Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          rl5ekfF5y4XFW30sSP2DZvVbdjOu3/W38zHTuTxyCbo=
Subject key identifier:   B6:20:FD:80:BA:1B:53:9F:7C:C7:F6:5D:85:39:D1:64:6B:CF:81:7A
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       79215F5103672FE9C8A395F0DAB2F65EAA8C1ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          0445
Signing time:             Sun 13 Apr 2025 11:37:45 +0000
Manifest this update:     Sun 13 Apr 2025 11:32:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:43:45 +0000
Files and hashes:         1: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=)
                          2: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=)
                          3: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: RdNeGgh3CccdVCzhj+V9wK492AA2cZ7qrAw/VpGJAGQ=)
                          4: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=)
                          5: 38312e32372e39362e302f32302d3230203d3e203234383531.roa (hash: XazNaC+hpMVCJhcoP3zL+9MGci5nPbb/SboV8YXiO2c=)
                          6: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (hash: ZdZRlvPz8E9OObfHOShlKU2uuHjCBKEbQURGTOBsuE8=)
                          7: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=)
                          8: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:21:5f:51:03:67:2f:e9:c8:a3:95:f0:da:b2:f6:5e:aa:8c:1e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: Apr 13 11:32:45 2025 GMT
            Not After : Apr 14 14:43:45 2025 GMT
        Subject: CN=B620FD80BA1B539F7CC7F65D8539D1646BCF817A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:34:27:68:29:1d:7c:07:11:b9:c6:7d:d2:
                    6d:e9:c7:21:33:f6:3a:a5:17:d6:58:a3:51:02:d2:
                    7c:3e:3a:d4:d3:e3:35:b2:b7:28:02:8e:f8:8e:23:
                    12:80:53:a6:2d:19:5e:6e:dc:c2:cd:c5:c5:3c:99:
                    42:99:f7:9d:16:b5:31:f6:9c:26:6e:9a:9a:7b:76:
                    33:a7:3d:1f:e6:58:aa:92:8c:24:02:1c:41:d5:4b:
                    c9:75:be:8e:2a:71:ba:f7:5f:4e:a5:e5:4a:e9:7a:
                    87:4b:30:c9:f8:cc:c4:93:82:48:7c:41:af:8a:75:
                    0b:b2:d7:f5:27:07:1e:e2:a2:fa:14:04:e6:2b:f8:
                    c6:5a:74:f7:b9:b0:2c:2d:89:cf:21:12:f8:ba:41:
                    f0:a7:88:12:81:46:31:d0:73:75:df:fb:8e:97:ba:
                    d7:02:c1:5a:79:12:e0:ff:65:9c:cc:a0:9d:81:8c:
                    30:65:cd:67:71:2c:de:d9:54:6c:8e:7e:e6:48:e3:
                    d0:07:09:f7:97:03:fe:56:70:3e:f5:c6:27:16:77:
                    62:e5:f6:2a:c9:8f:bb:23:60:a4:90:a1:fe:e4:21:
                    cf:14:34:47:98:37:30:8f:6c:bc:67:37:4c:21:e7:
                    66:5f:8f:c5:0a:1b:a3:b6:8d:7b:89:0c:e4:04:79:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:20:FD:80:BA:1B:53:9F:7C:C7:F6:5D:85:39:D1:64:6B:CF:81:7A
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fc:ac:5e:1f:b4:56:bd:35:44:58:4c:9e:20:be:55:86:1a:
         99:67:52:03:11:85:37:02:fa:40:73:9c:18:83:f7:c8:f6:9b:
         f1:8d:1a:42:7d:3b:87:3f:be:aa:e2:03:4a:4c:77:2f:03:26:
         be:80:89:d3:3b:87:c2:79:3b:7e:d8:ef:bf:f4:a4:2c:44:80:
         ff:6a:fc:ba:02:fa:2d:d8:1c:27:c1:20:8a:ad:3f:fe:a7:4e:
         c0:a0:e5:3d:70:1c:40:b6:39:0e:af:c3:8e:db:2b:12:b0:0a:
         99:68:1e:4d:ff:eb:6c:74:b0:39:24:7e:95:fc:e9:ff:09:31:
         60:87:04:b6:e2:9d:96:73:58:d9:f9:9c:85:46:29:c3:ae:cc:
         fc:22:60:93:32:1a:10:fa:d2:a5:02:20:36:28:74:3d:e2:7b:
         79:2c:73:e2:34:0b:de:55:6a:5a:05:82:a5:34:ee:7f:dd:e8:
         ca:b3:ab:0e:e2:a0:6d:4c:1a:9d:c3:0f:57:b4:44:77:b2:27:
         c8:47:c9:32:89:45:f5:68:2c:87:14:f8:d1:a7:7d:ab:48:c0:
         cf:8d:f2:a4:a6:21:3c:da:31:73:89:15:aa:7a:bf:0c:c0:7e:
         ea:85:8a:54:0c:c0:55:8f:3c:b0:96:0c:1a:66:de:0d:6e:d2:
         2f:56:66:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----