Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
File:                     4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json)
Hash identifier:          FFdPxyCdJCTAj/W2RDSyvMM1dYWWSUt2ias32QGV4O8=
Subject key identifier:   F4:E6:C2:04:AE:FB:35:75:3B:02:AF:5D:1B:D9:60:FF:9B:6A:CB:C2
Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6
Certificate issuer:       /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6
Certificate serial:       1D8F6D23DB5E07E79BAB7C4E0982585CF5722B16
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
Manifest number:          AC
Signing time:             Sat 29 Mar 2025 09:44:59 +0000
Manifest this update:     Sat 29 Mar 2025 09:39:59 +0000
Manifest next update:     Sun 30 Mar 2025 10:50:59 +0000
Files and hashes:         1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=)
                          2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: VV7vhPMcEuGcyePPX+Aya/Jv/k0I7KDAaNQh8tm3Hjg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8f:6d:23:db:5e:07:e7:9b:ab:7c:4e:09:82:58:5c:f5:72:2b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6
        Validity
            Not Before: Mar 29 09:39:59 2025 GMT
            Not After : Mar 30 10:50:59 2025 GMT
        Subject: CN=F4E6C204AEFB35753B02AF5D1BD960FF9B6ACBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:65:a5:fc:fa:a3:ce:9c:fe:a4:a4:7b:fd:
                    e2:a0:50:76:1c:01:93:4b:db:73:22:e7:b0:12:09:
                    87:9a:f0:b4:36:8b:33:64:52:2e:c5:de:34:3c:ee:
                    52:04:de:27:68:47:89:4c:1b:22:ea:f0:88:71:92:
                    2f:29:5c:39:29:f7:45:42:ff:ed:39:f2:b8:2c:04:
                    60:53:e1:27:61:a1:6c:21:af:fa:c0:79:0e:29:9e:
                    d4:8f:aa:50:5b:43:72:c8:df:99:a1:e2:53:ae:5c:
                    84:70:19:06:eb:3b:97:ba:db:37:af:9f:57:3e:24:
                    0a:3b:6e:0d:17:e6:89:5a:60:86:a9:ac:fb:48:eb:
                    d7:58:2c:0d:5e:d7:24:61:65:cd:4f:6c:39:17:4a:
                    88:20:70:7f:e5:02:97:b2:11:f7:b9:fd:bf:0b:e0:
                    7a:dd:93:ac:9c:f4:46:7a:5f:94:9a:b2:f1:be:3c:
                    32:97:c4:b3:d2:7b:2c:c8:2e:f7:a3:1c:ad:ea:c8:
                    ab:99:1b:fa:a7:4d:1c:3c:41:5a:10:8b:b9:97:b8:
                    04:82:89:6b:47:2a:8b:97:15:f0:6f:ff:6e:af:8d:
                    5a:33:a7:c5:98:8d:4f:0b:aa:64:fe:b7:10:ac:44:
                    89:00:86:34:c3:46:ad:7a:79:fa:8c:de:ef:d3:5b:
                    08:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E6:C2:04:AE:FB:35:75:3B:02:AF:5D:1B:D9:60:FF:9B:6A:CB:C2
            X509v3 Authority Key Identifier:
                keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:4b:a5:50:f8:df:35:4f:a1:57:2f:ee:16:a5:f8:99:c9:
         d0:69:6c:84:fb:91:22:92:22:83:bc:47:e8:31:12:2c:e4:14:
         3a:40:15:e9:c6:3b:14:35:15:f7:91:06:f2:0c:c0:a1:8f:4a:
         e6:7b:b5:d9:9b:87:df:ce:4c:f2:d9:22:df:fd:5f:ad:28:61:
         60:27:ec:66:58:ee:8d:65:7c:9b:2a:f1:54:72:dd:3d:7b:66:
         29:73:70:85:19:d0:16:f9:85:6e:f8:8a:8c:47:68:8c:73:93:
         7f:80:94:00:9b:64:b5:5f:9c:19:2c:87:6a:61:3f:6a:b6:48:
         55:24:c2:c5:a7:05:e0:1e:54:ff:23:af:e8:fe:08:f3:9a:5a:
         aa:1f:63:6f:00:d1:ab:ad:d4:11:0a:6b:7b:56:75:55:3b:34:
         a3:4e:b2:91:12:02:d3:2b:2d:6e:96:dc:d3:60:c1:96:70:6e:
         d4:e4:0c:af:84:2f:6a:dd:28:12:9b:44:c9:fb:ea:f4:03:b4:
         1a:1d:d2:90:b7:c3:ff:95:b2:21:cc:15:40:34:0b:7e:98:f1:
         e4:e7:3e:b3:58:5f:89:ab:74:c5:33:d4:44:b2:05:df:ec:7f:
         c6:ae:fa:52:48:96:55:d8:aa:15:18:48:21:5b:53:9a:8d:58:
         c3:87:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----