Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft
File:                     178395FF98E8AEA645CFCD7DF742855D46457BAF.mft (raw, json)
Hash identifier:          +AUlWl60DpupB1wFn8BYONIQ2r+5fr0QlQHShXHQ7CI=
Subject key identifier:   72:EA:62:8C:DA:6D:A8:F0:07:83:A6:C3:88:56:8A:7D:53:D0:B4:F3
Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF
Certificate issuer:       /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF
Certificate serial:       11B10DE0A2AAF8C7944866FC3A1F7446D3A28F8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft
Manifest number:          B0
Signing time:             Mon 23 Jun 2025 04:55:25 +0000
Manifest this update:     Mon 23 Jun 2025 04:50:25 +0000
Manifest next update:     Tue 24 Jun 2025 08:04:25 +0000
Files and hashes:         1: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: wALn/kuHRs3MtX4loe3ndPMMd8kJpkWDJTPFOhhGFZ0=)
                          2: 178395FF98E8AEA645CFCD7DF742855D46457BAF.crl (hash: iTPenLkLACWyP3SR4X6TcGD5tfaqIDIa1bdKwfF5L2c=)
                          3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: DJIGVPPFdKw8WztsRwxSv88N7qWJk5uvTreoiT8psfU=)
                          4: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: tFQ4zhgC2iPnwqXyLnNzgEkZZIC1LjVxrVLEJzRxX40=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b1:0d:e0:a2:aa:f8:c7:94:48:66:fc:3a:1f:74:46:d3:a2:8f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF
        Validity
            Not Before: Jun 23 04:50:25 2025 GMT
            Not After : Jun 24 08:04:25 2025 GMT
        Subject: CN=72EA628CDA6DA8F00783A6C388568A7D53D0B4F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:b5:74:3e:28:1b:c4:01:03:7f:26:1f:6d:
                    87:f1:24:b9:25:eb:50:be:07:ad:6b:83:d2:b9:cd:
                    44:40:7f:5b:75:78:83:6b:51:3a:79:53:49:71:9d:
                    bb:84:b8:c7:1a:af:df:2e:7d:fe:59:27:64:2b:8e:
                    02:bf:52:fa:ea:f5:0d:a4:0e:31:5e:c8:dd:1b:f7:
                    f3:2b:8c:99:1c:0e:39:47:65:5a:1a:fd:c6:6a:cb:
                    ac:e2:6b:29:42:61:5c:64:1c:84:e3:dc:5f:3b:58:
                    d0:e4:24:c1:4a:d2:dd:e7:4e:f0:87:7b:ba:f2:8b:
                    01:b4:8d:df:a7:85:58:42:f8:6e:db:9d:5b:f6:32:
                    c1:f8:89:d0:8f:fe:a8:cc:23:e4:4a:ee:22:b0:51:
                    b2:3f:e4:a7:a3:ac:70:22:b9:e6:85:66:02:ff:fc:
                    3a:6c:4a:b5:66:ba:93:23:41:65:b6:0c:f8:73:4e:
                    ae:03:13:3f:64:11:9c:f9:f2:85:bf:7a:b0:e1:55:
                    b4:6a:78:36:05:12:c0:6c:b8:21:cb:4f:1a:fa:b0:
                    ba:e2:fd:4d:f6:3c:4f:bf:94:89:f0:f8:7a:c9:8a:
                    ca:3a:d6:a0:16:f1:79:e2:f0:b8:12:cf:70:c9:6d:
                    5c:25:1e:39:42:e6:87:97:7f:37:63:bb:00:59:c5:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EA:62:8C:DA:6D:A8:F0:07:83:A6:C3:88:56:8A:7D:53:D0:B4:F3
            X509v3 Authority Key Identifier:
                keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:13:d1:d2:69:e2:7b:7f:68:99:48:d8:84:13:7b:b8:9b:6f:
         25:0b:91:a8:a2:11:f4:e2:c3:6a:11:70:6f:0e:85:c4:4e:39:
         7d:65:f8:47:c3:e7:65:96:53:a7:52:87:7f:63:69:90:4d:70:
         8b:9f:e0:0d:74:05:64:e7:76:ce:16:22:d8:75:1c:eb:09:a7:
         32:0f:b3:65:b8:71:5d:bc:52:7e:48:1c:3e:c4:e3:3d:60:ad:
         27:51:b4:e3:e6:8b:d7:63:92:1f:02:84:c6:65:ef:43:3e:d4:
         c0:bd:84:b0:be:b0:6c:3e:38:d8:ab:dd:2b:dd:fb:b2:7f:8f:
         51:ac:58:70:ef:e6:9d:ca:5d:e2:59:d6:9a:93:af:cf:2f:15:
         3f:15:a2:2d:50:e3:97:42:60:44:4c:d8:ab:46:a6:72:4a:7c:
         aa:a9:b1:02:cb:65:b6:9b:ab:ec:8a:b4:61:19:c5:1c:a4:fc:
         f6:ee:fe:76:bc:56:04:ee:ca:9b:93:12:a5:33:c3:78:88:3c:
         8e:dc:36:7b:f8:77:f5:67:db:1b:e6:0f:80:e9:66:01:95:d6:
         97:91:eb:bd:c4:e4:b0:85:b8:20:e8:22:83:b5:b9:04:ec:a1:
         15:6c:43:9a:db:d9:b1:9b:68:43:fb:cf:d4:0c:43:50:5d:f7:
         e6:90:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----