Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft
File:                     AC2082F41576F66D1AA264309E33E738246AC454.mft (raw, json)
Hash identifier:          HqwQbf0eoeP6cF+CBVu3lEqFhhN7wYOvmh9lr+jnyew=
Subject key identifier:   B9:B3:B6:51:9A:77:4F:09:D1:85:C5:54:56:24:41:23:16:8F:20:50
Authority key identifier: AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54
Certificate issuer:       /CN=AC2082F41576F66D1AA264309E33E738246AC454
Certificate serial:       6282BE3C7F9341349A02FBF4FE0B7807C02BF0B2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft
Manifest number:          35
Signing time:             Thu 17 Jul 2025 12:41:47 +0000
Manifest this update:     Thu 17 Jul 2025 12:36:47 +0000
Manifest next update:     Fri 18 Jul 2025 13:43:47 +0000
Files and hashes:         1: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: dyI/vpBN2up97kkgTILkiXBGaFO4U5IDn0366sa0vPo=)
                          2: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: cDRjR1Gs+0Iu9xhCGCcpko1viLmb0+uf6ywJ7Kgfxpo=)
                          3: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: FemJ+80fd71XEtyMVGoBFKhnKHjJGamQyy+E//E8CQM=)
                          4: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: w8qLN4QSYjEpdJCkomXgGfT8US2E2zuhO/hns/+C5XM=)
                          5: AC2082F41576F66D1AA264309E33E738246AC454.crl (hash: HQVFKiwEoxW+qrYVEHxJKDsGvCzLKyvSKYF+upEuxaY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:82:be:3c:7f:93:41:34:9a:02:fb:f4:fe:0b:78:07:c0:2b:f0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2082F41576F66D1AA264309E33E738246AC454
        Validity
            Not Before: Jul 17 12:36:47 2025 GMT
            Not After : Jul 18 13:43:47 2025 GMT
        Subject: CN=B9B3B6519A774F09D185C55456244123168F2050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:81:8e:3b:8a:7a:4d:0d:60:63:26:d4:01:
                    47:2d:ee:5f:a4:e1:09:5e:9c:2f:18:cc:b2:74:dd:
                    1b:60:0f:b8:c8:2a:6d:7a:f7:4d:e2:cd:84:21:b3:
                    25:7c:2d:64:12:27:cc:25:78:c7:cf:39:3b:9a:ed:
                    1e:64:33:35:2e:a5:f9:f1:08:9b:07:45:71:71:e0:
                    8d:a2:1d:c9:0c:c7:ca:51:0f:20:56:01:88:aa:48:
                    8d:fa:1d:8f:07:b6:c5:3b:28:47:39:f7:f1:90:0f:
                    84:ac:74:a8:4f:3f:45:3c:7f:77:f0:ee:3f:22:29:
                    20:84:30:cd:5d:d3:11:b3:98:94:48:aa:e6:06:a9:
                    96:04:c5:cd:63:fa:82:f3:c3:f3:86:a1:2f:e6:39:
                    4e:c7:51:c9:48:0e:0d:df:c4:68:c6:99:d0:b6:b3:
                    82:4c:1c:e0:c0:39:6e:46:9e:a7:dd:04:c0:3d:62:
                    6c:12:fa:14:92:fe:bb:7d:18:a8:42:09:50:ee:63:
                    09:ba:a4:ea:f9:d6:a7:25:11:61:09:ae:7d:4b:93:
                    a3:78:21:ee:c8:bc:7e:4e:80:33:5b:bc:87:5f:45:
