Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft
File:                     A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft (raw, json)
Hash identifier:          VFWfAQ7vQYV+sZIyVoS0tZmkHus6+y/LN+R7sWuIYnQ=
Subject key identifier:   B7:82:51:CC:93:52:D6:2F:18:AF:36:A3:A7:9D:F3:81:0D:41:42:21
Authority key identifier: A9:36:2D:4E:85:AC:58:9F:D5:EA:F1:AF:B3:8B:36:25:18:68:26:7D
Certificate issuer:       /CN=A9362D4E85AC589FD5EAF1AFB38B36251868267D
Certificate serial:       2F9402AC9643ED032AB36870DA257EABE2CB78D4
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft
Manifest number:          02AC
Signing time:             Wed 05 Feb 2025 23:59:32 +0000
Manifest this update:     Wed 05 Feb 2025 23:54:32 +0000
Manifest next update:     Fri 07 Feb 2025 02:21:32 +0000
Files and hashes:         1: 3139322e36372e33352e3132382f32352d3332203d3e20323135383230.roa (hash: jIfQRkACWyTiR5Mbmv0I29M0Ux0EBQynCrVg5YmGNIs=)
                          2: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (hash: bXJfPCwpbnlLpcmE8lmUOlAlCpmh1jaVIU7iW2EZink=)
                          3: A9362D4E85AC589FD5EAF1AFB38B36251868267D.crl (hash: o0xhVQ7hZp5uuwf00LH3BSO3dItRH6SzKLhtO1n6w+E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:94:02:ac:96:43:ed:03:2a:b3:68:70:da:25:7e:ab:e2:cb:78:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9362D4E85AC589FD5EAF1AFB38B36251868267D
        Validity
            Not Before: Feb  5 23:54:32 2025 GMT
            Not After : Feb  7 02:21:32 2025 GMT
        Subject: CN=B78251CC9352D62F18AF36A3A79DF3810D414221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:d8:bc:6f:18:99:90:e6:3a:03:fb:d8:37:
                    ee:e4:8c:c9:5e:9f:58:31:a2:9c:b8:31:61:e7:af:
                    39:aa:6e:2f:bb:b4:63:f4:73:70:d8:93:87:e2:c1:
                    7e:e7:da:eb:fd:e8:08:e0:18:de:50:91:b9:1b:a1:
                    dd:f4:4f:b8:30:7f:bf:37:00:db:0c:fc:44:32:c1:
                    dc:a0:48:75:f7:73:ec:e6:ac:d5:d8:35:67:e8:1b:
                    ca:92:3a:76:25:0f:91:8a:8b:ca:9e:74:67:4d:d9:
                    00:0e:f5:e4:71:aa:5b:df:f4:5a:d2:44:97:2f:a7:
                    cb:85:fb:89:09:ab:95:b0:2f:99:9e:d8:ce:63:9c:
                    97:9c:84:df:bf:05:b7:ce:7b:f5:77:d2:19:da:f4:
                    3f:11:0c:70:e8:ae:89:fe:13:e0:67:8c:c4:33:9a:
                    e3:37:cc:d3:94:e4:54:fc:d6:42:8a:71:b9:c9:34:
                    cb:21:c9:4a:30:fd:fa:5a:42:de:63:19:9e:81:1b:
                    b6:ca:d1:8b:8f:8a:a5:b6:8b:57:16:c3:f8:15:f0:
                    ab:60:56:ef:68:79:72:ae:aa:8a:58:99:b4:33:78:
                    1f:dd:df:14:1a:d4:35:b7:dc:22:d7:48:94:e4:1a:
                    f2:2b:a4:09:3d:59:8d:01:56:42:a5:2d:52:5a:73:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:82:51:CC:93:52:D6:2F:18:AF:36:A3:A7:9D:F3:81:0D:41:42:21
            X509v3 Authority Key Identifier:
                keyid:A9:36:2D:4E:85:AC:58:9F:D5:EA:F1:AF:B3:8B:36:25:18:68:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:e5:27:90:52:21:2e:fa:34:71:e1:46:bc:de:dc:da:a6:
         1f:46:b7:8a:f5:df:63:11:de:6a:2f:01:87:73:bd:03:2b:32:
         3e:d1:7a:9c:bd:1d:f5:a0:43:39:b3:13:b8:13:62:8c:93:9d:
         fb:5e:18:2c:d6:55:22:5a:37:2e:e3:f0:e9:61:47:7c:6e:4f:
         f8:a4:b3:50:0b:c0:81:bb:2c:a0:c5:6f:c1:80:52:f1:be:9d:
         49:b8:27:d7:de:aa:4a:1d:a6:ea:6b:54:67:d9:7d:eb:87:a0:
         4a:75:55:70:58:8a:9c:4f:f3:6f:a9:d7:39:3e:4e:7c:1d:89:
         0e:f9:8d:72:c7:ec:94:c6:14:1d:43:8b:6b:de:f9:c6:21:6f:
         dd:f2:07:a8:aa:ed:2a:f8:fa:92:56:21:b8:f7:1b:51:4a:02:
         08:09:9f:1c:f2:ff:97:58:c7:56:a6:19:be:0c:7f:54:51:74:
         9f:b1:bb:67:80:55:2d:b7:44:4f:ec:2c:63:9a:ca:c2:d8:e3:
         12:e9:5f:fb:36:23:2d:23:35:d6:39:2a:8d:89:a4:68:75:1e:
         8b:60:b1:9d:6b:88:3e:e6:2d:27:66:7e:16:6b:15:8a:62:24:
         da:74:fc:46:f7:e1:75:79:67:a9:b9:5e:7b:22:c8:29:0d:ec:
         8a:44:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----