Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
File:                     CF7320162773CFFE2866D9712A738E4199536117.mft (raw, json)
Hash identifier:          lN02/XZDJU5vqyorogcK+YjyqNiPrHkqsINXe09HNa0=
Subject key identifier:   72:5B:7C:E3:4C:A4:9E:A1:B8:40:F3:97:90:83:89:3A:BF:B7:EA:C9
Authority key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
Certificate issuer:       /CN=cf7320162773cffe2866d9712a738e4199536117
Certificate serial:       2ECB03882D53D838AEA57512C47002ABABDC6636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
Manifest number:          8A
Signing time:             Sat 13 Dec 2025 07:20:13 +0000
Manifest this update:     Sat 13 Dec 2025 07:13:48 +0000
Manifest next update:     Sun 14 Dec 2025 09:50:48 +0000
Files and hashes:         1: CF7320162773CFFE2866D9712A738E4199536117.crl (hash: JXmC98aqpcZ4INpXvX6kcvkcnAad6Wo4vJFzgujHOnE=)
                          2: AS208824.asa (hash: pO2oqucndlObtPTLzYJvUNtIOdgCmd6bYfZzGJi1V2k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cb:03:88:2d:53:d8:38:ae:a5:75:12:c4:70:02:ab:ab:dc:66:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7320162773cffe2866d9712a738e4199536117
        Validity
            Not Before: Dec 13 07:13:48 2025 GMT
            Not After : Dec 14 09:50:48 2025 GMT
        Subject: CN=725B7CE34CA49EA1B840F3979083893ABFB7EAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:08:d5:6a:c9:cb:86:49:84:39:db:14:49:
                    52:92:9b:8d:45:d7:73:9c:77:40:49:fc:06:fe:18:
                    4d:5e:40:1b:0a:60:73:38:2a:c5:9c:4d:94:8b:28:
                    59:19:e6:08:1c:d0:3b:86:89:57:2f:6e:22:e7:b3:
                    a1:bb:6b:14:c5:ae:a6:f7:24:0c:ca:1e:10:30:a5:
                    e6:4e:38:ad:55:03:b3:c9:ff:1b:87:26:88:f1:cb:
                    23:18:63:be:f7:0f:dd:a1:bb:4d:61:1a:75:75:bc:
                    dd:fd:93:4b:0a:ea:25:3e:40:27:42:48:8d:8d:a0:
                    04:3a:ed:d4:55:04:5b:fc:15:da:15:2d:e6:ca:9d:
                    38:d2:ef:9e:02:97:24:aa:4d:5a:6f:e3:69:76:82:
                    40:cc:b4:d4:28:e5:e4:2b:d4:7c:ff:f5:3d:aa:1f:
                    dc:be:14:5a:86:f7:45:ff:a1:eb:c3:06:1a:19:99:
                    39:45:4f:0f:a5:f9:ce:75:4a:75:19:a8:13:52:54:
                    dd:6e:f2:c8:04:f1:fe:25:50:68:4d:a1:70:41:8f:
                    43:3f:2e:ef:b6:10:a7:ad:71:9c:82:95:fe:84:d8:
                    be:05:f7:9a:a3:8c:4f:d5:27:10:fe:f2:3d:55:94:
                    53:45:8c:c4:a9:2e:f6:86:0d:60:00:f2:0e:54:c3:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5B:7C:E3:4C:A4:9E:A1:B8:40:F3:97:90:83:89:3A:BF:B7:EA:C9
            X509v3 Authority Key Identifier:
                keyid:CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:01:67:a2:08:b1:f0:d1:5e:b7:61:f1:b6:6f:11:ec:cd:f2:
         98:e3:ec:4e:bb:c3:e1:f9:47:b2:01:11:d1:58:b5:52:aa:94:
         9e:4e:c2:bf:c6:61:1a:6b:f8:68:47:7b:b9:29:00:fd:fb:2a:
         ae:3b:c0:51:3d:e8:96:e3:b1:61:fa:55:77:ae:96:0f:31:f1:
         de:e8:2b:b7:9e:bf:61:7f:60:96:86:0e:9a:d3:a6:06:92:17:
         3c:57:68:5a:df:20:7b:89:d0:cc:47:36:a8:fb:b1:0b:6f:43:
         44:67:2f:14:72:da:31:47:b2:02:7d:98:6a:a5:b0:10:90:ac:
         78:3b:8e:8e:bd:91:f9:48:27:c6:a9:9e:a3:30:1b:32:fd:e0:
         98:41:72:92:17:dc:88:6d:e8:33:f7:f4:aa:71:52:f6:eb:37:
         4c:52:3e:6a:38:77:2f:fa:bd:01:bf:d6:87:15:9a:73:7a:1d:
         0a:b0:a0:5c:9a:df:d1:65:27:a9:98:23:c7:fb:72:62:59:7d:
         07:85:db:a0:3c:96:ba:a9:47:15:1e:35:1a:dc:f7:54:3f:c9:
         bd:bf:6c:c7:cd:11:7b:13:a6:53:ec:76:cc:01:0f:cd:71:fd:
         37:36:31:70:19:79:be:09:85:4e:eb:6e:ba:7a:83:cb:de:25:
         3b:c9:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----