Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft
File:                     6B5432AF3212182697F0E937473AF3EB52E68EA2.mft (raw, json)
Hash identifier:          MCVbtroHT5V4O+UGGxtBl97CovA0UG9lPZ7yl4NI/oM=
Subject key identifier:   43:07:09:7C:3B:61:F3:FC:8A:49:BD:0D:B5:80:37:63:C3:06:F9:2C
Authority key identifier: 6B:54:32:AF:32:12:18:26:97:F0:E9:37:47:3A:F3:EB:52:E6:8E:A2
Certificate issuer:       /CN=6B5432AF3212182697F0E937473AF3EB52E68EA2
Certificate serial:       79126E0B27647FB6F74C56CDA3878E2BD541F0C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft
Manifest number:          31
Signing time:             Sun 13 Apr 2025 08:13:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:08:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:56:41 +0000
Files and hashes:         1: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: u8FYHOPbqE1MSDqxryvbkkQVPt9ds3RaHvtwriF25Bo=)
                          2: 6B5432AF3212182697F0E937473AF3EB52E68EA2.crl (hash: THePZZ6FKLyC+2mCvQWg09ng1EEIeP0UAXfnrgQ6a3Q=)
                          3: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: SmK/qRdmMgqpKRzEC7oHEgUtqCIOOpsXebSJKkFh9gk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:12:6e:0b:27:64:7f:b6:f7:4c:56:cd:a3:87:8e:2b:d5:41:f0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5432AF3212182697F0E937473AF3EB52E68EA2
        Validity
            Not Before: Apr 13 08:08:41 2025 GMT
            Not After : Apr 14 10:56:41 2025 GMT
        Subject: CN=4307097C3B61F3FC8A49BD0DB5803763C306F92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:dd:a7:cb:5e:45:65:fd:ed:1c:6b:e6:c1:
                    ff:90:69:1d:25:30:ec:27:81:b6:9c:fe:ae:e1:ee:
                    a3:e8:6d:ad:51:e3:ad:7f:d8:ac:aa:a3:80:be:41:
                    d2:83:e0:5c:d7:0f:a3:16:35:ac:ee:7c:10:d5:a7:
                    cf:8e:ee:3d:e3:ef:fb:74:94:db:b1:f3:d8:ec:43:
                    19:40:cd:9a:28:8f:74:bf:f1:7f:07:8f:ac:c3:c9:
                    ad:7c:f5:d6:25:0d:51:c2:e5:73:06:8d:57:95:8f:
                    d4:87:07:19:a0:4d:64:57:34:1a:be:b0:38:d6:b5:
                    ff:20:a9:1f:ea:17:3f:35:b2:fc:b5:5b:36:7a:04:
                    e3:4c:e2:ad:2b:64:7c:2a:ba:d6:36:8f:e6:5c:fe:
                    c6:dd:cb:df:ef:37:6d:41:b8:14:06:d2:d4:db:93:
                    26:b5:9e:4d:c2:d9:ac:3b:c8:4e:3c:77:e6:3e:5e:
                    f9:22:dc:dd:18:8e:d0:80:2f:72:c4:86:ea:39:5a:
                    92:b5:c6:be:2a:df:82:47:78:57:3c:a5:5d:f6:7c:
                    d7:9d:f1:29:c7:5a:c5:fd:6c:6f:aa:9c:b9:2a:87:
                    07:2c:d8:91:8d:6f:b0:d3:6a:db:ab:06:93:12:c4:
                    d2:11:90:4e:d3:7e:68:36:73:b1:57:34:75:44:d0:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:07:09:7C:3B:61:F3:FC:8A:49:BD:0D:B5:80:37:63:C3:06:F9:2C
