Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File:                     ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier:          Ld2Gv09JEtTgfsrcKls19ZUPyYb1SX6+uUvMV47tSEU=
Subject key identifier:   8C:B5:FB:F8:FA:C3:45:2B:02:46:24:45:30:F3:C0:26:ED:74:B1:70
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       7E782DFAC9FA0A23070FA45F5C9976ED088B2F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number:          D8
Signing time:             Sat 12 Apr 2025 15:41:22 +0000
Manifest this update:     Sat 12 Apr 2025 15:36:22 +0000
Manifest next update:     Mon 14 Apr 2025 17:14:22 +0000
Files and hashes:         1: AS44355.asa (hash: suHXzL7+p9pEhy3V1lXLsc7/MuuAkxWi6AeYlUGu+1w=)
                          2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: ynWdH8jaQGO0jtDBDbzYcvrfbv90cL6xq8MNZmFg4Zw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:78:2d:fa:c9:fa:0a:23:07:0f:a4:5f:5c:99:76:ed:08:8b:2f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Apr 12 15:36:22 2025 GMT
            Not After : Apr 14 17:14:22 2025 GMT
        Subject: CN=8CB5FBF8FAC3452B0246244530F3C026ED74B170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:30:60:35:14:0d:36:12:63:22:21:6f:0a:
                    5c:ab:f7:88:43:53:f2:8f:2f:0e:5f:44:40:be:d8:
                    7a:37:c9:56:ef:4c:3c:a5:e1:ce:5b:f0:3e:0c:da:
                    d7:f7:06:78:26:01:c6:75:db:19:0a:5d:e9:78:fa:
                    2c:c5:ad:3f:b7:ac:bb:b6:9d:d6:a9:c0:e5:85:bd:
                    77:ab:70:13:81:49:eb:2f:8a:87:d6:12:2a:60:ed:
                    c0:31:06:f2:85:f4:71:c1:97:7a:14:17:31:50:2f:
                    14:7a:79:9a:ae:ca:61:89:3c:25:d2:2f:00:0f:20:
                    50:ce:ec:b7:41:7a:ad:ea:2f:30:12:bd:5c:ef:45:
                    14:54:8a:07:0e:84:ec:23:34:b5:a1:ee:47:2d:cf:
                    0d:a2:09:74:3f:e1:33:43:12:bc:8b:75:e7:e3:d2:
                    61:09:a1:52:75:76:30:d2:8b:36:22:93:32:31:d5:
                    b5:d0:d0:e1:1f:92:5d:76:79:6f:9d:40:7c:b7:54:
                    3e:43:e7:bf:6a:09:24:f7:e6:3d:92:5c:3a:24:d4:
                    bf:c4:5c:70:ed:55:66:2c:7b:6a:bb:17:9f:b8:9a:
                    e5:48:56:c7:3e:11:f0:23:28:76:9b:8e:ab:81:b9:
                    b9:2b:bc:7b:81:d3:cf:8c:1c:aa:bb:83:05:7d:0c:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B5:FB:F8:FA:C3:45:2B:02:46:24:45:30:F3:C0:26:ED:74:B1:70
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:e6:f7:0a:6b:14:fb:89:97:c1:e1:6e:4a:bd:98:2f:64:
         31:bc:f7:0b:8d:97:ae:13:24:3a:04:8c:7b:8b:33:42:c1:5b:
         9e:de:1f:a6:8d:d4:8c:82:97:6c:de:2c:5a:2d:af:09:95:b0:
         b2:4b:6e:8c:a5:b4:85:d4:fc:d7:27:87:e8:8f:11:18:d6:0d:
         10:3e:cb:42:d9:7e:16:70:92:17:28:de:ba:9e:12:fc:d1:c3:
         53:3a:61:92:87:ab:9a:7e:6c:19:63:e5:c8:1a:54:ad:41:d9:
         76:20:53:9c:fa:04:22:28:d6:4e:73:6d:2f:f3:de:50:cd:97:
         7a:99:90:89:e0:00:72:1f:bf:9d:9e:1a:b0:38:2b:a9:01:9b:
         00:21:9c:0a:39:06:34:df:18:36:fa:ea:b7:41:dd:15:b3:2d:
         61:f5:1f:a0:ee:9f:c4:93:a4:94:f3:17:af:0e:08:6c:15:80:
         a5:ac:bc:01:ab:86:2e:a1:fb:16:cd:db:50:56:3d:3d:bd:31:
         84:c5:20:e4:97:5c:e7:0a:e6:ab:6e:12:00:d8:72:94:6e:bd:
         47:be:47:ac:f9:7f:82:92:5e:91:c3:f8:b6:e9:a3:73:22:57:
         a7:44:53:a7:75:26:31:15:ba:d5:f1:19:8d:05:be:ee:9d:7f:
         ee:ac:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----