6Fx6Sj0qrX3yv68YosaJiFelhSAPyZ/X4I=)
                          5: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: +oN/MdgSycgZ3iltmrx2LnazIG402VP1RhBuB1dJOWQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:22:81:93:c6:83:08:23:87:ee:4b:73:af:3a:5f:72:34:cc:a9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
        Validity
            Not Before: Jul  3 01:45:58 2025 GMT
            Not After : Jul  4 03:40:58 2025 GMT
        Subject: CN=3ABFD300EF79FC10F320BD516DFB1BBD511720CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:a3:f5:4b:6b:27:6f:e7:57:e3:29:f4:99:
                    aa:1c:fb:81:39:5a:16:1e:8d:54:33:a2:36:64:7c:
                    4f:28:33:41:0b:b5:8b:6e:56:b5:23:3e:50:05:8f:
                    8a:87:ad:07:2a:d0:8a:b1:f0:43:6a:87:bd:1e:94:
                    27:6d:e7:82:31:0a:7d:e1:44:37:15:ec:07:81:4b:
                    7b:32:a7:57:4d:e0:de:23:97:ce:f5:2f:b3:ba:61:
                    09:32:dd:c8:64:cf:15:2b:8b:56:e4:27:5a:d4:a5:
                    ad:f1:0a:1f:bc:d1:20:43:08:26:1d:6b:54:1c:d2:
                    89:9d:4a:80:42:0f:5b:19:76:67:f1:7e:79:b1:98:
                    85:8c:13:99:a7:3d:94:ab:3a:d5:98:15:1c:82:d2:
                    b9:33:5e:d1:83:61:2e:49:ed:d3:54:03:ca:b8:07:
                    a3:82:f4:69:e0:f1:7f:67:48:b7:66:9b:ca:a9:ca:
                    a4:08:da:ab:40:1d:c3:cd:4f:7f:22:b6:07:82:c9:
                    01:db:51:56:e9:01:54:6d:79:b1:de:70:d8:2f:1e:
                    bc:47:0a:98:6b:a2:82:3b:3c:d2:3b:63:c0:38:38:
                    5e:63:45:cb:2c:fb:76:15:cc:77:88:ae:9b:bc:b7:
                    b4:8b:c0:d9:c6:32:42:ec:bc:40:9e:81:56:22:ab:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BF:D3:00:EF:79:FC:10:F3:20:BD:51:6D:FB:1B:BD:51:17:20:CA
            X509v3 Authority Key Identifier:
                keyid:75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:64:44:7c:f6:c2:03:22:3a:50:9c:ee:49:7f:e5:65:ad:
         7a:b0:75:40:a3:57:3c:d6:7d:d8:d2:3f:e8:cf:8b:7c:90:52:
         70:2f:da:db:e4:e0:73:ad:c9:aa:f2:f5:11:e7:10:d8:11:e5:
         7f:0b:2a:5a:73:c1:dc:9d:4d:8a:9d:0a:84:2c:82:b3:00:c8:
         d6:e7:a6:48:e4:de:0f:5a:ee:db:06:a2:a4:42:17:ec:65:72:
         52:23:ce:30:3d:e1:3b:1a:6a:62:63:22:16:05:56:8a:c7:88:
         7d:91:a5:e3:af:0f:55:48:f8:98:3a:66:f3:e9:20:53:c8:f0:
         a9:de:c1:b0:d1:c7:47:47:18:1a:b3:bd:e6:b5:ba:dd:56:f0:
         71:15:1c:9a:f4:7c:d0:72:7c:06:2a:7a:35:5c:db:ae:15:85:
         a9:ec:cb:b8:ff:6f:2d:56:18:40:72:e4:2e:49:5a:9f:f0:f9:
         62:af:37:70:be:7b:cd:4f:c8:5e:8a:83:7d:e6:67:0d:cb:83:
         20:9f:cc:d2:47:20:e8:f7:1f:2a:95:7c:a7:01:3f:e8:a4:2a:
         a2:8c:1a:79:cb:a5:15:97:b8:56:bc:48:d3:8f:4b:f0:b1:d3:
         fe:c7:13:66:48:62:b8:3b:fb:12:74:5e:59:3b:89:2f:ff:8c:
         09:7d:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----