Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
File:                     CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json)
Hash identifier:          XiqRJTrzau2ZdiW6FLWqL/MJTjcN3PLhwB3tLpOmiOE=
Subject key identifier:   24:C3:75:CD:E4:BF:D8:91:2D:8B:6C:3D:2E:F4:DE:F2:A7:81:2F:E4
Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
Certificate issuer:       /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
Certificate serial:       7D04FDF2C6FA886A0A35880D0296A7F5009F4FE7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
Manifest number:          010C
Signing time:             Sat 29 Mar 2025 07:05:10 +0000
Manifest this update:     Sat 29 Mar 2025 07:00:10 +0000
Manifest next update:     Sun 30 Mar 2025 10:53:10 +0000
Files and hashes:         1: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=)
                          2: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: 5YKhEXv4cdvc8cMmiU8uT0Hd0/LjzKWixX18xXr8Oyc=)
                          3: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=)
                          4: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=)
                          5: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=)
                          6: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=)
                          7: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:04:fd:f2:c6:fa:88:6a:0a:35:88:0d:02:96:a7:f5:00:9f:4f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
        Validity
            Not Before: Mar 29 07:00:10 2025 GMT
            Not After : Mar 30 10:53:10 2025 GMT
        Subject: CN=24C375CDE4BFD8912D8B6C3D2EF4DEF2A7812FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:60:d4:c7:d2:13:31:a5:37:8b:b6:10:f9:
                    f3:2a:97:69:ac:85:6c:72:48:a7:f5:de:2b:bc:03:
                    03:c2:63:9b:55:42:32:d7:a3:17:60:51:b7:62:ab:
                    0d:d2:0b:bf:5c:d7:c2:a6:6d:36:66:f7:4c:d2:2f:
                    1e:cc:7f:53:0f:a3:83:2f:ec:f7:f1:47:99:e7:33:
                    ab:f6:8c:40:db:ae:37:ee:3c:1d:49:b0:7d:ad:3b:
                    c8:9f:43:a0:c3:80:04:25:ce:43:29:d3:18:01:63:
                    44:00:85:73:91:86:ce:f5:e1:9e:c5:37:7d:f3:48:
                    ac:0f:d9:73:f9:38:e1:5a:ef:b1:30:27:b4:d5:af:
                    79:28:88:8c:ec:b0:8c:a2:45:b6:47:1a:9f:5e:b3:
                    79:e3:a9:8f:da:d5:33:b2:0b:dc:ef:7e:9a:f9:6b:
                    39:13:ef:0a:c4:f4:06:86:f4:58:8b:3e:62:d2:e7:
                    2f:94:e4:c3:51:f0:0b:ee:07:cd:d8:a9:3c:d6:65:
                    ad:36:ef:68:63:c3:9e:5d:ee:52:55:59:ee:06:be:
                    7c:41:f8:99:e9:c5:ff:ad:c3:d6:a9:24:55:1b:ea:
                    0f:6d:46:1d:24:73:81:91:50:0b:37:a0:18:01:c0:
                    dd:69:67:f1:56:6d:8b:11:38:2b:99:fa:f2:90:ac:
                    13:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C3:75:CD:E4:BF:D8:91:2D:8B:6C:3D:2E:F4:DE:F2:A7:81:2F:E4
            X509v3 Authority Key Identifier:
                keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:57:a7:c3:80:be:ba:9d:49:c9:b7:3b:f1:18:ec:c5:b2:
         e3:7e:a9:11:35:4d:ae:a7:e4:be:da:8d:b1:f2:0a:25:03:dc:
         f9:95:69:b6:33:87:d1:7d:13:23:65:e1:c1:89:6c:ec:da:93:
         05:dc:d8:d1:86:a7:60:48:1a:26:36:9c:98:3b:6f:bb:8b:0a:
         e0:7d:26:5a:0b:78:03:ea:c7:6b:09:07:36:d1:05:ec:62:af:
         47:7b:aa:64:ee:23:19:e6:d2:a6:82:ef:ad:99:a2:9a:0d:1e:
         1e:a4:cb:3e:0c:7b:d1:62:26:04:68:5a:7d:b0:b6:b7:13:b5:
         97:a5:98:16:80:b8:51:ce:61:98:51:cb:1d:e4:d1:68:0d:72:
         11:89:98:74:98:16:e1:09:f5:1d:db:d8:39:d2:be:c9:39:99:
         21:ea:71:06:65:26:8a:0d:f2:04:33:93:b7:c5:c6:00:a3:58:
         e1:7d:7e:b7:cf:b2:9e:d8:92:10:ce:b3:d0:6b:29:c0:7a:fd:
         3c:c8:1d:9a:62:5a:2d:4c:da:20:b1:2e:c1:0a:16:58:ba:39:
         25:ce:98:54:37:58:14:65:5c:af:4f:18:ac:c9:46:79:c1:2d:
         16:63:56:d1:3b:72:b2:85:a4:06:60:3c:cf:95:f9:e2:c6:5e:
         4b:6f:d2:df
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUfQT98sb6iGoKNYgNApan9QCfT+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz
Rjk1NTFDRDAeFw0yNTAzMjkwNzAwMTBaFw0yNTAzMzAxMDUzMTBaMDMxMTAvBgNV
BAMTKDI0QzM3NUNERTRCRkQ4OTEyRDhCNkMzRDJFRjRERUYyQTc4MTJGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8GDUx9ITMaU3i7YQ+fMql2ms
hWxySKf13iu8AwPCY5tVQjLXoxdgUbdiqw3SC79c18KmbTZm90zSLx7Mf1MPo4Mv
7PfxR5nnM6v2jEDbrjfuPB1JsH2tO8ifQ6DDgAQlzkMp0xgBY0QAhXORhs714Z7F
N33zSKwP2XP5OOFa77EwJ7TVr3koiIzssIyiRbZHGp9es3njqY/a1TOyC9zvfpr5
azkT7wrE9AaG9FiLPmLS5y+U5MNR8AvuB83YqTzWZa0272hjw55d7lJVWe4GvnxB
+Jnpxf+tw9apJFUb6g9tRh0kc4GRUAs3oBgBwN1pZ/FWbYsROCuZ+vKQrBOhAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUJMN1zeS/2JEti2w9LvTe8qeBL+QwHwYDVR0j
BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1
Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1
NTFDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z
NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS9DRTFCNEY0MzY3QjZBNTVGMzRD
QTk4MUEwRDZDQTc1ODNGOTU1MUNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBVXp8OAvrqdScm3O/EY
7MWy436pETVNrqfkvtqNsfIKJQPc+ZVptjOH0X0TI2XhwYls7NqTBdzY0YanYEga
JjacmDtvu4sK4H0mWgt4A+rHawkHNtEF7GKvR3uqZO4jGebSpoLvrZmimg0eHqTL
Pgx70WImBGhafbC2txO1l6WYFoC4Uc5hmFHLHeTRaA1yEYmYdJgW4Qn1HdvYOdK+
yTmZIepxBmUmig3yBDOTt8XGAKNY4X1+t8+yntiSEM6z0GspwHr9PMgdmmJaLUza
ILEuwQoWWLo5Jc6YVDdYFGVcr08YrMlGecEtFmNW0TtysoWkBmA8z5X54sZeS2/S
3w==
-----END CERTIFICATE-----