Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
File:                     B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft (raw, json)
Hash identifier:          OJvdfliyTfn9sb67r4BPMfYW5n1p6cVWx899u85748k=
Subject key identifier:   E7:83:EE:C2:BF:E7:4B:10:93:33:17:FF:E0:F8:A1:56:22:F6:3C:E6
Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
Certificate issuer:       /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
Certificate serial:       269491379993DEA4B17EDFF144263A1A79CD93B3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
Manifest number:          5B
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 08:56:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:51:07 +0000
Files and hashes:         1: 326130393a353463333a3a2f33322d3438203d3e20323135313437.roa (hash: Hh49k+Xt2ffEnf+1AdAQ2KRXHiXFSnVa9rayhA3bylc=)
                          2: 326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa (hash: DYKApsC0Xy9yKLi3q0BaMZa16VHMvjlxYhlK7Vyadxk=)
                          3: B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl (hash: wSZ0ZZXijFmeYZnZWz/ElQzZkK32ESuudTjcgSFz86k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:94:91:37:99:93:de:a4:b1:7e:df:f1:44:26:3a:1a:79:cd:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
        Validity
            Not Before: Apr 13 08:56:07 2025 GMT
            Not After : Apr 14 11:51:07 2025 GMT
        Subject: CN=E783EEC2BFE74B10933317FFE0F8A15622F63CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:1a:e9:1a:5f:d2:f3:62:79:34:cd:fc:41:
                    71:b8:a1:64:26:bf:59:90:28:a7:e6:3f:b3:91:35:
                    30:46:2b:c7:7b:e8:87:dd:27:9c:ca:33:3d:84:1e:
                    09:bf:12:5c:1f:f7:a3:3c:e9:bb:c4:1b:ec:78:5f:
                    44:c6:81:9e:2a:16:0a:6a:78:30:dd:4c:ee:f6:21:
                    4f:5b:a0:d4:84:ab:5c:83:ed:49:f1:34:57:53:93:
                    7b:66:cd:54:02:c7:bf:5f:60:40:6d:45:e3:66:93:
                    76:59:17:69:b0:85:fd:08:dd:f1:55:10:86:ec:a2:
                    ba:77:82:07:21:92:6a:fb:13:35:21:30:48:88:42:
                    6e:9f:bf:cb:bb:05:b6:3d:05:1f:36:cb:2f:87:d6:
                    ad:9f:e0:70:6b:02:df:ef:08:d9:9a:76:96:23:68:
                    5c:81:8a:ac:13:0f:88:4e:6b:52:10:10:1c:52:d5:
                    4b:c5:b6:af:1b:ce:e8:dd:22:04:9d:fa:1e:c3:78:
                    81:3c:50:af:2e:83:e5:9f:e7:37:b4:a4:3a:b3:97:
                    bf:24:30:f8:6e:a5:8c:71:ec:c8:fc:f1:92:d7:16:
                    c9:9f:99:18:7d:43:06:a9:18:2b:b0:73:ed:24:63:
                    f4:3f:81:48:47:9e:87:4f:7c:ad:3d:0d:76:3f:25:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:83:EE:C2:BF:E7:4B:10:93:33:17:FF:E0:F8:A1:56:22:F6:3C:E6
            X509v3 Authority Key Identifier:
                keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d2:2f:74:8e:f0:80:9e:91:de:e6:a1:6c:16:34:8b:fe:84:
         8e:04:f5:72:71:87:b1:d5:ae:ef:eb:1b:c3:3e:c8:7f:ba:50:
         83:f5:01:38:9c:1f:24:9a:b7:0b:e1:61:44:dd:0a:cb:a5:7b:
         7d:82:14:70:6a:d8:27:83:7d:62:da:af:4b:cf:d1:c3:34:a6:
         16:b8:c3:a6:76:87:b3:27:5e:9b:7f:b3:36:39:dd:5a:54:80:
         35:bd:eb:3f:47:37:2c:92:df:2c:cc:27:3e:92:75:f9:4c:37:
         23:07:84:23:f3:69:61:da:0b:a2:da:4d:51:b1:84:9c:a8:33:
         cf:77:f1:00:c3:fe:67:dd:84:46:2d:cd:da:39:03:6f:80:a6:
         f3:9a:74:54:ca:78:bd:78:24:af:d1:ae:cb:ae:df:2f:8c:de:
         73:da:a8:c0:7c:c2:ac:35:98:92:e2:8b:87:ac:71:f5:39:5b:
         47:4e:2b:ca:8a:38:7a:f5:11:7f:f6:57:17:13:67:0d:9c:2b:
         bc:3b:86:f0:c8:3e:ae:1d:3c:e7:fe:6d:c6:54:08:f0:1b:ae:
         7d:c8:0d:00:c0:b7:a9:2b:34:f0:31:00:ef:fd:d5:e9:b6:06:
         3e:b5:6e:57:41:a8:0b:9e:e9:8a:ef:81:0c:87:4c:72:b1:b3:
         45:60:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----