                    6d:44:ac:f8:e5:0f:10:f6:44:77:88:5f:78:2a:2b:
                    a8:21:a7:67:4b:e6:08:2e:9a:b6:63:ac:14:73:8a:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B3:B6:51:9A:77:4F:09:D1:85:C5:54:56:24:41:23:16:8F:20:50
            X509v3 Authority Key Identifier:
                keyid:AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:79:e8:49:cc:b9:d0:95:ea:1d:d6:6e:2e:0e:42:f5:3f:a2:
         88:84:1f:47:88:ac:4f:6a:d1:19:34:d3:29:36:a9:d0:05:eb:
         be:07:06:19:09:25:3a:de:9b:9f:f6:4c:5a:47:2a:d1:f3:13:
         3c:ae:b5:9a:1d:00:38:48:c6:5a:16:9a:61:14:2a:db:03:36:
         e6:3c:99:8b:bf:a8:d3:61:03:97:51:e1:13:38:c5:87:3e:40:
         43:45:cd:5e:52:7f:48:f9:bf:e5:54:e5:6e:0a:72:45:50:2e:
         d3:9a:88:b1:ec:ce:9b:f4:a0:0a:51:33:e8:30:2b:e2:f0:e4:
         77:71:59:79:53:e8:ab:12:e5:92:87:4a:73:72:36:ee:0d:5e:
         9a:7e:59:40:bd:5d:5e:af:32:73:52:57:c3:aa:86:92:85:56:
         91:b7:1c:2d:93:9e:30:7e:46:2b:05:1e:8b:0e:ed:88:36:04:
         c7:8c:b9:e1:a6:74:76:6b:70:e2:d9:e8:fa:ee:5c:b4:f1:70:
         24:31:5c:ec:59:a5:d4:de:4d:43:95:78:2e:49:6c:6b:a1:a6:
         d5:b0:c3:ab:6b:cd:4e:d6:99:5c:78:6a:b1:95:2f:0c:97:d1:
         00:51:69:b8:a2:e8:81:67:73:35:14:de:3f:1c:27:c6:f7:a6:
         e3:dd:6d:be
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUYoK+PH+TQTSaAvv0/gt4B8Ar8LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3Mzgy
NDZBQzQ1NDAeFw0yNTA3MTcxMjM2NDdaFw0yNTA3MTgxMzQzNDdaMDMxMTAvBgNV
BAMTKEI5QjNCNjUxOUE3NzRGMDlEMTg1QzU1NDU2MjQ0MTIzMTY4RjIwNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdIGOO4p6TQ1gYybUAUct7l+k
4QlenC8YzLJ03RtgD7jIKm16903izYQhsyV8LWQSJ8wleMfPOTua7R5kMzUupfnx
CJsHRXFx4I2iHckMx8pRDyBWAYiqSI36HY8HtsU7KEc59/GQD4SsdKhPP0U8f3fw
7j8iKSCEMM1d0xGzmJRIquYGqZYExc1j+oLzw/OGoS/mOU7HUclIDg3fxGjGmdC2
s4JMHODAOW5GnqfdBMA9YmwS+hSS/rt9GKhCCVDuYwm6pOr51qclEWEJrn1Lk6N4
Ie7IvH5OgDNbvIdfRW1ErPjlDxD2RHeIX3gqK6ghp2dL5ggumrZjrBRzisrLAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUubO2UZp3TwnRhcVUViRBIxaPIFAwHwYDVR0j
BBgwFoAUrCCC9BV29m0aomQwnjPnOCRqxFQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk
NDdhLzIvQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3MzgyNDZBQzQ1NC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQzIwODJGNDE1NzZGNjZEMUFBMjY0MzA5
RTMzRTczODI0NkFDNDU0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8yL0FDMjA4MkY0
MTU3NkY2NkQxQUEyNjQzMDlFMzNFNzM4MjQ2QUM0NTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWeehJ
zLnQleod1m4uDkL1P6KIhB9HiKxPatEZNNMpNqnQBeu+BwYZCSU63puf9kxaRyrR
8xM8rrWaHQA4SMZaFpphFCrbAzbmPJmLv6jTYQOXUeETOMWHPkBDRc1eUn9I+b/l
VOVuCnJFUC7Tmoix7M6b9KAKUTPoMCvi8OR3cVl5U+irEuWSh0pzcjbuDV6afllA
vV1erzJzUlfDqoaShVaRtxwtk54wfkYrBR6LDu2INgTHjLnhpnR2a3Di2ej67ly0
8XAkMVzsWaXU3k1DlXguSWxroabVsMOra81O1plceGqxlS8Ml9EAUWm4ouiBZ3M1
FN4/HCfG96bj3W2+
-----END CERTIFICATE-----