Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
File:                     77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft (raw, json)
Hash identifier:          sxU6CDM6ZzyHq3bfTFrsA8xePdTq6nO45XoIRin1ZVA=
Subject key identifier:   F5:80:D3:A4:E5:A0:4E:70:6D:6D:CC:6F:27:07:F8:0A:56:A4:D4:E2
Authority key identifier: 77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2
Certificate issuer:       /CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72
Certificate serial:       617D4961474D5296B444D637BE17F3C78EEEECB6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
Manifest number:          0108
Signing time:             Thu 20 Mar 2025 09:33:24 +0000
Manifest this update:     Thu 20 Mar 2025 09:28:24 +0000
Manifest next update:     Fri 21 Mar 2025 13:01:24 +0000
Files and hashes:         1: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Pz8YuajHR3RKHabgAdN5D6D4yfaEKoRCNMV/secsEfc=)
                          2: 77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl (hash: iPI/Dq+ZGMGbfnoDh77mAeqE9hS1IgQktisGslKmYhw=)
                          3: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: oP/+2n5Cjna0fXd3Uue3NmDpz4g1Sc9gKwpKaACd5fA=)
                          4: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 97vZ9tjE/B2cFID5TaKGht939nhzUnF3N3C8Tt+dRqI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7d:49:61:47:4d:52:96:b4:44:d6:37:be:17:f3:c7:8e:ee:ec:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72
        Validity
            Not Before: Mar 20 09:28:24 2025 GMT
            Not After : Mar 21 13:01:24 2025 GMT
        Subject: CN=F580D3A4E5A04E706D6DCC6F2707F80A56A4D4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:7d:fc:fa:17:a1:aa:a3:00:a3:55:f9:2d:
                    a4:50:c5:82:f1:31:d5:81:94:3e:9c:7e:20:9b:03:
                    95:8c:ed:4d:cb:67:58:96:16:b7:cf:6c:4c:49:1b:
                    1b:f7:a6:48:2b:9e:21:19:0d:ae:35:ed:df:de:87:
                    18:58:8b:30:97:03:e8:07:88:f3:46:d2:c2:90:f6:
                    62:e3:37:33:87:4c:52:88:75:1b:41:5e:3e:7d:8b:
                    e8:6e:a4:4f:ee:e1:e0:76:c4:3b:63:bf:a0:8e:d6:
                    99:ab:f2:83:97:67:df:ed:d0:71:8a:97:54:51:47:
                    62:82:e1:44:86:fc:63:b8:9c:06:fa:19:81:89:b8:
                    0d:24:a1:a3:05:9a:4e:29:4e:94:48:cf:b0:fa:b3:
                    f9:06:af:b9:f4:64:cc:3b:ed:7e:59:44:d7:49:1a:
                    68:be:4e:b7:38:b1:fd:1b:1b:d8:3d:ed:83:2e:15:
                    65:42:85:a6:df:05:04:b7:e7:71:ba:9e:c1:61:e2:
                    03:19:15:60:f0:b9:c6:d6:b7:94:a9:50:ad:c8:9e:
                    be:bc:fd:ec:84:b2:87:44:2e:12:cd:29:4a:06:f0:
                    3e:7b:50:18:8b:c3:6a:ed:c1:ad:d2:e1:7c:e0:e4:
                    0e:02:da:c8:fc:ee:75:58:44:d9:9c:02:2d:aa:e4:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:80:D3:A4:E5:A0:4E:70:6D:6D:CC:6F:27:07:F8:0A:56:A4:D4:E2
            X509v3 Authority Key Identifier:
                keyid:77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:47:4c:14:6b:d6:65:0e:21:4b:45:d3:2a:f8:7f:e6:70:
         a9:7b:7b:22:1d:41:43:f2:1c:20:71:5b:24:dd:24:7f:1b:32:
         3d:35:71:46:e4:a1:d8:3f:d0:de:ac:aa:76:ee:97:c8:6c:76:
         25:9e:73:bb:e8:a1:6b:42:bc:1e:8b:7e:23:84:4d:97:27:27:
         46:30:0f:95:7e:1f:2c:b8:f1:e2:04:7e:24:cf:45:b7:63:5f:
         cc:20:d1:47:ca:5f:b6:41:df:e5:d9:88:1d:56:fe:ac:11:75:
         f6:96:ed:bf:6a:8b:c1:10:2e:b8:e9:ac:b3:a3:2e:e1:1c:30:
         05:31:57:0b:95:5d:69:63:7b:d2:2e:ec:f0:0f:49:54:c6:f1:
         08:bf:b3:2a:2c:10:a2:83:8b:36:3b:3f:a1:91:7a:a7:93:9e:
         cc:fe:98:ef:60:88:56:79:5b:e9:ec:48:b3:9d:c2:36:00:e4:
         f9:b6:2c:75:24:a3:71:7c:e5:3e:da:d7:3f:9a:29:9f:d4:7c:
         5a:52:f4:a5:73:68:f2:fa:76:df:c1:22:fd:32:70:6a:56:7e:
         35:d0:8c:2c:37:47:6f:9e:db:ba:2e:a2:0f:54:5a:85:af:1d:
         53:b0:f1:10:6a:b1:1c:f6:af:40:c7:7a:f2:03:31:5c:b8:92:
         17:18:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----