Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
File:                     069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json)
Hash identifier:          +ixCZ/hJoa5L0Dh+4QsKwuVgVYPilYMh2sm3KylxuKU=
Subject key identifier:   15:07:73:E6:AB:4E:6F:3C:64:68:E7:05:D4:50:27:45:75:4B:57:E2
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Certificate issuer:       /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial:       26062A630ABEA25C836B87E389D2B86772F0D9F2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
Manifest number:          02E0
Signing time:             Sun 13 Apr 2025 10:23:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:18:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:43:27 +0000
Files and hashes:         1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: EJjfJRJJjhpFFiIPJS3ieda0h5EO94NZFrGST5WGgAA=)
                          2: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=)
                          3: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=)
                          4: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:06:2a:63:0a:be:a2:5c:83:6b:87:e3:89:d2:b8:67:72:f0:d9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
        Validity
            Not Before: Apr 13 10:18:27 2025 GMT
            Not After : Apr 14 11:43:27 2025 GMT
        Subject: CN=150773E6AB4E6F3C6468E705D4502745754B57E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:2e:ac:c4:c0:e1:9d:d6:2a:8e:f7:33:d2:
                    c5:7f:fd:b4:a7:39:de:f1:f0:40:81:44:2e:69:2e:
                    65:05:5d:ff:4a:70:64:eb:cf:7e:18:44:10:ef:fa:
                    b6:d5:1f:e2:30:28:a8:8f:03:c6:a7:35:3f:b4:bd:
                    c6:4f:49:f2:a8:03:10:54:85:0f:7a:d8:51:bb:32:
                    8e:dc:a8:1a:71:a8:25:9a:d4:69:73:a1:eb:1e:4b:
                    6f:88:50:1f:97:5f:08:86:bc:a3:1c:e7:26:94:e0:
                    9a:d3:71:db:e7:ef:e4:1c:52:71:06:a5:12:86:03:
                    9c:37:44:7d:69:f4:80:9e:a3:33:4a:51:29:61:6c:
                    f2:b5:af:b8:6e:fb:b2:62:30:26:3f:80:cd:f8:56:
                    88:66:68:72:ca:6a:27:4d:09:3a:9d:2c:15:32:93:
                    61:7f:bd:4c:16:20:98:6e:d9:ed:5c:87:25:7e:bc:
                    13:9e:a4:bd:70:45:c3:06:07:a6:e6:7c:0c:58:a6:
                    f7:1c:9c:67:94:a1:3d:e0:bf:a1:d9:60:9f:d4:05:
                    a4:32:f3:7f:09:50:0b:fe:10:55:d8:68:e1:c6:19:
                    f0:f1:f2:a3:7f:0e:ec:60:30:98:8d:6c:66:95:05:
                    4c:ec:14:c7:c0:09:f0:e7:55:31:50:3c:d2:14:7b:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:07:73:E6:AB:4E:6F:3C:64:68:E7:05:D4:50:27:45:75:4B:57:E2
            X509v3 Authority Key Identifier:
                keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0c:49:ec:52:ee:31:ef:9c:f2:af:19:b8:f0:03:9e:f9:d1:
         68:9c:68:fa:35:62:ad:2c:dc:be:8f:8e:78:63:f7:ce:d1:fb:
         3c:bf:ac:5b:4b:8e:e7:7f:7a:44:70:9a:ab:f5:64:b7:ff:b2:
         44:f9:56:e8:6c:68:b5:61:82:37:10:6b:51:68:48:be:78:42:
         30:5e:bf:8e:55:42:2b:94:6b:24:77:37:a8:c8:e6:38:8f:54:
         77:ea:37:c6:7b:de:53:24:a8:b6:98:36:8b:ed:a2:cc:7d:45:
         48:ca:72:69:f0:dd:2d:14:c7:37:41:1c:e4:27:d0:64:d8:48:
         1b:20:3f:8f:27:0b:b6:48:6a:86:26:13:af:69:b1:91:92:44:
         66:a0:ef:d4:17:d8:0e:53:60:7f:66:18:4a:2f:de:e9:c0:f3:
         5c:c8:48:9f:89:46:d2:4e:7c:ec:09:d5:50:29:9d:eb:a4:4d:
         a7:09:85:67:b3:6a:59:c6:52:9b:23:0d:6e:6b:ff:15:2f:36:
         2e:bb:bd:63:d0:4d:de:80:b8:9a:fb:84:56:6c:83:64:0e:1d:
         7d:5e:e7:4d:8e:a1:3b:67:84:0d:dc:23:01:ee:47:df:ff:c4:
         9a:09:80:72:77:0f:00:00:ea:28:d2:69:b1:23:51:a2:ec:0a:
         0d:7a:4e:0f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUJgYqYwq+olyDa4fjidK4Z3Lw2fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0
QzExMUFCOTAeFw0yNTA0MTMxMDE4MjdaFw0yNTA0MTQxMTQzMjdaMDMxMTAvBgNV
BAMTKDE1MDc3M0U2QUI0RTZGM0M2NDY4RTcwNUQ0NTAyNzQ1NzU0QjU3RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+C6sxMDhndYqjvcz0sV//bSn
Od7x8ECBRC5pLmUFXf9KcGTrz34YRBDv+rbVH+IwKKiPA8anNT+0vcZPSfKoAxBU
hQ962FG7Mo7cqBpxqCWa1GlzoeseS2+IUB+XXwiGvKMc5yaU4JrTcdvn7+QcUnEG
pRKGA5w3RH1p9ICeozNKUSlhbPK1r7hu+7JiMCY/gM34VohmaHLKaidNCTqdLBUy
k2F/vUwWIJhu2e1chyV+vBOepL1wRcMGB6bmfAxYpvccnGeUoT3gv6HZYJ/UBaQy
838JUAv+EFXYaOHGGfDx8qN/DuxgMJiNbGaVBUzsFMfACfDnVTFQPNIUe8dpAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUFQdz5qtObzxkaOcF1FAnRXVLV+IwHwYDVR0j
BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz
NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw
NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3
RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4DEns
Uu4x75zyrxm48AOe+dFonGj6NWKtLNy+j454Y/fO0fs8v6xbS47nf3pEcJqr9WS3
/7JE+VbobGi1YYI3EGtRaEi+eEIwXr+OVUIrlGskdzeoyOY4j1R36jfGe95TJKi2
mDaL7aLMfUVIynJp8N0tFMc3QRzkJ9Bk2EgbID+PJwu2SGqGJhOvabGRkkRmoO/U
F9gOU2B/ZhhKL97pwPNcyEifiUbSTnzsCdVQKZ3rpE2nCYVns2pZxlKbIw1ua/8V
LzYuu71j0E3egLia+4RWbINkDh19XudNjqE7Z4QN3CMB7kff/8SaCYBydw8AAOoo
0mmxI1Gi7AoNek4P
-----END CERTIFICATE-----