Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft
File:                     94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft (raw, json)
Hash identifier:          PJfR35Fg5EX7FKfiN1C8XAKZt971aN74e5gCjLk/I5s=
Subject key identifier:   8F:D4:9E:52:A5:72:9D:96:72:22:76:8E:A9:B3:CF:76:B8:F8:ED:D0
Authority key identifier: 94:89:8B:0A:CE:E9:CF:62:56:CF:0D:5C:BB:FB:73:C2:6F:D2:11:A4
Certificate issuer:       /CN=94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4
Certificate serial:       4D42BA134DB3C72BCFBCCE95B61F63E59BB8F966
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft
Manifest number:          0138
Signing time:             Tue 24 Dec 2024 21:19:56 +0000
Manifest this update:     Tue 24 Dec 2024 21:14:56 +0000
Manifest next update:     Wed 25 Dec 2024 22:19:56 +0000
Files and hashes:         1: 3132382e3235342e3230352e302f32342d3234203d3e203437323732.roa (hash: Ta6ZRrzsiBqSiC/F8bv/X4Kr7SwSmv9MXisgrAM2vZo=)
                          2: 94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.crl (hash: JRXbH6nz2SBFOIw7+pKiHtHZFMCaSP2kYU98hTAshX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:42:ba:13:4d:b3:c7:2b:cf:bc:ce:95:b6:1f:63:e5:9b:b8:f9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4
        Validity
            Not Before: Dec 24 21:14:56 2024 GMT
            Not After : Dec 25 22:19:56 2024 GMT
        Subject: CN=8FD49E52A5729D967222768EA9B3CF76B8F8EDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:23:99:31:e9:74:40:02:b7:95:c2:85:ed:
                    de:6c:42:1b:a9:a7:a2:13:fa:66:f5:af:f1:8a:96:
                    46:dd:c5:ec:98:75:e4:42:ba:73:d1:98:a2:bd:4d:
                    cd:71:3a:a3:22:9e:f1:0d:cc:4f:83:88:1f:a0:f5:
                    f0:01:9b:24:ff:75:5d:fc:cd:be:dc:95:8e:c2:d8:
                    29:03:33:8e:80:18:ff:06:5b:97:80:a0:40:fb:5c:
                    0f:f7:7d:47:43:7d:b4:f0:5f:52:9c:01:07:d8:60:
                    40:11:ab:95:66:28:9e:c2:0f:03:95:8d:63:63:e3:
                    7f:ed:45:1d:51:4c:63:18:78:bf:b9:36:2b:f9:35:
                    f2:6b:08:af:d6:50:a4:5d:2a:12:f2:23:c5:da:34:
                    e4:9f:4c:72:72:a7:f9:31:34:e1:66:04:8c:7b:64:
                    09:38:5e:b7:8c:00:ae:6f:0b:55:73:77:d9:5a:6b:
                    20:69:c6:0f:eb:57:c3:de:2c:89:b7:1a:75:ef:2a:
                    84:94:a1:89:55:05:fc:72:0f:f6:ff:a6:59:e8:23:
                    8f:04:8c:a2:69:66:17:de:f3:bd:db:c0:c2:a2:84:
                    1b:85:7c:8c:07:77:ac:78:79:0f:ac:d6:e6:c3:ff:
                    52:bd:20:96:94:09:c6:11:2a:13:df:85:a1:a9:dd:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:9E:52:A5:72:9D:96:72:22:76:8E:A9:B3:CF:76:B8:F8:ED:D0
            X509v3 Authority Key Identifier:
                keyid:94:89:8B:0A:CE:E9:CF:62:56:CF:0D:5C:BB:FB:73:C2:6F:D2:11:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:53:0b:84:d7:79:59:18:2e:d9:d4:10:49:5c:25:a3:ff:
         72:f2:08:7b:6c:75:fa:1f:5e:04:77:5a:14:af:f7:dd:ff:e3:
         b2:ba:4b:e9:7e:33:16:41:09:57:76:c8:37:5d:13:89:a2:ff:
         b6:e8:bc:98:ac:2b:8a:45:b7:8b:52:40:5e:2a:d7:16:02:b1:
         60:32:80:72:48:66:50:cf:51:95:95:16:84:0b:af:16:3b:b5:
         03:ce:37:0e:07:22:c3:bc:a6:2e:01:e5:ef:5d:bd:01:b6:91:
         1f:62:fb:84:d2:14:26:77:1f:70:c4:1e:12:4c:6f:77:92:ab:
         ce:dc:c9:01:79:5a:2a:01:7d:45:cd:0b:7e:f3:20:e1:ab:3a:
         3f:e1:98:20:cf:1a:36:b2:f7:6f:29:a7:c8:46:0c:33:3b:ba:
         c3:3c:89:5c:e0:ee:c6:90:9e:e1:c9:d6:7f:83:1b:43:0c:a1:
         93:99:7e:b9:ab:de:97:37:c7:57:eb:fb:31:12:6a:d0:a7:11:
         e7:df:5f:46:bb:ae:09:b7:fe:b0:8b:3a:e8:79:73:2f:64:17:
         d7:8a:4a:31:87:67:60:40:27:3c:f2:b7:bb:30:82:6f:0a:ce:
         c6:fd:3c:93:4d:d2:23:0c:f4:99:b5:0a:8f:4e:6e:c7:21:32:
         e2:43:61:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----