Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          qpiUfQxBYToDgjieRmVzEXx0wKG1M8e+cthNStH8X+Y=
Subject key identifier:   81:1D:12:FE:76:38:B3:72:F8:1A:46:D1:6E:DE:94:A0:DA:AE:B5:07
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       65EA8569243E48643E0EACC4465CE84D48A5E21E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          02D4
Signing time:             Sat 29 Mar 2025 11:05:26 +0000
Manifest this update:     Sat 29 Mar 2025 11:00:26 +0000
Manifest next update:     Sun 30 Mar 2025 13:42:26 +0000
Files and hashes:         1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: kzIiKa78uyzgIwp38B3VckxTAvGVZjyeobfym4ZXmx8=)
                          2: AS205329.asa (hash: Dd7JzyQ5+gSfY/FnpvRoNBmxG+ibp+5DFVs8PxvskHk=)
                          3: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: wn4jWAXKVGZz50XMj9RUV1kEeYIYXUmo4f0hmSpe4Z8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ea:85:69:24:3e:48:64:3e:0e:ac:c4:46:5c:e8:4d:48:a5:e2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Mar 29 11:00:26 2025 GMT
            Not After : Mar 30 13:42:26 2025 GMT
        Subject: CN=811D12FE7638B372F81A46D16EDE94A0DAAEB507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:0f:8e:fe:78:42:7a:50:10:0d:f2:80:b1:
                    65:cd:ab:50:ea:b6:c4:c3:3e:ca:88:0e:1d:ca:8a:
                    c7:6f:7c:95:e1:74:41:f6:e5:55:22:05:af:a8:5c:
                    f3:22:76:1a:fd:9a:73:34:31:bf:5c:b4:ec:ae:22:
                    80:9d:76:a4:1e:a8:99:ca:f9:5a:32:0d:d1:10:69:
                    28:61:10:9c:fa:21:0a:6c:d5:3f:74:ac:13:11:a2:
                    01:6a:e2:33:3d:7f:c9:b0:96:cf:29:d3:5b:cb:e4:
                    9a:80:9a:e3:8d:34:b8:20:a5:29:c3:d2:b5:37:b7:
                    ca:87:15:de:2d:57:a6:ba:f4:c0:19:4a:29:1b:03:
                    11:5f:25:06:87:d3:6e:4c:8c:06:c1:7b:6c:53:6a:
                    d5:be:d4:f2:dd:9a:60:ee:e4:1f:9d:e6:aa:49:48:
                    73:f4:58:7d:cf:ed:c0:93:da:f1:f9:a0:a3:c1:03:
                    59:e5:2f:c1:4b:a3:fd:47:a8:0e:3f:b4:c3:d4:f2:
                    ca:3c:10:a9:7f:43:7d:54:45:b4:d7:aa:7d:af:58:
                    6d:28:91:88:33:6e:db:47:61:7f:40:b7:5e:97:a5:
                    35:a6:b2:61:fd:2d:e8:51:56:eb:7b:c4:01:5a:75:
                    39:b1:2b:b6:a4:f1:cd:b8:b2:3d:06:f5:bb:82:28:
                    ef:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1D:12:FE:76:38:B3:72:F8:1A:46:D1:6E:DE:94:A0:DA:AE:B5:07
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:2c:7b:7b:b6:f0:57:98:fa:72:79:bb:00:ff:bc:08:f9:
         68:c7:ec:be:bb:a7:70:ee:3c:c5:e7:44:d9:d4:2d:ee:a4:66:
         5d:b1:7f:31:f0:37:dc:60:fb:e0:d6:95:61:de:42:aa:82:16:
         7f:76:a5:6b:3a:88:bd:3a:ac:03:0e:93:6b:bd:1a:df:1e:b4:
         26:33:7e:d0:71:4d:f7:b0:83:1f:d4:a9:c8:e7:a7:8f:1d:89:
         ad:55:22:ac:15:16:d9:4e:31:8d:19:eb:84:c9:75:65:5a:22:
         d7:2c:ba:e5:f4:9e:95:e8:a7:e4:49:01:40:52:13:31:47:5d:
         2f:4f:2a:66:89:88:cc:12:44:41:65:0d:13:f0:4a:c4:fa:c6:
         f3:13:de:8b:bf:1f:e2:ef:bf:b2:db:72:1c:c3:16:54:b4:9c:
         01:1a:19:fc:56:43:d4:c5:25:a9:1c:1a:89:03:ff:13:a6:b1:
         b6:f6:bb:e3:7a:90:83:c8:fa:45:35:39:63:33:a8:0f:38:42:
         9c:27:14:fd:a9:79:71:66:7c:7f:f4:cf:2d:96:f0:3d:83:16:
         ad:a4:81:9f:f6:d0:0d:01:94:fe:25:f6:21:dc:f5:09:29:f5:
         2a:b1:44:2e:36:29:e1:69:39:fe:13:65:c2:45:c0:8f:e8:5f:
         64:5d:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----