Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft
File:                     32F267CC5A6C13207B7228C9D0A849752F5036FF.mft (raw, json)
Hash identifier:          5V4ps/25gDOO0uviPgQkg908ox//bzdBZnTTBlS3j0I=
Subject key identifier:   49:60:E8:90:55:E3:13:67:D9:29:B4:1C:B4:9A:6B:21:E8:17:CD:A3
Authority key identifier: 32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF
Certificate issuer:       /CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
Certificate serial:       238E25E383F4CAC11ABB0245FA21665B61F93279
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft
Manifest number:          0184
Signing time:             Tue 25 Feb 2025 21:56:10 +0000
Manifest this update:     Tue 25 Feb 2025 21:51:10 +0000
Manifest next update:     Thu 27 Feb 2025 00:55:10 +0000
Files and hashes:         1: 326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa (hash: nx8q2xxj7wMAWWjRSEpsj0HhZ2OuO17fOulxraSQVeQ=)
                          2: 32F267CC5A6C13207B7228C9D0A849752F5036FF.crl (hash: 6r1BcCvoET7uSJzmJlVRYDHuzlSfns/fvWnVcxnAOx8=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: C+/5Fqt1EjKSBiYdvfzIqOVpcQwWPu5KGpUnV0uYEUU=)
                          4: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: lBguX5qL60lkOYLO/woLFx0TG9m537DV71JeLaqgZm8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:25:e3:83:f4:ca:c1:1a:bb:02:45:fa:21:66:5b:61:f9:32:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
        Validity
            Not Before: Feb 25 21:51:10 2025 GMT
            Not After : Feb 27 00:55:10 2025 GMT
        Subject: CN=4960E89055E31367D929B41CB49A6B21E817CDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:18:80:97:e2:07:cc:09:f5:32:99:a9:50:
                    94:0d:95:b4:79:79:7e:9e:04:3a:fc:e3:e4:c6:d6:
                    ff:ee:d0:4e:be:bc:c6:9f:c0:bd:71:13:93:6c:5e:
                    f1:3c:e0:56:30:cf:11:19:fb:a1:d5:66:f4:fc:ae:
                    4a:24:09:dd:54:17:b7:7f:a0:c5:d1:04:76:32:0f:
                    40:6e:3c:3c:15:ae:ef:7d:a4:fc:10:ea:60:22:90:
                    8d:ad:20:d1:ef:11:ee:8c:d7:eb:49:be:cd:24:d8:
                    20:6a:72:76:9d:c3:b7:7c:41:74:6b:89:9e:46:e1:
                    0f:03:46:8a:66:0d:eb:78:2b:87:76:79:48:83:7f:
                    2c:3e:02:f7:92:82:1c:4e:33:4e:07:25:0d:7d:29:
                    42:06:d4:26:1b:e0:ee:16:76:39:cf:4f:94:96:38:
                    04:0b:65:69:be:23:88:a6:85:79:52:2d:2e:b2:67:
                    1d:c8:b4:e5:84:b9:37:aa:30:e7:ad:84:6c:21:5b:
                    6b:18:8f:4d:36:f8:05:81:b1:54:f6:dd:28:13:c8:
                    3b:c5:33:c8:d3:5c:92:9c:3b:d3:86:bb:ad:5a:6c:
                    ef:d3:b9:13:40:2c:c6:0b:31:ea:22:4a:92:90:3b:
                    2f:8f:82:76:34:f2:3b:d9:66:54:61:d2:fb:6a:18:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:60:E8:90:55:E3:13:67:D9:29:B4:1C:B4:9A:6B:21:E8:17:CD:A3
            X509v3 Authority Key Identifier:
                keyid:32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:02:4e:a9:9b:b4:83:94:3e:a8:b5:7f:c1:e4:72:93:d1:
         50:c5:7d:3a:1b:37:a6:8b:70:dd:03:b5:09:47:d7:39:85:96:
         3e:63:93:9c:38:1e:2d:7b:24:0d:33:79:55:01:a7:b5:63:a8:
         24:3c:8f:7f:d4:c4:78:14:78:ca:e6:eb:f9:ae:42:c1:29:46:
         7b:10:3c:55:66:84:ad:d7:5e:e6:c3:cb:e8:35:1a:cd:3f:a1:
         e2:e3:80:72:c7:df:04:08:d7:89:35:94:4d:29:cb:7c:a1:11:
         6e:16:fa:ed:1e:d8:73:7a:45:10:03:9a:f3:ac:6c:b3:df:c3:
         de:9e:d4:fb:50:fe:8a:97:28:41:56:6a:00:7c:58:d4:09:d5:
         67:e4:7b:2c:38:fa:1a:13:a0:32:0c:61:eb:1e:65:f1:75:a7:
         20:1f:e8:5c:4a:b0:92:95:9a:52:1e:5b:dc:83:10:d5:f3:cd:
         08:20:f1:93:5b:c8:8a:b0:ad:1c:15:bb:6e:16:00:26:98:96:
         3c:0e:3f:4e:e4:d1:07:c2:ab:a9:9c:11:81:be:b2:d4:4c:db:
         ed:03:25:31:61:2e:c0:7a:18:04:9a:a1:13:f2:c5:ca:2f:08:
         6d:36:fc:4b:1e:17:a0:46:94:cc:1d:33:31:ff:64:b5:5c:fd:
         44:ef:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----