Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
File:                     F861C17CCC63A8FE4F54B725229D4182E376702E.mft (raw, json)
Hash identifier:          8AlwjWi6kB/HYFt3zblB6MZhorUP7tErKdta8mPxcsc=
Subject key identifier:   E8:93:25:43:CA:1D:DB:ED:52:A0:FC:BC:2B:43:67:7B:B5:22:A1:93
Authority key identifier: F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E
Certificate issuer:       /CN=F861C17CCC63A8FE4F54B725229D4182E376702E
Certificate serial:       12767A129F9BCFD84BB7F1E7489B94A26B2B67E2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
Manifest number:          0A
Signing time:             Sat 29 Mar 2025 00:50:43 +0000
Manifest this update:     Sat 29 Mar 2025 00:45:43 +0000
Manifest next update:     Sun 30 Mar 2025 03:31:43 +0000
Files and hashes:         1: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: nEpVXZ4G7eLeVLBw2JFUizV21nv5AkYeo88InoKYBm4=)
                          2: F861C17CCC63A8FE4F54B725229D4182E376702E.crl (hash: nIiiqiFYP7LBh27aMXfqImehDd+Y61iJpyjgwMOCqLM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:76:7a:12:9f:9b:cf:d8:4b:b7:f1:e7:48:9b:94:a2:6b:2b:67:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F861C17CCC63A8FE4F54B725229D4182E376702E
        Validity
            Not Before: Mar 29 00:45:43 2025 GMT
            Not After : Mar 30 03:31:43 2025 GMT
        Subject: CN=E8932543CA1DDBED52A0FCBC2B43677BB522A193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:67:12:e0:2f:76:c3:9c:0c:61:5f:f9:1a:
                    37:a4:b9:6d:e1:52:b5:c2:f6:78:40:4c:e2:98:8e:
                    da:1f:fc:02:f9:f2:89:97:fe:29:b3:c9:bc:41:b0:
                    0b:2a:51:36:c5:39:c0:19:e9:11:e0:13:f8:e1:5e:
                    0e:3c:9e:95:14:80:6e:f2:d0:0e:97:3d:a2:c4:a1:
                    0f:97:62:09:c3:36:c7:ce:ec:a1:5e:c2:70:04:57:
                    e0:80:00:e0:09:fa:46:0e:5b:02:32:a1:1c:fb:2d:
                    cf:a4:db:11:c5:eb:88:f9:f7:43:66:2f:63:85:92:
                    73:26:cd:be:2d:b1:c4:1b:4c:30:d2:d1:80:d2:21:
                    a4:e5:51:a4:18:e0:9d:fb:8e:ee:ae:61:d0:21:6d:
                    0d:98:b6:03:d8:7f:70:be:92:f0:07:0d:11:75:28:
                    99:02:21:ca:35:04:79:7d:a5:34:29:fb:39:ab:22:
                    05:1a:0b:80:9a:49:b9:90:15:ff:43:8c:15:bf:e3:
                    a0:75:77:63:45:2a:4e:ad:f8:c7:cb:b6:6e:b9:c4:
                    99:61:a3:2d:76:f5:2f:93:29:95:df:3e:7f:62:db:
                    1a:5e:25:1e:b6:b9:6b:e3:21:e9:1e:14:24:ae:8a:
                    2a:36:75:c7:ff:f8:4c:76:53:b4:39:b5:5a:6e:38:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:93:25:43:CA:1D:DB:ED:52:A0:FC:BC:2B:43:67:7B:B5:22:A1:93
            X509v3 Authority Key Identifier:
                keyid:F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:73:1e:b0:b9:41:86:40:a7:d1:6b:eb:bc:cc:70:5a:fe:
         96:1f:6c:49:03:8f:10:fc:3b:c6:a7:fd:d7:3c:a3:82:ba:d1:
         f1:59:cf:d8:58:dc:2f:f7:97:4e:16:1a:ab:f9:57:ca:1c:b5:
         8b:30:b0:75:80:74:4f:a2:54:c6:ea:ff:a5:78:16:44:02:3c:
         ab:1e:c9:aa:12:51:96:b6:bb:d5:d8:bf:13:ef:21:c4:52:01:
         ce:16:be:31:c2:71:28:7e:00:85:79:0a:86:19:a0:20:0e:83:
         2c:f1:3e:bd:e1:5b:1c:24:10:35:d5:e7:71:62:cd:0b:3c:e2:
         e5:42:d2:1e:10:6f:9a:47:9a:36:ab:97:99:52:8f:dc:91:c8:
         81:72:63:99:6e:3f:bd:ad:23:11:e0:d3:c0:67:b2:eb:99:9b:
         79:d3:d0:22:6f:15:3a:96:34:77:b6:50:43:c8:50:a8:5d:75:
         eb:a3:13:75:92:f2:3b:8d:42:00:00:dc:41:b5:8a:bc:9d:0c:
         de:09:cf:e1:df:d7:17:4f:3f:79:f1:5e:cf:ab:4a:af:5c:6c:
         6a:0e:d0:9e:2c:fa:17:17:e3:72:fa:64:45:aa:12:97:76:b8:
         f9:99:2f:db:33:74:3d:d0:f4:0f:df:7d:56:a9:1b:84:12:d4:
         8a:0e:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----