Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft
File:                     635199CDC46CB6919367127D69C22339E990FFDA.mft (raw, json)
Hash identifier:          GtOayhxCojXtPktgd6bKsiiR0n6MX4CWeZgi336OfY8=
Subject key identifier:   50:CD:62:B3:85:03:F2:0E:17:89:66:D1:52:EB:89:D8:D4:00:BD:72
Authority key identifier: 63:51:99:CD:C4:6C:B6:91:93:67:12:7D:69:C2:23:39:E9:90:FF:DA
Certificate issuer:       /CN=635199cdc46cb6919367127d69c22339e990ffda
Certificate serial:       270E0EE57DEF8016BCF393AADECD92B3B2C3818F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft
Manifest number:          0325
Signing time:             Sun 30 Jun 2024 01:09:03 +0000
Manifest this update:     Sun 30 Jun 2024 01:04:03 +0000
Manifest next update:     Mon 01 Jul 2024 04:50:03 +0000
Files and hashes:         1: 323030313a3766383a3133373a3a2f34382d3438203d3e20323032303736.roa (hash: gr2scuw8215fcjf4E+kuQNGy0DfafVxKb2y46vdAZKc=)
                          2: 635199CDC46CB6919367127D69C22339E990FFDA.crl (hash: BCUM28wRcFuM8lmwsIz4Plbx9u9WRi6dAqYyfEnmSD8=)
                          3: 3138352e302e322e302f32342d3234203d3e20323032303736.roa (hash: L50rf6xo5gvfQ5YmgAqRN+Dyy0oJvjmP5yfRq/ds1Ok=)
                          4: AS202076.asa (hash: Jlztg0528nmCbYVda1dVfuqysePPK1bc5kEbKCFdTCA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0e:0e:e5:7d:ef:80:16:bc:f3:93:aa:de:cd:92:b3:b2:c3:81:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635199cdc46cb6919367127d69c22339e990ffda
        Validity
            Not Before: Jun 30 01:04:03 2024 GMT
            Not After : Jul  1 04:50:03 2024 GMT
        Subject: CN=50CD62B38503F20E178966D152EB89D8D400BD72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:67:4b:f5:7d:3e:8b:0f:87:e4:ca:ff:ea:
                    af:af:56:6f:35:5c:8c:55:f8:27:a0:4a:da:ba:09:
                    7f:fb:e7:6e:a8:00:5c:48:c0:4d:0f:10:54:58:b5:
                    e7:b4:1a:12:59:8b:1e:09:dc:59:7a:58:ce:f8:a6:
                    ef:de:b8:25:b2:14:dc:81:ea:c1:8d:f0:70:96:25:
                    96:76:84:13:06:87:53:2d:8c:19:7c:0c:cd:cb:c8:
                    96:b2:78:ba:95:bd:e9:0d:de:7d:0f:9a:8f:27:00:
                    27:e0:68:f3:5a:39:db:3d:f1:a5:87:36:19:0d:c2:
                    a6:bf:1a:d4:ab:cb:0e:6a:62:b8:b4:ba:8c:35:8e:
                    3c:80:bc:29:db:7b:40:c7:69:a9:f5:63:d6:ab:57:
                    14:fa:b8:92:a1:a1:2c:d4:29:e8:28:54:59:c6:8a:
                    fc:2f:f2:b4:5f:ce:48:eb:aa:2f:c1:eb:01:16:7b:
                    60:4b:08:b1:f6:d4:e4:ac:03:eb:0b:2a:35:3e:2e:
                    71:a5:16:a9:c4:58:86:3e:c9:82:d6:5d:c5:a9:c5:
                    15:24:ed:29:96:3a:91:ad:e1:4f:26:7d:09:ca:3a:
                    fa:df:bf:11:79:4c:83:fb:f4:bb:6b:5a:0f:bb:1a:
                    e4:07:55:73:c9:88:a6:63:bf:bf:52:1f:a1:27:5e:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CD:62:B3:85:03:F2:0E:17:89:66:D1:52:EB:89:D8:D4:00:BD:72
            X509v3 Authority Key Identifier:
                keyid:63:51:99:CD:C4:6C:B6:91:93:67:12:7D:69:C2:23:39:E9:90:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:08:dc:54:8c:5d:05:a1:75:d1:38:cb:22:f9:8e:1c:fa:36:
         20:eb:9b:83:31:68:74:3b:bd:23:22:31:eb:97:b0:66:e1:b5:
         33:fd:70:8a:55:14:02:15:b0:20:40:96:f4:f0:8a:85:e0:1b:
         55:38:f4:21:ce:18:6b:0e:33:82:7e:44:72:a9:2f:d1:22:75:
         4c:9c:50:47:cb:10:18:9e:e6:b3:33:c1:cb:7b:56:4e:5c:79:
         a4:75:eb:bb:44:07:17:0a:c7:60:13:df:83:87:ce:11:ee:4c:
         08:59:f9:48:1a:47:02:bf:c3:7c:56:95:47:cc:fa:cd:5c:6b:
         e4:89:7c:81:41:c3:85:a6:94:bc:d6:e2:0d:f2:33:07:87:34:
         4c:65:1f:3d:5f:83:7a:bd:f6:7b:cc:81:b6:7f:85:21:4f:d0:
         25:32:37:fa:29:0d:5e:56:d9:02:4d:04:de:0e:7a:72:ef:3f:
         ec:9d:06:3b:ab:7d:e0:1b:a9:e3:5c:a6:53:ad:cb:a7:7f:51:
         a2:e8:24:6e:b0:81:46:ba:41:e9:82:fb:49:11:31:13:cf:77:
         be:bd:78:f4:90:84:59:7d:a3:1e:e8:16:da:f6:1d:1c:cd:15:
         c7:33:67:a3:c8:da:a5:63:61:6a:f9:2a:0e:eb:36:98:4c:61:
         d9:06:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----