Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
File:                     42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json)
Hash identifier:          WC3bgFzN23L8ghETCBVyP858YLQMbMZ5RmlcN9feT9I=
Subject key identifier:   5F:FD:67:21:04:70:D7:14:8A:38:C7:BE:ED:FE:E4:D7:DC:F0:11:55
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Certificate issuer:       /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial:       5B4D1458BEC057E90BA8F52E0D2D1A138EC06B67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
Manifest number:          0108
Signing time:             Sun 13 Apr 2025 02:49:16 +0000
Manifest this update:     Sun 13 Apr 2025 02:44:16 +0000
Manifest next update:     Mon 14 Apr 2025 04:01:16 +0000
Files and hashes:         1: 36322e3138322e3139322e302f32312d3234203d3e203236393534.roa (hash: Ik7anBwPgCuhmGi57S9xoCnrcZASk7NJHdOlyprymaY=)
                          2: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: LizvwJL2nprToghg5qQqGpfO97UmahWuyDJ1ZaaEJS0=)
                          3: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: 9/MGIe8yxdv+AJLGTtEjCsfVWLkmtbihSyfLK4tV4F0=)
                          4: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4d:14:58:be:c0:57:e9:0b:a8:f5:2e:0d:2d:1a:13:8e:c0:6b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
        Validity
            Not Before: Apr 13 02:44:16 2025 GMT
            Not After : Apr 14 04:01:16 2025 GMT
        Subject: CN=5FFD67210470D7148A38C7BEEDFEE4D7DCF01155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:47:29:e8:7b:e7:d6:60:e1:ca:c4:dc:d8:
                    2e:5c:1e:ad:c9:35:83:ec:b5:d4:b1:de:1f:03:5d:
                    71:0a:33:7a:ff:b7:bb:c1:49:c4:7f:88:79:a1:ee:
                    87:f1:02:22:95:83:8f:c9:9a:f7:80:de:dc:33:27:
                    71:b1:c8:04:63:c6:95:ec:7b:76:32:b4:7d:0e:e8:
                    db:af:71:75:16:8b:af:b1:6a:a5:7c:7e:77:7a:61:
                    37:1e:79:0d:61:a3:f5:7e:49:ed:33:34:35:36:ec:
                    e9:ba:7f:80:b7:5a:e2:7e:73:10:45:b9:c1:83:e1:
                    59:b4:de:75:72:3d:1b:5c:af:f9:c9:cc:44:7e:4f:
                    6b:07:3f:b0:ff:e8:18:81:4f:a9:89:1a:eb:8b:5a:
                    99:66:9d:9b:2c:73:a6:44:60:db:7a:50:4f:b4:c5:
                    f7:2c:a6:91:70:71:c6:d7:14:21:48:c0:0d:2a:3e:
                    43:cc:1f:f1:b8:81:f2:c3:08:ed:01:30:52:3b:b6:
                    64:3b:0d:ff:96:bf:36:b7:d6:78:74:cb:fd:c4:ea:
                    9c:23:3d:de:52:23:e4:a0:54:ac:f6:f2:26:e3:a8:
                    d8:12:35:32:b0:25:0a:53:b0:76:21:23:87:00:ee:
                    3f:1f:7f:43:18:b6:91:ab:f7:58:6e:f0:40:c6:34:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FD:67:21:04:70:D7:14:8A:38:C7:BE:ED:FE:E4:D7:DC:F0:11:55
            X509v3 Authority Key Identifier:
                keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:35:50:80:6f:ba:fa:3f:7f:a6:ab:a6:5e:69:45:6f:8f:
         6b:6d:f3:7a:36:68:e5:e2:9b:e8:04:2d:ac:30:09:6e:ef:2f:
         9d:43:db:2a:da:2a:f9:30:2e:83:41:53:87:46:42:6f:e4:91:
         9e:41:4f:a5:d4:9d:1e:41:1b:dd:8d:b1:ae:a6:86:6e:d6:dd:
         d0:e3:fe:49:a0:63:22:cb:34:fb:11:fe:7e:5c:94:26:48:2a:
         5e:7a:59:02:fb:ff:df:6f:ff:5a:9b:0f:a9:00:14:fa:2d:b7:
         f1:18:cb:0d:94:1b:ce:97:9d:93:f1:0b:b0:f3:3f:9c:e2:8d:
         9d:8b:7d:7d:f3:7c:d8:e2:1a:5c:07:3e:26:d6:b9:8d:ad:d4:
         58:ae:e6:41:fe:9f:fe:15:4c:6d:f0:d9:b5:83:25:09:b3:4c:
         c5:32:66:41:e8:74:ba:a9:34:1d:22:0c:01:62:b6:3f:0d:ef:
         eb:9c:27:23:77:61:63:7d:2e:10:80:92:83:88:05:7f:a2:19:
         43:37:5a:32:4a:b1:43:cc:12:3c:78:ad:3e:17:86:43:c1:0e:
         ed:bb:be:d3:45:d6:39:5e:cb:69:45:07:ae:99:0c:f7:37:bd:
         79:4a:7d:c7:78:f3:f6:2e:5a:5a:f1:20:51:62:3f:cb:c1:82:
         f7:dd:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----