Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft
File:                     FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft (raw, json)
Hash identifier:          i06jm51vkZKzUSrJywI9SWsbn5UYPot0Za0Z7ca5Yxs=
Subject key identifier:   ED:C4:42:9A:65:35:64:43:E0:AD:15:A2:5D:B2:C4:ED:0B:36:AC:2E
Authority key identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8
Certificate issuer:       /CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad
Certificate serial:       37A45BAE23E6BD7C80B6A8E17EF6F777210099E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft
Manifest number:          24
Signing time:             Tue 15 Apr 2025 08:40:27 +0000
Manifest this update:     Tue 15 Apr 2025 08:35:27 +0000
Manifest next update:     Wed 16 Apr 2025 11:35:27 +0000
Files and hashes:         1: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl (hash: w8AIQ0B/imkqwKHQKUJUdrAOfC7bkkYUpidyXkAkUDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a4:5b:ae:23:e6:bd:7c:80:b6:a8:e1:7e:f6:f7:77:21:00:99:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad
        Validity
            Not Before: Apr 15 08:35:27 2025 GMT
            Not After : Apr 16 11:35:27 2025 GMT
        Subject: CN=EDC4429A65356443E0AD15A25DB2C4ED0B36AC2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:d7:d0:48:3b:63:46:1f:76:2e:3d:26:01:
                    b9:fd:76:be:97:e9:4d:bd:a6:80:f5:a4:c9:2c:d9:
                    f0:85:21:ca:34:81:72:d2:18:72:60:40:3d:7f:05:
                    5a:2c:32:3a:9f:b0:76:55:b8:7d:b6:5d:38:56:33:
                    3a:41:bb:50:f0:fd:0d:c0:0b:02:7e:0f:43:f0:50:
                    21:b8:18:67:2e:ab:f0:43:16:8b:d2:45:04:17:b3:
                    b3:5c:63:a0:26:67:d9:94:25:5c:33:f7:52:e8:06:
                    41:3e:7f:a7:c2:70:11:8e:18:a1:b2:9d:39:e2:32:
                    e8:1b:1b:4b:31:1d:65:fc:90:ca:a0:20:03:e3:82:
                    dc:41:24:7a:fa:88:0a:53:0c:39:8f:b0:60:42:41:
                    99:0c:05:52:1d:dc:f1:4d:ad:36:9a:80:c1:83:91:
                    b7:ef:ad:91:95:2c:4b:d9:22:9f:9d:f7:58:76:77:
                    20:54:2b:90:0b:5a:15:b9:22:a5:82:4f:dc:e5:aa:
                    93:3d:5e:53:48:61:c4:4a:73:38:46:bb:0f:0f:2c:
                    0e:2b:b7:61:ef:4c:6b:f0:27:fd:18:b0:d9:2f:b4:
                    40:5f:fb:14:52:b5:dd:ef:38:2e:10:33:57:ee:db:
                    a9:76:a9:69:e4:a1:a8:c3:08:02:23:96:09:c3:0e:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C4:42:9A:65:35:64:43:E0:AD:15:A2:5D:B2:C4:ED:0B:36:AC:2E
            X509v3 Authority Key Identifier:
                keyid:FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:7a:cf:b1:18:ce:05:8b:0b:47:65:0a:10:ca:4e:45:63:
