Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft
File:                     090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json)
Hash identifier:          LQ1MV6x6S68O9ftjdGUV34/lEpORSUgkaiVacn6KESQ=
Subject key identifier:   D4:76:F7:14:58:8B:4D:C9:B1:8C:28:87:73:A2:7F:95:41:C4:02:6E
Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1
Certificate issuer:       /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1
Certificate serial:       38DC57909D0D45AA4C4900636EA0FE8F4F550FDD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft
Manifest number:          032C
Signing time:             Wed 02 Jul 2025 12:59:45 +0000
Manifest this update:     Wed 02 Jul 2025 12:54:45 +0000
Manifest next update:     Thu 03 Jul 2025 14:30:45 +0000
Files and hashes:         1: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=)
                          2: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: I6LIS6G41sS3ZP1kimMcl0ux8QBaUaNty2Is4ev0uSc=)
                          3: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: /6TLbLr5yUGE6+8nz6p2on3lwleCpU2rYt4G5JE9rDk=)
                          4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dc:57:90:9d:0d:45:aa:4c:49:00:63:6e:a0:fe:8f:4f:55:0f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1
        Validity
            Not Before: Jul  2 12:54:45 2025 GMT
            Not After : Jul  3 14:30:45 2025 GMT
        Subject: CN=D476F714588B4DC9B18C288773A27F9541C4026E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:60:26:40:a7:d5:fe:91:31:e9:4d:13:be:36:
                    ae:22:97:d4:b6:18:e1:d4:e6:ef:41:3d:f9:1d:b5:
                    da:66:a6:ab:0c:e0:7f:e3:b8:fe:cb:74:ce:58:0a:
                    92:53:65:45:01:a4:b4:36:e5:c3:c5:ad:66:87:ae:
                    ac:0f:63:cc:c9:0b:2c:0e:9c:c7:c8:94:30:c6:d4:
                    3f:c3:d0:d2:b9:96:e0:1a:d7:e2:72:a5:6d:6b:eb:
                    05:1d:30:42:4a:3f:74:1f:ce:95:a6:44:a2:b7:aa:
                    31:26:ed:d5:93:bf:34:50:79:b0:42:b6:18:49:46:
                    48:af:4e:f8:6e:71:bc:8a:df:9d:fe:86:22:d1:66:
                    49:12:82:24:10:2a:ec:56:b7:7e:c3:9d:c7:47:2c:
                    f0:ef:7f:b4:4b:69:f9:55:24:76:2c:57:99:c2:d9:
                    92:a9:b8:2d:98:28:1d:fe:47:3e:74:1a:20:d5:3b:
                    e4:64:04:aa:c7:e3:c4:f7:2a:70:f7:4e:21:35:57:
                    de:d5:4b:db:75:37:63:7f:50:e9:6d:ad:0e:e5:4b:
                    25:91:cd:9b:e3:31:8c:53:dc:e9:7a:9f:de:09:0f:
                    b7:ec:99:a6:ef:2c:d9:78:1a:d3:e9:f5:b6:db:8e:
                    d0:30:fe:65:90:51:04:82:83:a2:cf:f3:fa:85:3f:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:76:F7:14:58:8B:4D:C9:B1:8C:28:87:73:A2:7F:95:41:C4:02:6E
            X509v3 Authority Key Identifier:
                keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:42:86:b9:b8:bb:2f:9c:0e:4b:cd:0a:fb:6c:6d:78:f7:b8:
         97:eb:fb:2f:3c:5f:a5:1d:b3:cf:3b:a0:c4:38:08:ea:a1:3d:
         4b:e3:cd:2d:5c:86:3d:28:8c:96:06:ed:f8:f4:f0:f7:bd:11:
         32:11:03:ba:3c:e6:20:22:79:ef:0c:0d:fb:ff:21:4f:e0:36:
         b4:f3:01:e5:31:24:0f:bd:d4:5d:f9:7f:0b:b5:a0:4d:e3:b2:
         d2:ce:76:fc:d0:cd:7e:7a:70:86:24:2a:45:03:14:2a:89:00:
         19:54:0c:3b:15:0f:62:31:fc:61:55:73:93:97:c7:9e:a6:f9:
         98:5d:47:fe:c0:45:91:2d:5b:de:99:c8:3e:9e:f8:d1:71:79:
         14:b7:d6:be:cc:c4:d1:b7:0c:9e:94:a4:96:70:e7:1f:ef:8e:
         96:66:c9:f5:1e:24:e6:f1:91:6b:5c:43:e4:b3:77:fa:b4:3e:
         d4:91:a6:79:31:e6:ea:c1:d6:63:71:2b:4c:c4:13:16:a4:a5:
         1b:3b:b1:8c:e7:d6:fa:ed:e9:fc:4f:7b:38:7e:2b:d5:58:70:
         b2:dd:46:de:ec:b3:5a:03:8d:27:94:04:b8:cc:e3:71:24:45:
         61:86:ed:f2:87:d9:6b:23:78:7d:30:aa:c0:1b:d4:be:e7:d0:
         73:7d:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----