Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
File:                     4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft (raw, json)
Hash identifier:          +zQtyighMSE2Lm5C08UwjU20veUlWn+cA55aHfH5AUM=
Subject key identifier:   45:B7:DE:7B:79:F5:C7:E9:A6:2F:28:19:63:9B:71:4E:F8:B9:DF:D9
Authority key identifier: 4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
Certificate issuer:       /CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Certificate serial:       4AEA790C53D128DC3BFD7233E43079E540289E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
Manifest number:          7B
Signing time:             Sun 13 Apr 2025 02:13:03 +0000
Manifest this update:     Sun 13 Apr 2025 02:08:03 +0000
Manifest next update:     Mon 14 Apr 2025 03:13:03 +0000
Files and hashes:         1: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl (hash: 4F3rbkZo67ArQMV0LOmA6uAV9/V6wF6dU4windB/WJ8=)
                          2: AS213915.asa (hash: WNoePLBPk99sollnieSJLQGheEbE8N7gHweNXQmzvJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ea:79:0c:53:d1:28:dc:3b:fd:72:33:e4:30:79:e5:40:28:9e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
        Validity
            Not Before: Apr 13 02:08:03 2025 GMT
            Not After : Apr 14 03:13:03 2025 GMT
        Subject: CN=45B7DE7B79F5C7E9A62F2819639B714EF8B9DFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:3a:4c:45:05:86:c9:61:bc:d5:4f:30:0f:
                    e9:65:c4:ff:ee:e6:ba:5f:2e:dd:ac:66:cf:4e:cc:
                    96:6b:ec:cc:bc:1c:44:8e:eb:f6:b0:20:dc:a3:07:
                    aa:46:f0:e9:0d:50:ea:2c:d9:24:c1:80:9f:ef:f8:
                    ee:c8:57:e6:37:6c:22:c9:4e:8d:d8:e8:a4:86:51:
                    da:03:88:fe:22:fa:8d:d1:48:93:a3:7f:e3:57:0c:
                    57:45:ec:3d:a6:b7:60:41:ba:6d:1b:23:7c:81:cc:
                    a7:5e:37:81:a1:3a:c8:28:4f:ce:15:8c:5d:83:f2:
                    07:0f:6e:2a:de:28:ea:8e:79:bf:14:42:49:0a:6b:
                    43:9d:e2:ee:c0:b7:62:38:1e:c4:d4:14:ae:9e:f4:
                    48:e2:22:83:e1:93:af:28:e9:80:44:b8:92:74:e3:
                    4d:2d:ef:f7:ad:3e:3e:15:8e:86:8f:52:d8:23:66:
                    09:f9:2b:fb:58:47:41:73:b0:ba:4b:29:b2:5f:78:
                    ef:11:f8:61:55:73:ea:fb:76:1b:0b:ed:77:99:b7:
                    47:dc:f2:d7:74:4f:dc:23:9b:4e:60:16:fd:14:17:
                    9a:1c:d9:1a:c6:c9:0a:45:d9:65:87:89:6a:d1:d8:
                    fe:e4:69:38:fe:2c:58:e7:f2:ee:94:01:6a:ce:97:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B7:DE:7B:79:F5:C7:E9:A6:2F:28:19:63:9B:71:4E:F8:B9:DF:D9
            X509v3 Authority Key Identifier:
                keyid:4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:34:79:98:39:71:d8:94:a9:55:7e:d2:c2:10:05:e0:ac:97:
         9c:e7:1a:5b:df:58:90:f5:9d:7b:a5:5b:ef:8d:ef:eb:42:c3:
         27:29:2f:00:18:3e:de:1a:f4:2c:2b:69:66:32:95:3d:86:8a:
         15:2d:b2:6a:53:53:86:8d:96:40:29:4d:5b:84:35:18:a5:65:
         86:10:04:82:ad:5a:7e:c0:e3:25:f9:54:b8:70:ca:a7:9d:43:
         43:ca:e1:60:2a:3c:02:d0:ad:1a:28:b1:3e:c6:c4:5f:21:c0:
         57:00:60:57:28:c7:9f:03:3f:7a:8c:76:91:ba:d3:57:5a:0f:
         30:3e:dc:d6:c7:3c:b0:3e:da:f7:e9:18:a9:5b:eb:68:f3:3b:
         2c:fb:90:a4:bf:fc:d3:87:9b:b0:e9:78:78:ab:c2:53:4d:2a:
         4b:0e:16:67:eb:f1:dc:0d:ba:1d:83:05:45:47:cb:ac:04:de:
         26:5e:c7:19:47:81:ec:03:24:2b:2c:a8:12:ed:2f:ec:bb:8b:
         aa:72:b9:22:fc:7f:dd:87:2e:88:1c:62:53:13:55:f7:2d:df:
         92:a3:94:22:27:e5:a8:5b:ec:56:80:c2:51:05:1a:1f:df:42:
         e7:4e:b6:74:2e:10:36:bc:a2:f2:5e:02:3d:94:14:41:11:21:
         4e:c6:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----