Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
File:                     2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json)
Hash identifier:          LWneSRFd2p8jdrC/JEKoKFMVCGn6dBb3VhVZuaXp0MM=
Subject key identifier:   3D:8B:0D:A2:0B:3A:6D:23:D5:6D:7B:BE:E8:DA:55:50:E8:B4:6A:8E
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Certificate issuer:       /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial:       50C26786EB1004BF8746454C5362D545F02FDAE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
Manifest number:          4F
Signing time:             Fri 28 Mar 2025 22:09:01 +0000
Manifest this update:     Fri 28 Mar 2025 22:04:01 +0000
Manifest next update:     Sun 30 Mar 2025 01:49:01 +0000
Files and hashes:         1: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: sEgCiTdKWVCXu/d5z0ga/auyfNaYgNDwWsE3XxZT3rE=)
                          2: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: HEuf4N5HtBxndDI0o/WpQQzB2DBT+3NRdASCNLGu8BA=)
                          3: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=)
                          4: 34352e36362e36302e302f32332d3234203d3e20313734.roa (hash: 7t1m1Rme42ZN+/wbBfTFMDvACpXME33cDvgp6giSYyo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c2:67:86:eb:10:04:bf:87:46:45:4c:53:62:d5:45:f0:2f:da:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
        Validity
            Not Before: Mar 28 22:04:01 2025 GMT
            Not After : Mar 30 01:49:01 2025 GMT
        Subject: CN=3D8B0DA20B3A6D23D56D7BBEE8DA5550E8B46A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:7f:23:6a:0e:28:e5:3b:5d:b1:3c:e4:1a:
                    51:3c:02:d3:07:e7:fa:fc:ee:c5:45:5f:78:de:e6:
                    80:a8:00:31:89:b2:12:8c:fd:f1:32:c0:77:fa:e1:
                    87:1d:af:73:12:7c:c7:5a:7d:18:03:b7:f1:e8:ba:
                    82:21:e7:b3:89:39:9f:c1:1a:e0:68:2e:f7:9e:5d:
                    2e:67:24:de:b3:78:9a:84:32:59:1c:a8:e9:08:e3:
                    a3:af:a0:6a:f0:26:c7:90:0e:93:69:94:59:f2:f4:
                    de:90:76:8d:a9:18:37:3e:3c:18:83:bd:36:d3:6e:
                    be:d7:f3:15:72:1d:b1:cf:4c:4d:37:73:56:13:dd:
                    5a:9d:4e:4c:3c:82:c5:c4:43:f0:bb:95:47:41:20:
                    bc:b5:e6:4c:e9:84:0d:ee:c9:24:e9:76:2b:5f:44:
                    6f:c3:9e:ae:31:c5:04:47:7e:f2:7e:5a:b7:d6:c8:
                    2d:6a:b2:59:9d:c8:f9:c7:4d:d3:d8:99:ee:fc:3a:
                    f6:02:72:cb:1e:76:6a:71:68:84:f7:d9:16:fb:55:
                    0f:0f:d0:c5:0c:f1:84:eb:8f:5f:b9:c3:52:e7:54:
                    a7:10:ae:09:c0:c3:d8:3d:a6:27:87:c4:1a:c8:0c:
                    7a:cd:4e:af:81:f5:b2:a8:e2:5e:60:96:01:67:03:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8B:0D:A2:0B:3A:6D:23:D5:6D:7B:BE:E8:DA:55:50:E8:B4:6A:8E
            X509v3 Authority Key Identifier:
                keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:4b:6f:28:58:d4:94:7e:29:3e:f6:3e:a4:ac:33:11:0f:
         75:34:3e:f4:46:1d:d8:77:f8:ca:61:47:a8:2b:f8:73:6f:de:
         c5:4a:28:e4:18:3a:f8:c8:60:0e:50:94:a4:8d:f1:1f:b9:6f:
         f3:7c:90:30:27:dd:14:40:16:1e:c2:88:f2:cf:ad:fb:7f:3c:
         2c:ee:01:31:a5:81:80:42:2c:ec:33:e6:a6:57:f6:09:c2:28:
         b3:22:c3:71:e6:12:56:68:00:3f:5e:d4:77:bc:76:10:e0:fd:
         86:f8:7c:cc:87:7c:1f:18:4c:3a:c2:63:d6:b7:36:56:97:98:
         ac:b7:54:0b:c6:29:6a:44:db:da:47:ec:b5:1e:d0:8d:b5:3e:
         5d:5d:f5:52:d3:ad:53:c5:8e:79:75:a5:6f:b3:ba:97:6e:b2:
         6d:8f:71:18:eb:0b:7b:9b:fc:e1:9c:68:d6:ad:7b:6c:4e:35:
         d2:66:33:81:b9:da:3e:f8:d0:2f:47:24:46:53:8e:9b:98:cc:
         7b:d0:9c:99:69:7f:b6:18:3f:14:e8:c1:46:0b:45:fd:81:1e:
         95:f2:61:ba:73:61:f3:04:24:b8:43:dd:75:5d:1a:c1:b2:1f:
         c2:82:86:30:a7:cb:2e:ff:a6:e0:23:bd:e8:a0:6e:7f:c0:bd:
         eb:09:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----