Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft
File:                     A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json)
Hash identifier:          kPMspmznUmD0HcLhNEWbmqIYm+9o4btXd/2CuC/wTzM=
Subject key identifier:   16:08:0A:ED:EE:1E:09:E1:AC:7C:C0:31:82:13:C3:8B:9B:B1:D6:51
Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5
Certificate issuer:       /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
Certificate serial:       2C38D95A158B5E9E523496DBC3BDA18A1BA992F1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft
Manifest number:          033C
Signing time:             Wed 02 Jul 2025 13:08:48 +0000
Manifest this update:     Wed 02 Jul 2025 13:03:48 +0000
Manifest next update:     Thu 03 Jul 2025 14:36:48 +0000
Files and hashes:         1: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: qaHIJSPkxJsqQxmrUEOF/0vyCpR/vYUBJ2KiKF+IkLk=)
                          2: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: 8SLvsZe3VOP8V72yk+PKT72w8iUqmJpSKu2elDQ+WOg=)
                          3: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: wRhHsaZsu3ewIE9RtYdRGoLnUBdlp3JGZWRg+S+aqhA=)
                          4: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: Ba5xfWqOndYVE5HvV9FAMJv5ExmemcLNBu1Yv2cHUgw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:38:d9:5a:15:8b:5e:9e:52:34:96:db:c3:bd:a1:8a:1b:a9:92:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
        Validity
            Not Before: Jul  2 13:03:48 2025 GMT
            Not After : Jul  3 14:36:48 2025 GMT
        Subject: CN=16080AEDEE1E09E1AC7CC0318213C38B9BB1D651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:7f:33:ac:d1:a4:69:5c:aa:45:8e:04:c2:
                    95:d8:e0:6e:7c:69:f9:c0:02:54:3b:93:a9:54:e6:
                    35:c1:54:34:13:99:97:a3:b0:09:83:d9:d0:ac:72:
                    e3:64:75:cb:a8:7f:e1:8e:83:73:7e:b8:d3:b7:00:
                    5f:22:d6:ad:a5:32:a2:99:cd:04:3a:b9:20:5a:9a:
                    75:72:94:0b:ba:3d:12:de:78:19:ac:2f:16:98:ea:
                    72:43:77:23:8a:ec:ab:37:b4:47:ad:52:9f:51:80:
                    2a:f3:7e:c4:2b:ca:b9:67:44:10:7d:79:f0:25:b0:
                    71:2d:1e:ea:0b:32:d8:6b:0e:6d:a9:a9:e7:73:63:
                    d3:93:bc:c9:68:7a:b7:23:2e:96:a1:1c:3f:71:99:
                    90:a7:64:60:9a:b5:11:42:d7:dd:41:94:83:49:29:
                    ec:aa:b1:1f:be:9b:96:e9:eb:e1:c1:1e:c1:e3:f3:
                    db:2d:21:ee:b6:cd:38:ab:4c:5f:d5:eb:15:86:51:
                    c0:e8:cd:c7:98:c9:16:00:49:33:76:ab:e4:74:cf:
                    76:5f:cd:2b:f5:87:43:e0:c4:e6:62:d3:44:7a:a9:
                    53:7b:74:00:23:8a:65:a9:84:99:cf:4f:49:03:f2:
                    fd:a8:c7:7b:43:ce:da:8b:06:f0:2b:1d:b3:d9:de:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:0A:ED:EE:1E:09:E1:AC:7C:C0:31:82:13:C3:8B:9B:B1:D6:51
            X509v3 Authority Key Identifier:
                keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:d5:45:7e:d4:c4:b4:d3:76:7b:0c:a4:9e:f7:2a:9e:7e:
         10:a7:d4:81:6d:04:5a:41:f6:cc:63:9a:ab:56:b0:6b:76:0b:
         e0:ec:88:d5:e2:5d:2c:96:7e:4a:0e:9d:13:eb:7a:d4:5a:ba:
         d1:61:fe:14:08:a6:a6:d1:c0:56:87:43:05:a3:96:81:c8:a0:
         34:e8:04:e9:8b:60:78:2f:da:6b:09:af:5e:80:e4:53:3b:2a:
         7e:0d:55:1a:04:63:16:0d:62:89:f1:f9:a0:c7:ee:89:ba:9e:
         97:f9:47:ab:7e:fe:ef:73:32:0d:c7:f9:41:4e:6d:fa:49:1b:
         df:88:85:0e:5f:81:42:26:f4:1c:b1:02:72:2b:a7:3d:db:64:
         b7:70:21:b7:c1:58:7d:d2:9e:07:22:cc:38:f4:ae:0a:cf:6e:
         57:68:f8:5d:da:19:47:44:af:c6:70:a6:d8:a2:8e:17:99:43:
         a5:61:d1:fe:68:f3:4f:d4:4b:57:a3:04:b4:91:8e:33:34:70:
         71:e1:e5:f1:f2:e6:64:5e:b8:18:1f:f4:67:cb:4b:23:02:58:
         68:40:73:e7:e7:a7:c4:3c:b6:ef:9a:74:45:6c:9b:ca:52:25:
         d8:0b:7f:18:90:62:39:68:bd:03:e6:c5:16:07:a8:06:dc:4b:
         1e:56:79:5e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIULDjZWhWLXp5SNJbbw72hihupkvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4
M0IyMTlCNTAeFw0yNTA3MDIxMzAzNDhaFw0yNTA3MDMxNDM2NDhaMDMxMTAvBgNV
BAMTKDE2MDgwQUVERUUxRTA5RTFBQzdDQzAzMTgyMTNDMzhCOUJCMUQ2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj3H8zrNGkaVyqRY4EwpXY4G58
afnAAlQ7k6lU5jXBVDQTmZejsAmD2dCscuNkdcuof+GOg3N+uNO3AF8i1q2lMqKZ
zQQ6uSBamnVylAu6PRLeeBmsLxaY6nJDdyOK7Ks3tEetUp9RgCrzfsQryrlnRBB9
efAlsHEtHuoLMthrDm2pqedzY9OTvMloercjLpahHD9xmZCnZGCatRFC191BlINJ
KeyqsR++m5bp6+HBHsHj89stIe62zTirTF/V6xWGUcDozceYyRYASTN2q+R0z3Zf
zSv1h0PgxOZi00R6qVN7dAAjimWphJnPT0kD8v2ox3tDztqLBvArHbPZ3r+LAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUFggK7e4eCeGsfMAxghPDi5ux1lEwHwYDVR0j
BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1
NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5
ODcwOURFNTgzQjIxOUI1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8wL0E4MTZGREE4
QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlqdVF
ftTEtNN2ewyknvcqnn4Qp9SBbQRaQfbMY5qrVrBrdgvg7IjV4l0sln5KDp0T63rU
WrrRYf4UCKam0cBWh0MFo5aByKA06ATpi2B4L9prCa9egORTOyp+DVUaBGMWDWKJ
8fmgx+6Jup6X+Uerfv7vczINx/lBTm36SRvfiIUOX4FCJvQcsQJyK6c922S3cCG3
wVh90p4HIsw49K4Kz25XaPhd2hlHRK/GcKbYoo4XmUOlYdH+aPNP1EtXowS0kY4z
NHBx4eXx8uZkXrgYH/Rny0sjAlhoQHPn56fEPLbvmnRFbJvKUiXYC38YkGI5aL0D
5sUWB6gG3EseVnle
-----END CERTIFICATE-----