Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
File:                     974E186C2E15C12700D0165ACC54D7A585EE383C.mft (raw, json)
Hash identifier:          tXeBP8GafXy3DNU/V5aiTKvMqoaA17FOjejZjiOjaY8=
Subject key identifier:   94:FD:D3:E0:2F:2D:FB:D9:8D:94:21:AE:6C:F2:1C:F4:E8:07:E4:01
Authority key identifier: 97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C
Certificate issuer:       /CN=974E186C2E15C12700D0165ACC54D7A585EE383C
Certificate serial:       353283A1D629E766B49A9D8668FBEBC9E9E43DEB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
Manifest number:          DE
Signing time:             Fri 07 Feb 2025 23:56:47 +0000
Manifest this update:     Fri 07 Feb 2025 23:51:47 +0000
Manifest next update:     Sun 09 Feb 2025 03:13:47 +0000
Files and hashes:         1: 974E186C2E15C12700D0165ACC54D7A585EE383C.crl (hash: qqK1rZgX9ubPYGbncOqo2JY3i4iukRmk12HPuFBaNbk=)
                          2: 3139342e35382e36352e302f32342d3234203d3e20323134373638.roa (hash: y/fox/NDWEI298o75eeGijkFXnfs+27YTJMVLS6ZcwQ=)
                          3: 3139342e35382e36352e302f32342d3234203d3e20333937373330.roa (hash: InhM34Dmb3sJqcOLafSmmmFS9YJK3J8Zdwo6bmOS8R4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:32:83:a1:d6:29:e7:66:b4:9a:9d:86:68:fb:eb:c9:e9:e4:3d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974E186C2E15C12700D0165ACC54D7A585EE383C
        Validity
            Not Before: Feb  7 23:51:47 2025 GMT
            Not After : Feb  9 03:13:47 2025 GMT
        Subject: CN=94FDD3E02F2DFBD98D9421AE6CF21CF4E807E401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:e1:af:f8:f8:95:7d:a1:16:cf:08:36:49:
                    5c:c8:4f:63:db:52:ed:c0:6d:70:51:46:e0:1c:3b:
                    b4:82:d1:7a:3c:4f:ca:a7:8a:7c:9a:6a:95:59:b0:
                    f5:76:91:b2:35:7a:b7:ab:17:0d:3b:07:14:54:b8:
                    37:a6:08:64:aa:4a:82:27:e8:48:65:b8:7d:dc:f1:
                    46:85:21:b5:3f:b3:9b:8d:14:3a:eb:2d:cc:5c:1b:
                    26:47:17:06:fb:ce:f3:e6:c8:69:ef:21:d8:a1:ae:
                    14:bb:05:27:de:b3:67:50:2f:d5:3d:ea:d3:55:24:
                    96:40:eb:78:8a:5e:53:ea:cb:87:01:d4:27:7c:32:
                    83:1e:8c:36:7a:1f:d9:61:e9:c6:8b:25:4a:b4:77:
                    65:7d:04:12:87:1d:e0:1a:1d:35:24:fc:ca:e1:f5:
                    39:7b:a8:4b:8a:fb:0f:69:16:83:b6:04:b7:d0:90:
                    04:5b:9a:0a:88:38:e5:be:e4:76:8d:57:d5:2b:75:
                    54:6e:7f:69:33:aa:55:49:9a:08:00:e5:6b:63:f5:
                    9a:ce:a9:f0:1c:53:db:37:51:7a:4f:2a:44:7d:55:
                    49:5d:17:a8:2b:d6:09:62:8d:87:da:ed:33:30:07:
                    f2:8f:33:28:25:d2:7f:35:fa:cb:5a:5f:f0:6c:81:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FD:D3:E0:2F:2D:FB:D9:8D:94:21:AE:6C:F2:1C:F4:E8:07:E4:01
            X509v3 Authority Key Identifier:
                keyid:97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d1:ba:4e:ef:0b:d1:af:9e:e5:0a:a3:82:f0:0a:fa:69:83:
         02:7d:06:7f:6e:97:0e:81:0d:d5:0d:f9:c1:ba:88:89:b2:32:
         41:9f:14:2c:d6:5c:7e:f2:a8:a8:d0:d0:eb:94:42:8c:d2:d2:
         60:f5:55:d5:c6:95:be:c9:04:e6:e8:bf:83:70:87:a6:88:2d:
         35:83:00:31:f8:5c:16:33:3a:75:56:ef:5f:27:e6:73:7d:79:
         80:5b:ce:ab:dd:82:c0:96:58:a4:ff:1d:8e:75:88:c7:f4:9b:
         f9:40:d7:04:43:4a:63:21:4f:f0:91:e2:95:e8:06:21:13:10:
         c9:5c:ab:25:9d:6e:0e:5c:77:92:04:5a:3e:04:93:82:42:9b:
         02:79:f2:44:6a:99:06:4d:14:f4:c7:4e:f2:24:a1:5e:aa:44:
         d6:3c:0a:15:f1:ec:37:52:fd:fc:4b:43:16:47:56:29:54:ce:
         20:1a:1f:19:09:88:ff:77:c6:c3:38:20:f4:88:ee:fb:5e:56:
         37:d8:29:a5:81:f3:af:fa:5c:c9:b5:84:da:7d:28:ff:6b:f9:
         33:33:82:dd:14:c1:ec:b7:c2:09:9d:51:dd:d1:4a:17:c5:cc:
         93:b9:1a:d7:0e:13:6c:bc:fc:c7:82:75:c5:b1:7e:73:12:39:
         ba:18:44:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----