Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft
File:                     99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json)
Hash identifier:          Rhm9GxnoCoDTxWmrY3eWwkDkn+6K9Mvx2WpC4sJigBQ=
Subject key identifier:   6F:B3:41:0C:B0:D5:10:7A:D8:ED:DA:86:EB:8C:B0:F4:63:73:65:CA
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       27AFE11A8BB50AA7C01BFC48BEC15ACEBBDF6B8F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft
Manifest number:          01A5
Signing time:             Sun 13 Apr 2025 03:13:03 +0000
Manifest this update:     Sun 13 Apr 2025 03:08:03 +0000
Manifest next update:     Mon 14 Apr 2025 05:35:03 +0000
Files and hashes:         1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: yyj6WFvhLXsHsH3ezcENVHFfiZHDChoKKc0hyz/JQbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:af:e1:1a:8b:b5:0a:a7:c0:1b:fc:48:be:c1:5a:ce:bb:df:6b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Apr 13 03:08:03 2025 GMT
            Not After : Apr 14 05:35:03 2025 GMT
        Subject: CN=6FB3410CB0D5107AD8EDDA86EB8CB0F4637365CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:62:57:c2:c8:04:76:3a:11:88:85:cc:2e:
                    22:1f:bc:b7:58:50:ed:98:64:96:a6:af:fd:c8:c6:
                    7a:65:87:a1:fa:c0:cd:e0:3b:03:9e:10:1d:db:6e:
                    ca:61:7d:3b:35:24:b3:1b:19:3a:e3:b4:07:6f:bf:
                    66:58:93:bf:99:ce:9f:18:f6:b6:85:44:53:ce:8d:
                    fb:e3:2b:51:11:1d:ce:04:a7:6f:11:f4:e6:59:21:
                    3b:40:d2:f5:79:bf:bd:59:79:cc:1c:8d:f0:cd:a8:
                    25:f2:a1:cf:7c:c0:79:a1:54:25:2a:92:dc:0e:ba:
                    18:90:31:32:34:8f:7d:ec:b1:bc:6e:18:29:74:07:
                    3d:8a:a5:ce:69:ee:e1:02:e6:79:a1:46:ff:f2:85:
                    f9:1b:07:82:5b:2c:2b:69:2d:d1:73:73:fb:9d:49:
                    f3:98:a7:46:f7:6c:63:dd:d0:02:6b:db:9a:40:da:
                    29:a3:c2:a3:3b:25:05:fe:ee:fc:50:37:0a:68:a8:
                    0a:97:7c:c0:f0:6d:b7:7f:d0:e4:8b:46:3a:0f:0f:
                    0a:42:a6:47:31:85:f9:d2:2a:70:5d:78:42:b1:c5:
                    b7:53:6b:b9:56:4c:ba:ce:0e:6a:0f:e0:36:9c:5d:
                    b0:c8:0f:a8:72:12:98:2b:04:94:28:b3:cc:e7:52:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B3:41:0C:B0:D5:10:7A:D8:ED:DA:86:EB:8C:B0:F4:63:73:65:CA
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:57:0e:22:cc:c0:0b:a7:95:72:cc:7d:69:b8:18:f0:4a:a4:
         95:3c:0d:c3:8a:d1:fd:83:d6:71:bb:84:4f:48:db:bb:3e:77:
         b1:fe:b1:8a:6c:84:28:64:8a:41:9b:3b:7e:98:26:2c:9d:3a:
         b7:8e:a5:1b:94:72:14:aa:30:22:b7:16:a6:56:7b:68:73:23:
         61:c4:5c:9b:18:12:b8:46:6c:84:c8:7f:e5:ed:34:a3:67:04:
         3f:bc:bb:e7:8b:3d:92:c9:e6:b7:83:b1:93:0d:74:0b:ab:12:
         23:16:66:ae:be:fb:45:34:92:ce:cd:61:e1:9b:99:1c:2b:b3:
         97:bf:3d:55:91:09:b7:30:31:de:c1:ed:69:92:d9:bd:b1:f7:
         dc:3a:c5:15:d4:70:06:89:bb:50:4d:fc:14:33:ae:3a:d5:ab:
         d1:51:e9:93:d8:ba:d2:de:d1:16:9f:55:44:4c:d8:22:e4:73:
         08:cf:47:57:ec:10:16:94:43:61:2a:c1:41:55:22:96:8c:c0:
         91:7c:24:0f:bb:6a:68:fa:2b:80:9b:22:20:1b:e3:79:1e:ce:
         14:4c:68:6c:79:5c:f4:12:fe:2f:09:dd:0b:5c:5c:25:f9:25:
         28:69:d1:27:8d:24:c8:59:7e:19:1d:73:cd:ef:50:62:16:cc:
         36:e4:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----