Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft
File:                     B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft (raw, json)
Hash identifier:          R9bzX1FeLH0Iwy6Z9JywyHWc/TvzT3rYn+4yvw6zeNY=
Subject key identifier:   4F:2C:F0:D7:4B:C4:E5:DF:6B:68:40:07:DE:91:EA:96:B0:BD:E7:CB
Authority key identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB
Certificate issuer:       /CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f
Certificate serial:       1DBD63D7C8E815E08EA055DF0164C001EB307210
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft
Manifest number:          29
Signing time:             Tue 15 Apr 2025 08:40:27 +0000
Manifest this update:     Tue 15 Apr 2025 08:35:27 +0000
Manifest next update:     Wed 16 Apr 2025 10:30:27 +0000
Files and hashes:         1: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Ufvh495kVHTsvuscjFimK/5B3fifdcUwR5A1Uohco9k=)
                          2: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl (hash: H3lp3ZQ1uuOuEAjtvjdjmHbOnHpxETmcE3drGhFSaxw=)
                          3: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 5c3OaxW1qKZrY2FscDnJyFNXHvDxQCbXNLWzxHU/wc8=)
                          4: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: KB5IW4CbSuoOkgtd2rJCaS7SQDgxB1P+CSq45yfOs7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bd:63:d7:c8:e8:15:e0:8e:a0:55:df:01:64:c0:01:eb:30:72:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f
        Validity
            Not Before: Apr 15 08:35:27 2025 GMT
            Not After : Apr 16 10:30:27 2025 GMT
        Subject: CN=4F2CF0D74BC4E5DF6B684007DE91EA96B0BDE7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:b8:04:2a:60:e5:87:60:4a:65:72:f8:51:
                    4f:dc:42:ab:89:f0:6e:b1:fc:51:73:f0:3e:fa:d4:
                    60:56:d6:b3:4e:66:ae:62:ef:b1:d3:53:9c:85:d0:
                    13:f9:11:75:6e:cc:f4:10:b0:9e:98:cf:96:26:e1:
                    69:35:18:03:20:89:98:42:b1:f3:ea:97:6a:85:37:
                    69:88:68:74:36:4c:b8:16:10:0d:e7:ef:ad:1f:30:
                    4e:6c:4b:04:da:56:33:f4:a8:10:63:fa:11:08:49:
                    84:64:9f:c8:e6:bd:3b:1e:f4:21:18:c2:bc:c2:cd:
                    45:f2:4e:26:47:c3:d8:86:97:53:25:13:e8:55:ce:
                    1a:bb:c7:dc:fd:27:bb:bc:75:17:d2:e7:9d:6f:3c:
                    cb:14:60:51:fb:5a:4c:fa:ca:18:fa:a1:69:be:0b:
                    f1:ff:4f:28:ee:8e:cc:0c:51:ab:eb:ab:7e:88:04:
                    c0:82:55:ef:8a:a3:4e:65:8f:ad:fb:16:3f:ad:51:
                    f4:22:8c:97:24:7a:6c:8b:f1:9e:c6:03:e2:03:49:
                    15:da:83:60:06:cc:c1:77:73:53:9f:47:12:85:01:
                    00:17:89:17:d5:1a:e9:8a:c8:9e:56:1a:b0:3d:21:
                    a7:a2:4d:0a:f2:2f:b4:db:b0:15:83:1c:cd:04:ff:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2C:F0:D7:4B:C4:E5:DF:6B:68:40:07:DE:91:EA:96:B0:BD:E7:CB
            X509v3 Authority Key Identifier:
                keyid:B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:92:82:d7:9d:a2:dc:04:56:8f:9d:cf:ea:39:f5:39:cc:31:
         11:76:db:ca:e2:6f:ca:24:31:bc:d6:d6:f7:54:28:15:f1:2f:
         5a:57:13:5e:57:b9:80:50:c9:f5:b6:e3:68:27:59:10:c0:4c:
         a1:c1:e1:a4:e0:db:3e:08:8c:62:8b:f8:fc:2e:a5:c6:88:96:
         57:a2:a7:c4:10:1a:f5:0b:3c:ed:8a:55:0f:72:bf:da:8a:7b:
         7c:5c:08:ea:d9:35:3f:97:7e:4a:71:03:a1:a0:3e:89:5a:2d:
         3e:43:e4:07:a7:9c:70:cf:2f:24:8f:d9:78:4c:95:9c:50:5c:
         69:17:09:85:5a:8b:e0:f0:2a:b4:aa:84:20:0d:16:58:47:04:
         16:4c:75:e3:90:a4:d3:14:eb:93:29:fa:f5:33:16:bb:39:36:
         79:70:cc:ce:81:b1:7e:f8:a9:07:f7:da:07:fc:8d:24:4e:32:
         47:aa:0f:18:50:f3:d6:81:ca:ea:2d:4b:d2:52:ef:77:9b:9e:
         45:ab:94:84:17:e5:e2:2c:99:f4:7a:94:54:e8:04:3d:ba:cb:
         02:f1:91:34:36:95:24:63:70:d4:ec:20:13:42:59:7f:e0:d2:
         6b:c3:5a:8f:9b:c2:7e:b1:7f:d4:92:ad:eb:f8:15:4d:7a:ab:
         ab:c2:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----