Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft
File:                     893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json)
Hash identifier:          f30Dv7aZbvtGw+C2elVDqFXppdsVxcmkFk8WvfhF0W0=
Subject key identifier:   54:2E:52:ED:BB:96:A8:7C:06:4B:56:E4:81:FF:65:7A:5E:3E:BD:FB
Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B
Certificate issuer:       /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
Certificate serial:       2C2B3EE115517A0C6B57FE78073907F263BA29E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft
Manifest number:          05
Signing time:             Sun 13 Apr 2025 09:08:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:03:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: diXRHV0xfG2q8xcNrZQ/EHCug3Z6KHNhbaanB2o/Lxs=)
                          2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=)
                          3: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=)
                          4: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2b:3e:e1:15:51:7a:0c:6b:57:fe:78:07:39:07:f2:63:ba:29:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
        Validity
            Not Before: Apr 13 09:03:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=542E52EDBB96A87C064B56E481FF657A5E3EBDFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:82:30:34:dc:4b:42:4b:9e:10:61:71:70:
                    46:d5:de:f1:a3:f3:e3:56:eb:7b:5a:d9:2a:ce:f6:
                    74:4b:ef:c1:5e:a0:8e:93:79:4e:eb:cb:66:61:aa:
                    42:9d:1a:a5:2d:31:14:cd:e0:32:a1:bf:1c:a0:3b:
                    d3:ec:ab:f9:f5:1f:33:30:7e:2f:9b:1a:77:0f:b1:
                    3b:44:74:59:51:32:ce:45:f7:ca:58:97:90:75:64:
                    a5:39:41:e6:49:b1:b0:8d:ce:b2:2f:5b:db:e1:5e:
                    e2:e4:5e:22:29:d8:7a:eb:97:0c:63:f7:a0:d5:3f:
                    47:52:0a:c1:5d:77:87:d8:b8:18:6a:67:82:35:ad:
                    d1:96:71:3f:34:1b:a7:50:c6:1f:50:fd:19:4f:8c:
                    36:65:5b:30:82:f8:b3:b3:03:b8:a5:87:ab:23:f3:
                    d3:28:7b:4b:88:79:dc:e0:82:1f:26:f6:e0:ad:01:
                    1c:3c:57:f6:e0:16:65:98:4b:06:ca:35:cf:23:67:
                    25:c9:27:d4:cc:c7:35:d4:52:2c:c9:c8:51:a0:34:
                    4c:85:e8:91:7f:41:d2:10:55:6a:1d:33:5c:1e:a8:
                    c3:7c:fa:21:97:b8:71:56:bf:58:e9:39:94:13:4e:
                    fe:89:8f:d1:94:23:a2:45:8c:e4:4b:95:62:82:c8:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2E:52:ED:BB:96:A8:7C:06:4B:56:E4:81:FF:65:7A:5E:3E:BD:FB
            X509v3 Authority Key Identifier:
                keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:d2:96:b4:5c:5b:26:50:57:81:cc:f8:c7:75:53:bf:a6:
         8e:fd:ae:3b:52:3f:b5:f3:75:12:f3:bf:fb:01:ed:82:79:c2:
         d4:32:09:bf:c8:e9:0d:e7:0c:86:91:c3:04:18:a0:99:cf:10:
         1e:e5:53:24:84:2b:2a:5a:09:74:81:8e:23:05:d4:22:9e:04:
         63:8c:52:71:8e:e2:83:7d:bd:c6:1e:8e:8a:7f:79:fc:f2:95:
         5e:a7:4a:f7:e8:f0:c9:02:d0:27:64:f1:23:d9:67:fb:3a:91:
         d4:42:80:fd:c4:bb:bc:78:28:f9:c3:20:4b:81:a9:fd:5a:5d:
         65:3e:09:92:65:85:b7:04:a7:fb:fd:63:70:e9:51:d8:9d:47:
         82:b1:ac:d6:fd:f1:67:dd:d5:2a:3c:a8:87:be:33:fb:d3:51:
         50:8f:e5:87:47:fe:c5:b8:67:7c:da:14:03:99:ff:ee:67:7d:
         5f:fb:7c:f0:cf:0a:ed:80:7e:65:5f:d2:df:ca:d5:b0:57:65:
         ed:a1:e4:ac:6f:e1:29:58:3f:a5:85:fd:ea:43:73:00:47:7d:
         c5:6d:99:fd:7f:ec:cc:bb:7e:4d:7e:2b:d9:ce:34:33:54:45:
         38:4e:c6:95:46:93:70:04:e5:d3:46:0f:39:81:f2:f7:6e:34:
         a3:5d:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----