            X509v3 Authority Key Identifier:
                keyid:6B:54:32:AF:32:12:18:26:97:F0:E9:37:47:3A:F3:EB:52:E6:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:77:a9:f4:7c:d7:d8:f4:54:52:57:92:43:0d:19:be:d9:54:
         43:92:84:7a:98:7e:6d:3b:fb:52:e2:cb:ce:9a:dc:67:ec:a1:
         00:90:04:24:2b:03:ee:b6:d2:4b:35:d4:e9:8a:11:d0:a7:fc:
         03:1a:02:e5:e3:24:42:7f:8d:01:89:6c:3f:96:d4:7e:41:38:
         1f:f2:21:27:7e:f6:0c:ee:99:a4:6b:41:66:67:15:50:fe:dd:
         c5:8b:42:10:e9:d1:0d:d4:58:4e:94:ac:c0:22:72:06:9e:08:
         6c:2f:aa:50:0b:3a:e3:fa:94:41:1a:ca:c0:54:99:0e:1f:e7:
         b6:9f:20:ef:1b:ce:88:bc:d8:ac:6e:15:51:e8:98:fc:5b:9c:
         20:47:f1:c7:08:b5:1d:5f:c3:8c:40:fd:aa:cc:30:bd:da:4c:
         79:f5:57:cb:01:0f:4d:e3:1d:34:34:9c:44:74:f6:07:7b:d7:
         c3:15:bd:f7:37:0c:bc:40:18:8a:72:29:d3:05:eb:dc:7f:57:
         c6:54:f8:4e:83:1d:aa:61:c2:0b:53:0c:4d:6e:13:2a:fe:d0:
         44:44:83:98:4e:9f:7d:b9:9c:af:46:df:41:ed:4c:a5:8f:b4:
         ab:55:c8:22:5e:20:fe:f7:e9:93:43:b1:d3:83:aa:27:c5:0e:
         66:9f:a5:37
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUeRJuCydkf7b3TFbNo4eOK9VB8MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1NDMyQUYzMjEyMTgyNjk3RjBFOTM3NDczQUYzRUI1
MkU2OEVBMjAeFw0yNTA0MTMwODA4NDFaFw0yNTA0MTQxMDU2NDFaMDMxMTAvBgNV
BAMTKDQzMDcwOTdDM0I2MUYzRkM4QTQ5QkQwREI1ODAzNzYzQzMwNkY5MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDN2ny15FZf3tHGvmwf+QaR0l
MOwngbac/q7h7qPoba1R461/2Kyqo4C+QdKD4FzXD6MWNazufBDVp8+O7j3j7/t0
lNux89jsQxlAzZooj3S/8X8Hj6zDya189dYlDVHC5XMGjVeVj9SHBxmgTWRXNBq+
sDjWtf8gqR/qFz81svy1WzZ6BONM4q0rZHwqutY2j+Zc/sbdy9/vN21BuBQG0tTb
kya1nk3C2aw7yE48d+Y+Xvki3N0YjtCAL3LEhuo5WpK1xr4q34JHeFc8pV32fNed
8SnHWsX9bG+qnLkqhwcs2JGNb7DTaturBpMSxNIRkE7Tfmg2c7FXNHVE0CeLAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUQwcJfDth8/yKSb0NtYA3Y8MG+SwwHwYDVR0j
BBgwFoAUa1QyrzISGCaX8Ok3Rzrz61LmjqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGVmNDI2N2UtZDE0OS00MWU5LWJkOTQtM2M1MTA0M2Qy
YzViLzAvNkI1NDMyQUYzMjEyMTgyNjk3RjBFOTM3NDczQUYzRUI1MkU2OEVBMi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82QjU0MzJBRjMyMTIxODI2OTdGMEU5Mzc0
NzNBRjNFQjUyRTY4RUEyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzBlZjQyNjdlLWQxNDktNDFlOS1iZDk0LTNjNTEwNDNkMmM1Yi8wLzZCNTQzMkFG
MzIxMjE4MjY5N0YwRTkzNzQ3M0FGM0VCNTJFNjhFQTIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4d6n0
fNfY9FRSV5JDDRm+2VRDkoR6mH5tO/tS4svOmtxn7KEAkAQkKwPuttJLNdTpihHQ
p/wDGgLl4yRCf40BiWw/ltR+QTgf8iEnfvYM7pmka0FmZxVQ/t3Fi0IQ6dEN1FhO
lKzAInIGnghsL6pQCzrj+pRBGsrAVJkOH+e2nyDvG86IvNisbhVR6Jj8W5wgR/HH
CLUdX8OMQP2qzDC92kx59VfLAQ9N4x00NJxEdPYHe9fDFb33Nwy8QBiKcinTBevc
f1fGVPhOgx2qYcILUwxNbhMq/tBERIOYTp99uZyvRt9B7Uylj7SrVcgiXiD+9+mT
Q7HTg6onxQ5mn6U3
-----END CERTIFICATE-----