Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File:                     B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier:          ma52ajRQSxsYNFarSln4gRDTtQBkQn5htkIdSxtOTwg=
Subject key identifier:   26:C9:0B:BE:F9:59:2E:E9:B8:D6:97:8B:5F:5E:C2:55:E9:D2:95:B8
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       3AA12468B56A159169CE0CFA7478943ECA2B8E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number:          02E1
Signing time:             Sun 13 Apr 2025 12:22:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:17:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:04:45 +0000
Files and hashes:         1: 39332e39352e3131322e302f32332d3234203d3e20383334.roa (hash: 3rLaqpIi7OxCCRSTs6eBEK9238V9bCnBuuDz/zNANzU=)
                          2: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: YuARjtSHqZqzXAB9pM5yH5/ZBuJTWxa6z5MjBxyMh/s=)
                          3: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=)
                          4: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=)
                          5: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=)
                          6: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=)
                          7: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=)
                          8: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: MF/szlJtg3jR946D7Iy8tt2rHbx2IcEkKMT7PmewPLE=)
                          9: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a1:24:68:b5:6a:15:91:69:ce:0c:fa:74:78:94:3e:ca:2b:8e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Apr 13 12:17:45 2025 GMT
            Not After : Apr 14 14:04:45 2025 GMT
        Subject: CN=26C90BBEF9592EE9B8D6978B5F5EC255E9D295B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b8:19:70:7d:4f:26:21:02:39:52:a8:b8:36:
                    c4:02:bd:f3:64:55:b9:ad:54:28:66:bd:e8:ff:bd:
                    9b:8f:55:3a:d2:44:d9:8d:56:a7:cf:39:06:f6:08:
                    72:38:8e:2d:57:6c:2d:0d:13:a5:f4:d5:98:eb:f8:
                    b2:d4:d4:77:36:4e:3c:34:4e:9d:7b:bf:bd:06:47:
                    df:98:77:46:e2:fb:43:35:16:3e:b2:54:28:a4:27:
                    69:06:94:48:36:b4:fe:bb:c7:f9:b3:77:e2:c3:30:
                    d7:ec:b8:45:e9:79:55:42:91:e8:4d:39:4c:db:d4:
                    26:e5:f8:c2:b5:b5:ef:06:39:07:99:8e:cc:25:50:
                    47:7a:50:55:4f:20:1c:d7:6b:ac:97:1c:64:1f:ef:
                    a8:b3:13:31:82:63:12:1c:91:e0:d1:c8:c6:06:c4:
                    cc:87:bb:68:80:48:5b:56:2e:c2:ab:2b:5a:a9:b3:
                    b0:21:ef:8f:54:a2:86:51:96:b1:3d:1e:f5:a6:5c:
                    86:0d:15:de:50:f2:f7:aa:55:b7:d3:ef:27:58:b5:
                    78:b6:db:ad:e9:97:e1:12:96:cf:bf:51:2d:94:30:
                    c8:56:ff:16:09:0c:e4:c1:96:2a:42:b1:ee:65:ab:
                    4b:bf:71:7c:62:52:eb:bc:1c:c4:04:34:2d:47:43:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:0B:BE:F9:59:2E:E9:B8:D6:97:8B:5F:5E:C2:55:E9:D2:95:B8
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:dd:ef:c6:10:c8:32:72:57:af:93:de:ad:b7:ef:b4:b5:fd:
         d3:a9:81:46:f5:db:ae:b8:b9:91:5e:c7:8e:b9:98:fe:c7:d7:
         7c:ac:c7:f9:fd:11:20:88:8e:34:a5:9b:46:db:0f:64:a2:f6:
         74:6f:b4:8a:05:c8:a3:15:cd:57:2f:fd:6a:88:93:c8:85:ca:
         bb:29:fa:3b:53:cf:2f:ae:c6:2c:3e:a7:3c:27:4a:67:a8:56:
         74:fd:2b:bc:fe:63:fb:81:b9:00:1b:7d:81:e2:5c:80:6f:e5:
         a6:aa:8f:fd:66:dd:91:3f:a3:04:91:bb:61:bd:83:86:d6:ab:
         d1:7e:49:2f:80:df:4d:85:d6:8c:ea:19:ab:7e:0d:8e:cf:ce:
         34:bb:2d:c2:d5:70:11:14:dd:a7:45:61:67:c4:5e:2c:ae:be:
         40:16:35:06:70:96:96:c7:72:ae:5a:65:d4:cf:1d:aa:2d:b7:
         41:26:44:81:73:f1:fc:26:ca:a6:b4:6e:6b:19:e0:d2:6a:90:
         71:6e:98:93:7b:a5:c7:21:76:7d:5b:b9:b6:cf:53:81:71:93:
         41:39:6e:27:99:36:b4:7b:f9:53:a6:11:43:58:00:55:09:76:
         56:10:cf:96:de:73:9d:da:31:e9:d8:88:87:5b:0a:5e:0f:49:
         1a:f8:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----