Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
File:                     5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft (raw, json)
Hash identifier:          lMZ36YPSbZoymWpTFYyEFe5eUrYlbik3QEsdbVzP59k=
Subject key identifier:   00:23:52:F9:8A:EB:FC:AA:E6:C7:36:70:60:54:D8:B3:E5:41:E0:18
Authority key identifier: 5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
Certificate issuer:       /CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Certificate serial:       2033997CA46883B48EB260496FEC6BDF6B035492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
Manifest number:          038A
Signing time:             Sun 13 Apr 2025 02:27:42 +0000
Manifest this update:     Sun 13 Apr 2025 02:22:42 +0000
Manifest next update:     Mon 14 Apr 2025 04:18:42 +0000
Files and hashes:         1: 39312e3232392e3138302e302f32342d3234203d3e2036303739.roa (hash: +bVqrEMFd6OlmJt6OXUAm36lf7U27Wity5s8ggfbbQs=)
                          2: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl (hash: cReOhOOZLb33++zRk0CvZJ7pkxBRg/44nyItgBmFoVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:33:99:7c:a4:68:83:b4:8e:b2:60:49:6f:ec:6b:df:6b:03:54:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
        Validity
            Not Before: Apr 13 02:22:42 2025 GMT
            Not After : Apr 14 04:18:42 2025 GMT
        Subject: CN=002352F98AEBFCAAE6C736706054D8B3E541E018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:70:35:00:33:bb:a9:d3:6f:86:83:a7:be:
                    09:60:8c:fc:fb:0c:9b:c1:8e:e4:ad:4f:71:6d:b2:
                    88:01:08:d6:f0:a3:a0:e0:08:df:93:ab:7c:82:3e:
                    28:fb:6b:a3:44:2c:d9:71:53:78:ee:1a:5f:2a:6b:
                    61:2a:73:c4:d2:e7:21:ac:e5:5d:2e:9e:7a:68:7d:
                    a9:38:57:56:82:74:70:7f:4e:06:00:e2:39:19:ac:
                    0c:39:fe:5a:28:26:52:95:f2:57:b1:1c:38:62:b0:
                    a1:4b:4a:15:22:6e:ec:ff:72:d8:f6:24:c3:ea:cc:
                    84:1b:18:c0:ae:7c:9a:f3:82:0a:cb:3a:cb:37:a9:
                    70:83:c4:38:3e:3a:26:10:10:53:30:25:06:44:7c:
                    72:4e:ba:e9:f3:af:ad:20:3a:9b:0f:e4:7a:23:36:
                    4a:ad:e1:ca:7c:4e:c4:3c:f5:01:2f:67:6d:2c:fb:
                    77:f0:ec:4d:cd:34:f3:22:8d:1b:5a:3c:1a:b5:e2:
                    7d:8c:da:10:f7:2b:22:0f:8a:4e:62:41:28:a4:b9:
                    a9:4f:46:29:40:2d:a9:d5:51:f3:6c:c2:34:c8:0f:
                    d8:af:18:f2:25:5a:01:7e:a9:80:1c:01:ff:a1:f4:
                    77:de:d0:20:12:1b:23:1d:44:70:ee:1f:d0:1c:22:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:23:52:F9:8A:EB:FC:AA:E6:C7:36:70:60:54:D8:B3:E5:41:E0:18
            X509v3 Authority Key Identifier:
                keyid:5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:11:44:c3:c4:82:b8:de:c5:d9:f0:2c:d7:38:06:81:07:cd:
         cd:93:2e:81:3d:36:d8:25:79:fe:20:c6:a0:d1:ad:7c:45:34:
         d7:7f:e0:1e:fc:2e:3f:d3:4f:3a:92:f8:8a:d5:7d:79:c0:5f:
         48:4b:8a:99:72:30:1e:32:c5:c5:e7:00:4b:af:4d:1d:73:9b:
         ec:c2:4a:a3:e3:6b:90:ec:e8:8e:53:31:de:a9:da:a6:e2:88:
         eb:11:c1:27:09:b5:79:01:71:20:9b:36:0d:18:36:67:59:de:
         dc:6f:82:9c:46:46:06:4e:31:3f:d9:29:e5:37:1f:de:8f:cc:
         bc:90:a8:7a:15:6a:41:e1:00:91:0b:0d:71:a9:cd:a8:b1:d2:
         b0:62:08:4e:fa:5b:fc:86:96:6e:c7:2b:69:69:2f:e5:5f:af:
         4c:6f:19:64:61:2c:01:24:7a:69:0d:6e:38:36:61:09:70:70:
         79:9e:1a:3d:3a:11:b8:55:1a:21:74:a4:6f:7a:04:2a:ce:33:
         c5:d0:d6:79:e5:ca:a7:9a:ed:d4:fb:1b:48:c8:21:24:fd:d3:
         88:03:3b:56:9b:dd:fb:1c:fc:64:9a:99:24:e2:1e:1a:31:e1:
         0f:46:7d:a7:30:de:9d:95:b0:5b:12:1f:39:33:62:d8:a8:0c:
         32:93:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----