Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.mft
File:                     B5A381A0FBA779028D2A777759668131A0F8F62F.mft (raw, json)
Hash identifier:          RfP8QXMOgXzaVKEgdfsL2SiC4UraL5iy/d12za8RvEg=
Subject key identifier:   E9:04:B1:B4:1E:AC:EE:84:56:DA:37:42:36:E0:79:B0:AD:63:B3:6B
Authority key identifier: B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
Certificate issuer:       /CN=B5A381A0FBA779028D2A777759668131A0F8F62F
Certificate serial:       65EDA4A0A497BB0108802932A19691D7009397BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.mft
Manifest number:          41
Signing time:             Sun 19 Jan 2025 06:11:48 +0000
Manifest this update:     Sun 19 Jan 2025 06:06:48 +0000
Manifest next update:     Mon 20 Jan 2025 07:23:48 +0000
Files and hashes:         1: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: vC14MQ5Vem5du4Q+HUNQ1hssSIhznMQ3X8RxcinDRN8=)
                          2: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: iJJGlQENumm+DGgHblI6Gp26BMPPZLJuQpiMu7XNYDA=)
                          3: B5A381A0FBA779028D2A777759668131A0F8F62F.crl (hash: S1xrlEfJ/UbB6za2OWdzHAJS3ZZDuyamxQ+0PVxAUXY=)
                          4: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: Gv+e+EAdByeq5hm7hBAHx8qzpVKZEBMeZOuS5oO3NRk=)
                          5: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: pJ8S3eh9hqlIFxOt/KfTAPcTTesNrndXwXDB3fYR2PM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ed:a4:a0:a4:97:bb:01:08:80:29:32:a1:96:91:d7:00:93:97:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A381A0FBA779028D2A777759668131A0F8F62F
        Validity
            Not Before: Jan 19 06:06:48 2025 GMT
            Not After : Jan 20 07:23:48 2025 GMT
        Subject: CN=E904B1B41EACEE8456DA374236E079B0AD63B36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:5c:fd:99:61:c0:6e:fc:33:f5:2b:11:fa:
                    5a:d2:bf:ab:06:a8:52:15:61:26:5d:1c:b4:2c:52:
                    0f:63:68:a3:32:6c:42:4b:e1:75:75:a8:49:3b:0f:
                    9c:51:87:7d:3b:1b:ad:e5:90:10:e5:ce:f1:de:ef:
                    96:f1:2d:17:f8:88:d2:b0:f7:b3:41:92:c3:36:7d:
                    3c:c2:9a:b1:0c:98:19:ec:e4:aa:89:7f:56:4f:33:
                    8d:84:fa:14:22:d6:66:49:19:53:8f:d1:4f:20:e9:
                    a1:6d:c9:3c:ce:d2:0b:6c:0c:4b:18:0c:c4:4c:4f:
                    89:2c:74:e7:85:29:63:76:cc:bb:c5:f9:32:57:51:
                    37:7d:c3:f8:10:2d:4e:35:0a:6d:c7:b7:7a:37:3f:
                    24:6c:c9:be:5e:6d:25:91:a7:7e:18:06:59:8d:ae:
                    8f:2f:c8:f1:02:2a:69:16:74:44:1d:fc:7f:06:a7:
                    58:63:26:6f:00:ba:89:9b:07:85:21:d5:93:65:1d:
                    7f:21:43:ad:38:b7:fa:c6:80:83:80:be:78:83:c0:
                    35:c6:33:66:35:13:7e:c0:6f:45:0a:ea:78:51:f8:
                    86:2c:f8:8d:ec:67:ae:ff:8f:07:4c:5c:a5:98:7c:
                    9f:13:21:a8:9b:a7:8a:db:73:db:54:95:89:b5:ae:
                    1c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:04:B1:B4:1E:AC:EE:84:56:DA:37:42:36:E0:79:B0:AD:63:B3:6B
            X509v3 Authority Key Identifier:
                keyid:B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a9:be:74:41:30:09:4e:7c:c3:0f:06:28:c1:14:1d:e8:d0:
         86:4f:9d:5a:5d:69:b2:71:31:36:76:07:8a:a3:f7:e2:cb:cd:
         46:07:d8:f8:2c:a6:55:af:08:71:b9:e3:17:3b:d6:c7:e6:c5:
         03:ca:bb:89:3e:23:a4:53:eb:6b:da:e2:ef:b3:7b:c7:12:5e:
         b0:98:79:4f:96:48:d0:eb:54:d9:bc:a3:e9:27:0b:9a:62:c0:
         00:e8:90:4e:e2:cb:84:0c:c7:48:aa:a2:75:40:26:29:54:0f:
         07:f2:02:7b:a4:ae:44:2c:6f:b1:82:9d:ac:4e:5a:98:16:ca:
         13:e6:5b:63:84:ee:ed:01:c7:f1:42:9a:0c:6c:bc:a0:be:32:
         0c:6d:db:67:c6:0d:3b:a2:65:c1:06:e8:f5:4e:e1:53:6a:61:
         96:f7:96:85:27:34:2c:87:64:d8:bf:65:40:c9:aa:1d:a9:32:
         56:ba:d5:06:bf:d9:be:16:08:75:ab:37:4f:a5:89:2d:09:1b:
         50:c4:f5:93:ba:52:41:46:22:b3:c1:27:7c:79:05:cd:0e:49:
         d9:93:84:0d:6c:dc:1e:33:5f:0a:ec:3a:71:10:55:bb:30:70:
         e8:8a:34:38:03:53:ed:1f:1d:28:6d:36:43:58:85:9c:ed:80:
         ba:86:71:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----