Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
File:                     8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json)
Hash identifier:          bZZ1ZD6sJs2Y28BLaS9T6Wgj5YzdAwa4MgS71FqDXnU=
Subject key identifier:   C0:B3:9F:EE:6A:3A:4F:1F:DC:34:E8:35:7A:F3:88:CA:A1:F3:D1:97
Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
Certificate issuer:       /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Certificate serial:       3A8D4B43179F6C71528CFB1331BBC499C40F5AA4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
Manifest number:          014D
Signing time:             Sun 13 Apr 2025 07:14:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:09:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: Shwa+R123J59OSCnssX1pJiDlb/WgwPVO0T5/m1BOOQ=)
                          2: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=)
                          3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: tezZfjQIJSEoaPdienMyz3PTigWBtWV225R5RVQQguw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8d:4b:43:17:9f:6c:71:52:8c:fb:13:31:bb:c4:99:c4:0f:5a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
        Validity
            Not Before: Apr 13 07:09:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=C0B39FEE6A3A4F1FDC34E8357AF388CAA1F3D197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:3c:c7:fb:7c:55:f2:c7:65:92:91:1c:9a:
                    6d:3c:8a:b7:34:ce:7d:15:f9:0b:2f:ff:25:06:ea:
                    84:37:7e:2c:e6:70:b3:3a:c6:a1:23:83:f9:43:9b:
                    55:a0:49:f5:9e:cf:82:03:96:7f:b7:95:b1:03:59:
                    eb:8c:41:87:b5:a1:ac:3e:57:e6:e7:aa:d3:20:05:
                    fc:45:de:08:03:df:b0:19:66:9d:95:79:93:3a:12:
                    92:ed:d5:ff:da:62:a2:45:c5:a3:dc:bf:49:bf:99:
                    3e:75:36:4b:f6:d3:8a:b3:a9:87:a2:f5:92:ff:1e:
                    14:1c:17:65:3e:2a:9f:11:9a:6c:79:8c:52:06:38:
                    67:7b:59:9b:41:42:4c:de:cc:96:5f:30:fe:52:e3:
                    f2:a3:56:d7:89:55:61:e1:1f:fc:95:e3:da:21:ac:
                    de:d8:eb:11:8d:cf:4d:77:e5:88:f6:f8:36:1e:e1:
                    32:aa:a6:c2:57:f1:bf:07:70:48:23:6f:29:08:2b:
                    2c:43:4e:31:63:db:b0:bb:6e:32:5a:1e:fc:a8:75:
                    b7:74:c9:3a:0c:5d:89:2f:00:11:8b:be:03:dc:af:
                    1b:58:56:84:c1:0c:cb:0f:e9:5a:9d:97:1c:76:73:
                    4b:00:cc:da:10:8e:f9:91:a7:ff:0a:39:83:22:1d:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B3:9F:EE:6A:3A:4F:1F:DC:34:E8:35:7A:F3:88:CA:A1:F3:D1:97
            X509v3 Authority Key Identifier:
                keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ed:ac:52:4d:b4:9b:5b:73:64:20:a7:ef:92:78:3e:28:32:
         79:14:ef:0e:d6:94:e6:9d:3a:a1:3b:c5:cc:21:44:db:55:05:
         af:44:d4:88:e3:f7:3b:b7:0c:8d:c4:db:6a:d7:aa:c0:96:ba:
         01:93:c1:0d:ef:4f:fd:4f:78:bf:f7:36:a3:10:42:28:ac:dc:
         c3:22:fb:ab:42:ea:3b:53:15:2a:00:f8:f6:3b:01:1f:66:e3:
         33:12:94:b8:91:6b:ce:6e:fd:b4:59:ba:41:bb:04:ea:2e:d4:
         01:8c:40:13:53:0c:b6:cc:67:83:50:3f:85:f7:ba:ed:6b:6f:
         97:0b:dc:05:d6:4a:88:63:42:a7:c2:ce:20:09:95:f4:a3:45:
         db:11:b5:55:c0:09:ac:c7:90:d2:72:a1:64:66:41:70:e0:92:
         4e:27:f0:c6:16:23:6e:83:89:70:6a:c5:5d:e8:e4:5b:10:d0:
         65:50:73:14:af:c6:25:9b:2b:a4:07:74:26:25:e4:5c:80:9f:
         ae:91:72:c8:a0:f0:b0:e9:cf:27:12:4a:a4:32:57:7d:d7:3e:
         48:35:4f:f0:5a:d6:cd:d0:cd:d8:6b:38:61:bb:d1:3f:8b:61:
         f3:73:ad:b0:5e:0d:0b:80:82:58:7c:de:51:5b:37:be:51:d7:
         92:eb:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----