Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft
File:                     1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft (raw, json)
Hash identifier:          ZEM2w4nsZlSDvZEDbaEuP0ICPuZkTbkWTkuApvFh/+k=
Subject key identifier:   10:10:2C:85:F9:4F:62:FC:3F:A4:68:C3:22:D2:9B:9F:BA:5B:B1:E4
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Certificate issuer:       /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial:       3435959B5CE2D0D5889EB85F568B81D673092CDC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft
Manifest number:          E8
Signing time:             Thu 06 Feb 2025 09:11:52 +0000
Manifest this update:     Thu 06 Feb 2025 09:06:52 +0000
Manifest next update:     Fri 07 Feb 2025 12:08:52 +0000
Files and hashes:         1: 326130393a353463363a653030303a3a2f33362d3438203d3e20323133393535.roa (hash: l3M6B6Xlvvkk2/KN0m3frkEmvUgqwh1jsuL61CVWdDY=)
                          2: 1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl (hash: JUGL8L48IhVmNXfB21m6KSrjncSzZTrP+6XIje89idc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:35:95:9b:5c:e2:d0:d5:88:9e:b8:5f:56:8b:81:d6:73:09:2c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
        Validity
            Not Before: Feb  6 09:06:52 2025 GMT
            Not After : Feb  7 12:08:52 2025 GMT
        Subject: CN=10102C85F94F62FC3FA468C322D29B9FBA5BB1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:26:88:f0:77:74:6c:c5:a6:22:87:c5:5b:2b:
                    44:ef:db:b4:d7:86:b8:11:2c:de:b0:47:1c:1f:b6:
                    bd:81:85:6c:98:ca:1a:d1:fc:1f:f9:4f:f2:96:97:
                    bc:fb:4b:b0:d5:e0:87:2d:7c:92:17:bf:3e:a6:73:
                    55:b4:d6:8c:f3:47:69:69:59:d4:97:c8:9e:0a:4c:
                    01:1f:43:0d:74:fa:7d:b5:60:3e:4b:5a:e1:bb:fb:
                    58:6b:db:e3:3d:8f:66:2c:b3:47:01:2a:d3:4a:b2:
                    57:0a:fb:f6:aa:23:63:ab:44:8d:d7:34:92:cb:5b:
                    0c:e6:76:17:87:f7:bd:6c:cc:75:a6:59:3f:ec:56:
                    0e:41:00:95:68:73:8c:f3:7b:12:72:b4:98:73:3d:
                    fa:05:7c:f9:91:d2:b7:c3:96:6b:da:04:a6:2f:75:
                    4d:b9:c9:3f:9e:4b:6f:5c:28:43:24:ec:6e:aa:fd:
                    4e:c6:3a:49:92:dc:85:a3:bb:9f:b9:39:0c:5f:cf:
                    82:47:34:a7:cb:3a:c1:b4:e3:1e:2a:b5:20:9a:7a:
                    89:9e:f8:a1:da:e0:d4:27:a4:5d:2c:93:d9:41:45:
                    9d:9b:16:36:a1:3e:40:a4:35:a5:6f:c1:24:fa:04:
                    0c:5e:b3:13:d5:21:c3:0c:e7:b5:ce:d1:c3:91:0d:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:10:2C:85:F9:4F:62:FC:3F:A4:68:C3:22:D2:9B:9F:BA:5B:B1:E4
            X509v3 Authority Key Identifier:
                keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:f4:ad:b9:77:73:d4:3b:b4:90:e1:b7:ff:d7:d9:44:29:
         a3:50:ea:02:b3:cc:d3:52:66:55:44:88:38:23:ed:be:10:dc:
         ea:88:34:c0:6f:d0:3e:e2:00:7f:80:e9:75:91:5b:75:88:58:
         ac:20:f7:06:45:95:37:94:10:a5:1c:67:d6:d5:09:54:09:34:
         4e:54:b0:ef:f4:00:a0:4b:84:db:f1:47:74:68:fd:0f:7f:7d:
         7f:28:70:e9:53:19:9d:ac:88:af:20:61:aa:66:2a:60:e1:ac:
         1b:9c:cf:a0:aa:5d:89:a1:50:e8:6a:16:ae:56:07:80:95:f9:
         d1:50:9b:d9:ae:54:49:fc:72:ae:f2:dd:70:ff:2e:d2:97:e7:
         1c:e2:64:74:c8:5a:0d:f0:1a:52:86:fc:56:6f:d0:11:fe:e5:
         ce:c0:ed:e1:9c:c5:0e:d3:46:14:ce:d9:eb:98:53:f5:d9:a3:
         c2:93:cd:b6:5c:0d:bc:9c:11:6f:21:34:1b:25:30:7c:b5:5f:
         a7:a2:c0:c0:82:94:90:3b:02:4e:cb:18:d2:59:8e:15:93:be:
         71:42:c6:ec:de:8e:f7:2f:88:8f:16:61:a2:b5:e9:fa:57:a9:
         d3:d0:47:44:81:cf:93:d7:6f:e5:43:5a:0e:3c:0a:b3:ba:b0:
         8a:cc:25:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----