         93:ee:67:e3:a3:6b:93:92:0f:c7:0b:80:43:45:6f:c4:65:15:
         6f:50:de:e3:74:22:45:82:94:91:af:f9:62:64:fd:07:2a:83:
         7d:47:1a:7e:5c:c8:f0:19:1a:78:c6:94:50:8c:2b:bd:89:83:
         2c:1e:06:d8:36:1b:c8:8a:4d:a0:3c:6b:24:da:5b:dc:d3:69:
         e4:99:5c:5a:dd:1e:b0:97:43:5e:10:68:1b:aa:51:67:de:dc:
         92:4d:08:49:ae:06:87:6b:34:f8:5a:34:87:75:bd:0d:c5:48:
         4a:d3:28:6d:6f:4f:b5:6c:9c:1c:f4:c9:08:15:f3:3e:3c:40:
         96:a3:47:f8:b4:30:17:53:f2:83:bf:1c:f1:fe:84:a7:3e:38:
         e3:96:48:d6:50:8c:13:5d:c3:5e:ec:36:5c:2c:e0:96:1a:d9:
         dc:95:ce:11:59:31:88:de:e4:58:05:f6:52:c4:02:d4:9c:3c:
         3a:6e:64:8c:b1:9d:f5:6f:7f:a4:1e:ad:18:0b:cb:c7:84:f8:
         d0:f1:5b:f7:b2:2b:2c:21:8e:3a:a7:f6:a7:d8:73:48:d4:0c:
         d4:9f:5e:f9:37:ab:87:5c:72:16:25:3d:26:94:39:be:88:38:
         ce:2e:b5:01
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUN6RbriPmvXyAtqjhfvb3dyEAmeYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRm
ZGRkMjkwMjJkYmI1ZmUwYWQwHhcNMjUwNDE1MDgzNTI3WhcNMjUwNDE2MTEzNTI3
WjAzMTEwLwYDVQQDEyhFREM0NDI5QTY1MzU2NDQzRTBBRDE1QTI1REIyQzRFRDBC
MzZBQzJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7rX0Eg7Y0Yf
di49JgG5/Xa+l+lNvaaA9aTJLNnwhSHKNIFy0hhyYEA9fwVaLDI6n7B2Vbh9tl04
VjM6QbtQ8P0NwAsCfg9D8FAhuBhnLqvwQxaL0kUEF7OzXGOgJmfZlCVcM/dS6AZB
Pn+nwnARjhihsp054jLoGxtLMR1l/JDKoCAD44LcQSR6+ogKUww5j7BgQkGZDAVS
HdzxTa02moDBg5G3762RlSxL2SKfnfdYdncgVCuQC1oVuSKlgk/c5aqTPV5TSGHE
SnM4RrsPDywOK7dh70xr8Cf9GLDZL7RAX/sUUrXd7zguEDNX7tupdqlp5KGowwgC
I5YJww7/PwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFO3EQpplNWRD4K0Vol2yxO0L
NqwuMB8GA1UdIwQYMBaAFPtf+Sv9dSoOZUsOzHsDoX35m4eoMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyOTFjN2U2LWE0NzYtNDIxNy1iYmEz
LWE1OTJiMjRkOGViOS8yL0ZCNUZGOTJCRkQ3NTJBMEU2NTRCMEVDQzdCMDNBMTdE
Rjk5Qjg3QTguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et
NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y
OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRmZGRk
MjkwMjJkYmI1ZmUwYWQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
NTI5MWM3ZTYtYTQ3Ni00MjE3LWJiYTMtYTU5MmIyNGQ4ZWI5LzIvRkI1RkY5MkJG
RDc1MkEwRTY1NEIwRUNDN0IwM0ExN0RGOTlCODdBOC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEWwes+x
GM4FiwtHZQoQyk5FY5PuZ+Oja5OSD8cLgENFb8RlFW9Q3uN0IkWClJGv+WJk/Qcq
g31HGn5cyPAZGnjGlFCMK72JgyweBtg2G8iKTaA8ayTaW9zTaeSZXFrdHrCXQ14Q
aBuqUWfe3JJNCEmuBodrNPhaNId1vQ3FSErTKG1vT7VsnBz0yQgV8z48QJajR/i0
MBdT8oO/HPH+hKc+OOOWSNZQjBNdw17sNlws4JYa2dyVzhFZMYje5FgF9lLEAtSc
PDpuZIyxnfVvf6QerRgLy8eE+NDxW/eyKywhjjqn9qfYc0jUDNSfXvk3q4dcchYl
PSaUOb6IOM4utQE=