Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft
File:                     04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft (raw, json)
Hash identifier:          UnzLEohdCu0DYnSicJLHKs/khgSelnUZoYUg4J48zMk=
Subject key identifier:   79:5C:18:DE:8B:3D:55:73:4E:DF:9F:10:BF:02:B2:DF:8C:2D:63:28
Authority key identifier: 04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C
Certificate issuer:       /CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C
Certificate serial:       2A47F89D324975844BBABFB3C29ADD87CB06C277
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft
Manifest number:          0147
Signing time:             Sun 13 Apr 2025 11:11:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:06:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:27:10 +0000
Files and hashes:         1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: BmKTbRMoiut+8VNSufvgCLPuOQU03tX8DldEeEoDX0o=)
                          2: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl (hash: JdyJMfMSVefm7u0kkoUTytr8VRl3ued3KeTT0RgWU5k=)
                          3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: RXK+W3w1YvQu9ahIRwMIryYcMgQG39a2/hB4IK34E74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:47:f8:9d:32:49:75:84:4b:ba:bf:b3:c2:9a:dd:87:cb:06:c2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C
        Validity
            Not Before: Apr 13 11:06:10 2025 GMT
            Not After : Apr 14 11:27:10 2025 GMT
        Subject: CN=795C18DE8B3D55734EDF9F10BF02B2DF8C2D6328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:83:3b:e7:40:4c:0b:10:e2:85:5b:da:e8:
                    36:63:dd:05:5c:9b:a1:29:20:4c:e9:26:cd:52:77:
                    ea:b2:36:a0:96:df:4c:5f:7d:6d:86:ce:65:11:71:
                    e6:03:68:25:8a:30:4d:a7:27:0c:c8:aa:17:a3:b6:
                    58:b0:e4:fa:bf:63:21:d8:c6:3f:d0:27:de:a2:b3:
                    b9:7e:76:67:26:b8:c0:fa:6d:c5:e1:16:6f:aa:49:
                    51:e2:28:4d:88:26:34:e6:83:d7:5b:2a:fb:a4:3c:
                    38:2b:de:43:73:e1:b8:9f:9b:0d:7f:3f:14:f7:38:
                    d1:c1:3d:35:8c:c9:f8:4c:08:b7:58:a3:e9:af:91:
                    4c:70:bc:a1:90:7c:9d:0a:c3:8c:3d:83:0b:e0:9b:
                    c2:e4:00:1a:3b:0f:f3:41:2a:e1:6d:10:2e:ad:79:
                    c4:99:3e:47:df:be:fe:13:aa:40:56:19:64:84:1d:
                    d3:77:14:64:53:46:56:27:3d:e9:8c:ef:f3:72:eb:
                    99:e1:14:7b:e1:e4:d5:cc:15:35:2d:1f:12:cf:a2:
                    b2:d7:7c:11:f1:80:bc:be:6a:a4:32:ca:7d:f6:fe:
                    dc:b1:a6:b9:9f:f9:93:2e:1d:05:38:c2:61:2b:a0:
                    c6:35:f5:d9:b1:a2:9d:40:49:86:7f:07:1b:94:72:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5C:18:DE:8B:3D:55:73:4E:DF:9F:10:BF:02:B2:DF:8C:2D:63:28
            X509v3 Authority Key Identifier:
                keyid:04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:79:5d:f5:ca:85:76:59:1e:0e:c3:c8:ef:1a:a0:3f:ae:
         a8:e0:39:1b:dd:f6:49:70:21:e7:ea:08:8b:01:39:5d:68:8d:
         b7:27:83:ae:8d:8b:a0:46:1f:b4:74:9d:ff:d3:df:88:b2:f6:
         f6:55:95:2a:f4:a8:30:e2:78:f2:78:2a:13:14:87:1c:fb:e0:
         69:be:e9:73:b8:34:24:ee:3b:c9:d4:3b:c6:bc:14:7b:ce:c3:
         f2:09:82:5b:51:0d:14:c3:d9:a8:ff:ec:25:fa:0e:67:f7:74:
         02:a9:29:36:66:76:7c:5e:58:cc:ff:63:ae:2d:d5:dd:ca:f9:
         32:dd:eb:60:a7:cb:c0:30:91:23:a2:80:ad:38:78:bb:ec:cb:
         54:bf:cc:5e:b2:a5:41:26:a4:f7:0f:00:89:17:5b:4f:46:1d:
         24:94:6b:a3:c5:1d:f7:53:d1:99:ae:a8:44:5f:e1:ce:3d:52:
         89:0c:39:75:6d:25:d6:86:34:b5:68:63:16:69:bf:e7:2b:53:
         24:e6:45:5b:c5:24:a3:39:37:e5:7f:82:60:3e:34:c3:2c:ad:
         ba:ce:d1:63:4d:7a:90:71:7b:6b:26:eb:0d:69:09:64:3b:8f:
         ed:68:11:57:17:44:03:ad:e1:fc:bd:03:df:de:7c:d8:8e:eb:
         1d:9c:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----