Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft
File:                     E472D821C14C9E0738F632D7A74DF516C446A5E2.mft (raw, json)
Hash identifier:          M5+/gJF4Nnsk91UvCCBTrIizORZf2ufYpUQr9g3WbsU=
Subject key identifier:   8D:D0:37:A3:38:64:AB:CF:D0:11:0F:33:EB:D6:A2:AC:02:3F:F2:80
Authority key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
Certificate issuer:       /CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Certificate serial:       87F39A4771B247FA023D71782EFD1556798E79
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft
Manifest number:          77
Signing time:             Thu 26 Dec 2024 07:47:09 +0000
Manifest this update:     Thu 26 Dec 2024 07:42:09 +0000
Manifest next update:     Fri 27 Dec 2024 07:51:09 +0000
Files and hashes:         1: 326130363a313238313a373030303a3a2f33362d3336203d3e20323135313434.roa (hash: JuSo1DBt1ysBmjCBYR9rL5TjGzKPRzLHlO0o/qG6xX8=)
                          2: 326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa (hash: 5AyW46QS+NNXmeLlk9GX6u+j5sEm8yE34btc4wy6pFU=)
                          3: E472D821C14C9E0738F632D7A74DF516C446A5E2.crl (hash: dXI0NmnaDcR81NWux2H3Bwu2hVVLbcq7hMUX6e70DaA=)
                          4: 326130363a313238313a373034303a3a2f34342d3434203d3e20323136303735.roa (hash: pkHxrCPhxTzTO41txcSg6Ay5+GVAHCLr1XEt+KvKUy0=)
                          5: 326130363a313238313a373032303a3a2f34382d3438203d3e20323135313434.roa (hash: +0kHQpuTESgdMHr9bDetPXMshIIHCo38CJppRhqymzE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            87:f3:9a:47:71:b2:47:fa:02:3d:71:78:2e:fd:15:56:79:8e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
        Validity
            Not Before: Dec 26 07:42:09 2024 GMT
            Not After : Dec 27 07:51:09 2024 GMT
        Subject: CN=8DD037A33864ABCFD0110F33EBD6A2AC023FF280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:ef:f1:4a:67:c5:59:ca:75:7a:1d:ca:65:
                    c2:78:cc:fe:a1:dd:15:6a:6d:7c:25:29:20:bc:06:
                    56:3a:51:82:6d:89:1b:da:88:1d:2c:87:bd:1a:a0:
                    56:a5:7f:8c:22:b9:7d:36:37:a3:41:bb:cb:3d:1c:
                    af:e7:1b:69:82:98:96:23:60:fe:a2:7f:a4:40:97:
                    b2:0d:31:57:ab:9b:ff:44:53:bd:bc:a7:a9:e6:34:
                    e9:82:3b:cb:df:4c:0c:fd:f0:11:db:d7:f7:61:93:
                    f3:13:5f:6d:35:4f:7a:09:59:a6:8a:71:78:02:1b:
                    6f:6a:0a:01:4a:21:6c:e2:45:07:b4:52:65:6d:a4:
                    dd:03:3c:37:83:4a:cd:75:d8:88:19:e2:62:1a:51:
                    03:9f:8f:23:b7:d7:ae:ba:97:ee:e3:7f:5c:7f:c7:
                    22:d1:ed:81:a4:cc:f7:f0:6c:fa:e3:7b:91:71:d8:
                    60:b9:0b:ca:68:ac:5d:4f:aa:7d:0e:79:dc:28:10:
                    67:eb:57:b8:1e:4d:07:a7:1b:4e:c9:ac:bf:75:32:
                    82:43:72:f7:cd:f0:f2:84:db:50:c2:94:82:2f:20:
                    22:a6:06:3a:34:eb:9b:82:38:e6:34:d4:b3:0e:6d:
                    e4:92:6f:df:80:57:7c:c5:60:99:59:79:99:59:4b:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:37:A3:38:64:AB:CF:D0:11:0F:33:EB:D6:A2:AC:02:3F:F2:80
            X509v3 Authority Key Identifier:
                keyid:E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:15:5f:c8:19:c5:0e:11:d7:7f:07:11:95:fb:d1:02:68:
         44:7d:40:ad:9d:b9:6a:0d:80:53:76:f4:17:f8:72:db:de:c6:
         55:4d:f3:2e:df:b4:73:84:d4:b1:24:78:bb:f0:8f:20:84:03:
         be:b7:08:ee:ca:f0:64:ae:c2:50:41:b9:0d:8a:3e:04:1c:3f:
         57:ad:3c:b9:da:35:e5:07:bc:1a:5d:56:af:10:cb:4d:42:6f:
         b7:83:f3:63:66:82:48:e6:7c:1c:0a:84:85:c7:49:3e:53:bd:
         bc:1d:18:24:40:a3:2e:3b:7f:76:ab:c1:d4:51:c2:5d:66:50:
         50:fb:29:3d:56:b5:51:20:9e:f5:d7:e4:13:1e:40:8e:eb:13:
         8c:c0:05:41:3b:73:e2:e4:60:c3:73:be:87:cd:21:01:c0:42:
         b1:34:af:d5:f8:28:f9:91:d0:a9:01:5a:f7:39:25:22:da:4f:
         2e:24:87:7f:c9:d2:d3:26:7d:61:51:07:d9:92:c1:bc:eb:32:
         21:5d:e6:1f:c6:b8:60:ea:0b:1d:8f:47:ef:49:33:72:84:c0:
         ed:00:04:62:40:a0:bb:54:e2:1a:b2:85:57:fa:50:18:92:20:
         6e:cf:1f:e5:6a:89:5a:24:2a:53:99:62:ba:df:79:d6:b9:f8:
         46:85:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----