Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft
File:                     75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft (raw, json)
Hash identifier:          3lfiXpSkebRf4DWPKsSUo8ELC8QIYTbCvsGhvBwPr2Q=
Subject key identifier:   41:17:EA:88:81:3E:39:29:E5:36:26:BE:7A:1C:7F:E8:6B:3F:9B:73
Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
Certificate issuer:       /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
Certificate serial:       57AFCAB0756EE11B1769F5FC2999623F989B6BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft
Manifest number:          0218
Signing time:             Wed 02 Jul 2025 16:17:37 +0000
Manifest this update:     Wed 02 Jul 2025 16:12:37 +0000
Manifest next update:     Thu 03 Jul 2025 18:02:37 +0000
Files and hashes:         1: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: pidPjaC/0SzUTjVt7jeHfSi0+syOL6p0IuoBQSBkar0=)
                          2: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: trryrU9wIYmZgEJdzHNYY5h4S9o2VXqY8o0Zi9mSgQo=)
                          3: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: n7zi8erDwVkaEAccTf7AgcxyPGv2dh/rzzppLzmNaTU=)
                          4: AS47272.asa (hash: 00huGBfk+bssAimp0ZP4wOX7+i9IlfoK8HmXLP4OXGg=)
                          5: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl (hash: jGPRB14ASYiwAK2/JbU7CAT7OTy6HUB9GgciRCB0+VU=)
                          6: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 1LnjtNWO4AFu9pCH4CmYsFOHKUIy1MM7xTorxxHQjEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:af:ca:b0:75:6e:e1:1b:17:69:f5:fc:29:99:62:3f:98:9b:6b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
        Validity
            Not Before: Jul  2 16:12:37 2025 GMT
            Not After : Jul  3 18:02:37 2025 GMT
        Subject: CN=4117EA88813E3929E53626BE7A1C7FE86B3F9B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:34:ac:05:2a:75:d8:4c:64:ed:8b:3d:65:c0:
                    6f:f6:32:a7:7c:05:48:ad:26:ea:96:cd:76:f8:21:
                    e1:0d:26:d1:c8:79:48:9a:47:bf:3f:80:f4:d5:4d:
                    3f:57:50:bf:38:6f:80:ae:2e:76:cf:0e:78:51:3d:
                    bc:b5:54:23:84:37:be:53:fc:08:ee:49:9d:a6:e4:
                    c1:ac:25:4f:80:c6:7d:d6:98:46:f6:c4:0a:7f:5d:
                    9e:b5:70:b2:1b:7b:54:b5:83:c7:eb:0d:74:9a:d4:
                    99:f6:2e:30:6e:75:b7:a0:fe:5b:9c:24:1f:90:1d:
                    f5:28:b1:9a:fd:af:90:80:3b:44:f4:5a:01:51:74:
                    ee:93:f1:62:a8:7c:7a:b0:4b:06:14:6d:7b:b1:39:
                    37:09:01:7d:1a:10:79:50:64:63:2e:0d:67:2f:1f:
                    c7:6c:5b:b3:d3:88:cd:16:75:05:21:73:cd:61:a8:
                    e8:69:f6:6a:78:cb:dd:f3:0a:cb:53:94:d4:c2:f7:
                    05:db:be:21:8d:ed:58:fa:a9:67:ae:b1:fa:33:e8:
                    92:10:ea:33:50:de:9b:9b:0c:a9:6a:ea:c4:c8:41:
                    6e:49:ae:11:ef:fa:4e:2d:50:b2:28:b4:d4:bc:01:
                    aa:dd:3e:8a:1a:80:c2:d1:d1:39:c9:b1:a3:b1:25:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:17:EA:88:81:3E:39:29:E5:36:26:BE:7A:1C:7F:E8:6B:3F:9B:73
            X509v3 Authority Key Identifier:
                keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:24:bc:2a:7e:23:86:8a:78:8c:d2:fc:f6:b5:82:ab:0c:
         65:f5:fc:12:77:fc:da:b7:2e:cc:72:94:d5:cc:3c:4e:71:7a:
         45:83:03:f9:29:94:fa:be:c3:33:7f:db:c9:39:26:1f:94:6e:
         5e:68:9d:3a:e3:46:e6:7d:8d:aa:ca:68:5d:d7:2b:27:21:28:
         69:a6:c8:b0:69:9e:50:8d:4b:1c:4e:a1:6a:82:56:07:20:8b:
         01:60:64:ae:3e:cb:f4:9e:15:68:60:8b:85:eb:62:6a:8a:8b:
         07:34:2b:e9:38:5e:f0:e3:38:9c:2b:c2:d5:77:b1:47:57:24:
         ae:21:74:d9:d9:f2:26:dd:3a:c4:c3:9c:e0:84:d0:2d:73:3e:
         5d:86:9b:75:07:5a:eb:16:e6:49:82:fa:7e:2f:d0:7f:67:39:
         4a:d3:e6:7a:1d:34:2f:a6:4e:bf:51:99:5a:00:9c:5e:5f:83:
         88:44:1a:79:49:42:8f:7d:52:d2:83:57:21:df:fb:b3:2d:f0:
         48:49:46:d9:04:8b:cf:33:a7:5c:6e:75:e3:52:62:6e:7e:4c:
         cd:82:8c:44:eb:79:b1:7f:d2:26:a0:c5:33:74:f4:7d:44:df:
         7e:9b:3d:6f:da:db:cc:f2:68:0d:33:ce:b7:69:9e:00:7a:7e:
         53:5a:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----