Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
File:                     01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft (raw, json)
Hash identifier:          jUZuju8VJYtbfgBPeCYOFsq9Zrdgb5n2XI3ootW06cQ=
Subject key identifier:   C7:6A:53:47:93:29:09:90:86:CF:E3:62:8F:45:E3:04:83:60:1E:6F
Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
Certificate issuer:       /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Certificate serial:       455575D4A869786C991620B2CDABC31DE27076E1
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
Manifest number:          018B
Signing time:             Thu 03 Jul 2025 07:50:51 +0000
Manifest this update:     Thu 03 Jul 2025 07:45:51 +0000
Manifest next update:     Fri 04 Jul 2025 10:41:51 +0000
Files and hashes:         1: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (hash: ksX8z7ZW9gymrqj00x+2X/C8X7o9+JqUVnJjpd/TsDA=)
                          2: 3139322e36372e33352e302f32342d3332203d3e203236353536.roa (hash: 6b1VpbvMsE50o/1KffApiCFgdzfb7zhZLiCWQ7W3KvI=)
                          3: 01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl (hash: HaAcpBnCo2UwsuF4eJQWyT7GnD6gjka1U1pl65OhIdA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:55:75:d4:a8:69:78:6c:99:16:20:b2:cd:ab:c3:1d:e2:70:76:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
        Validity
            Not Before: Jul  3 07:45:51 2025 GMT
            Not After : Jul  4 10:41:51 2025 GMT
        Subject: CN=C76A53479329099086CFE3628F45E30483601E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:80:7a:fd:2d:56:5e:a4:28:78:dc:b6:b8:cf:
                    5e:ff:f7:66:90:b8:13:ef:05:61:f7:21:ba:1b:4c:
                    07:5f:cb:71:fe:a7:3e:ee:51:25:b9:d3:e8:b0:84:
                    f0:52:ad:c6:2f:4a:07:47:0f:80:64:40:a2:8d:bc:
                    b0:5f:85:fb:37:d2:41:89:7f:11:04:cc:80:a7:44:
                    fe:7e:ad:40:df:55:c2:6e:16:46:23:8c:de:e7:30:
                    34:7a:49:3f:c2:b5:65:2f:45:b5:7c:f1:f2:73:a7:
                    74:7b:c8:c7:4a:df:3e:6c:16:ea:06:cf:96:fd:83:
                    b7:7b:8f:6e:0d:5e:58:c1:03:af:47:e9:29:4c:f2:
                    3f:b1:3a:58:3d:59:b4:42:88:75:a4:54:c1:c2:9a:
                    63:04:ae:8b:7e:ce:cb:83:da:06:b4:6b:62:2f:91:
                    0e:ca:5c:b0:0b:19:e2:dc:66:68:c8:35:2b:93:4e:
                    27:ec:d4:1b:7f:e2:db:07:22:2a:31:00:8a:34:d1:
                    f7:0e:aa:b1:9d:6a:13:35:be:38:68:f0:43:66:87:
                    c2:ec:5d:3d:d4:3b:32:ce:f7:64:5a:e1:fe:4a:2b:
                    cb:89:80:48:a0:aa:b5:18:b6:2c:9e:e7:61:04:2c:
                    1b:5e:cb:18:bf:0a:76:a7:4c:68:85:f4:f2:c0:55:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:53:47:93:29:09:90:86:CF:E3:62:8F:45:E3:04:83:60:1E:6F
            X509v3 Authority Key Identifier:
                keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fb:59:2e:9d:18:7c:01:1d:1a:f9:4e:0e:6b:3e:97:d6:3b:
         84:c3:f4:a3:62:17:e5:66:27:f3:ea:73:4a:4c:ed:69:62:0f:
         03:d9:a8:9c:fe:1d:2c:36:7f:b2:e5:a9:8d:e5:8a:17:26:1d:
         55:a9:d5:75:56:a1:9a:2f:25:ab:7d:c0:a3:b1:b9:ac:c5:6c:
         8e:86:7e:06:05:d8:cd:e6:13:26:d0:3a:69:82:87:e9:68:ef:
         64:ac:8a:fb:7a:35:90:13:72:7a:b6:c9:12:d8:e3:01:42:cd:
         07:ae:6e:4c:b3:fd:27:61:9e:9e:e0:ad:b9:be:e0:04:81:ae:
         47:f9:5a:8d:09:59:1d:e6:e5:f8:3b:ca:e1:85:8f:8d:92:92:
         01:ce:87:31:4f:f1:6d:bb:e5:30:2d:e2:93:f6:a5:f9:c7:54:
         83:92:73:93:7b:9a:41:37:1a:7a:2b:e3:05:2f:b4:74:98:eb:
         3e:5e:29:51:94:12:af:ff:99:09:d4:eb:dd:45:65:93:fb:11:
         0a:b6:8b:09:43:d1:3e:ab:61:a0:69:b1:19:18:01:6f:1c:0b:
         cd:80:a7:13:0c:fb:8e:5a:26:00:84:7e:2b:98:a6:ef:3e:29:
         74:43:b7:6b:72:87:42:96:70:b8:e2:9a:bb:66:5d:d9:3a:00:
         09:33:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----