Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
File:                     B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json)
Hash identifier:          m1+0ZylGn0VgxUvQn9lFs2ZpwUuP281kEepGCCh7Jsc=
Subject key identifier:   FD:B0:E6:C0:61:54:FB:10:20:F3:B9:93:56:75:07:E4:10:AE:50:10
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Certificate issuer:       /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial:       6AD2F82FFBDE4832F9562325C79B877BEC8FB28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
Manifest number:          01C2
Signing time:             Sun 13 Apr 2025 02:52:42 +0000
Manifest this update:     Sun 13 Apr 2025 02:47:42 +0000
Manifest next update:     Mon 14 Apr 2025 06:49:42 +0000
Files and hashes:         1: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: hwipkGSwtCKNEaVeYs/lVeZpckysHvyHuEt4Oz/IH2U=)
                          2: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: 2F3f2M3iftyv7EiTkHvKpwsHqihrOdk50XbB4vq7cXc=)
                          3: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=)
                          4: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: ZrlItvK4GUW9v/tEHAeY+MLQvIad9obNlZyUUNFrjsU=)
                          5: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: G37NWy8joe35PY5mEAUdmsc9j9WC2w+hWIJzxuuqCv0=)
                          6: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: ILHMVutQqrUF6iiv8nR1xxWWhUx08z770HSNuw90qv4=)
                          7: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: sYBJGQEADZAQ/LhDv39fbswhI7nUsQH8ZMB5xh3hosI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d2:f8:2f:fb:de:48:32:f9:56:23:25:c7:9b:87:7b:ec:8f:b2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
        Validity
            Not Before: Apr 13 02:47:42 2025 GMT
            Not After : Apr 14 06:49:42 2025 GMT
        Subject: CN=FDB0E6C06154FB1020F3B993567507E410AE5010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:f8:e7:01:33:f1:34:f1:36:76:d3:d1:5b:
                    c7:78:0e:f6:db:68:4e:16:a3:76:7b:37:93:c3:71:
                    92:00:9e:9c:49:74:9d:06:2d:fc:3d:ff:da:b7:9f:
                    c9:34:ef:ed:4c:55:b4:4b:40:62:78:4f:30:29:11:
                    33:af:29:5d:16:12:85:07:a3:72:cb:0c:4c:0f:bb:
                    41:c6:c2:96:5f:37:0a:96:44:7c:ca:0b:71:df:39:
                    ca:1b:ad:62:1c:a2:bb:ce:73:a1:bc:57:ab:2c:16:
                    2e:d8:ba:05:9d:47:b0:c9:b3:45:f1:de:cc:2d:c3:
                    c8:1f:90:40:a0:94:4b:8e:ed:7d:d4:7a:2e:aa:be:
                    77:b0:de:de:aa:1e:36:61:2b:ec:7b:ca:4c:d5:1c:
                    43:da:1e:7d:69:90:a9:fa:2f:76:9d:79:41:d6:fd:
                    7b:76:ca:83:85:58:e4:80:18:a5:2c:a5:56:b6:72:
                    1b:93:e5:9c:8f:c6:90:8c:0f:b7:b7:e9:ef:6f:47:
                    f5:c3:fe:58:97:82:b0:67:d4:bd:84:67:99:1c:9c:
                    a6:a3:9b:1d:7c:75:38:d2:66:19:d6:c2:d9:54:52:
                    14:52:86:a0:a0:87:b7:f7:0a:8f:c2:2b:9f:d5:3e:
                    2b:da:2c:8d:64:82:34:ec:a3:8c:9f:a4:6d:f3:9b:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B0:E6:C0:61:54:FB:10:20:F3:B9:93:56:75:07:E4:10:AE:50:10
            X509v3 Authority Key Identifier:
                keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:01:c9:a9:43:96:a0:71:77:cc:2a:d7:59:3a:9a:58:7f:1f:
         19:fe:2a:db:02:6f:06:b3:43:17:c5:31:ef:e5:1a:13:a8:48:
         a2:a0:86:67:5c:b7:04:03:d5:0e:0f:9a:ab:e8:40:5d:fd:00:
         26:32:97:a3:d2:d8:81:71:90:9a:82:26:3e:81:80:65:52:b4:
         4c:50:bb:22:e9:6f:69:cb:40:be:5b:78:74:f7:b5:8e:4c:da:
         c7:0c:ea:50:1f:3f:2c:5c:ca:22:68:99:ad:e6:8c:59:be:c3:
         d9:2f:d7:10:14:1d:47:8a:1b:9e:ca:de:5b:a5:6b:94:dc:5a:
         ca:16:b4:ef:79:23:5c:c2:b4:02:1b:64:04:00:9d:a4:4a:c4:
         5c:01:f2:91:dc:cc:d7:62:bd:71:0d:c1:af:a0:92:27:39:dc:
         c0:e4:4e:9b:a6:5b:58:5b:95:31:64:1e:a1:8f:34:2b:59:6e:
         f3:c0:e3:60:05:45:43:67:3c:99:e5:61:4c:20:d3:80:41:2f:
         03:5d:ce:93:2f:09:53:40:17:b3:96:7a:23:35:fb:a0:fb:30:
         4e:15:10:36:85:7d:55:f0:65:2b:f2:38:fe:76:b3:15:b5:16:
         b5:91:d8:11:93:e8:7a:6d:ff:a1:97:f3:3a:27:ed:b0:ef:54:
         6d:d6:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----