Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
File:                     B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json)
Hash identifier:          Wvj6rlodnoJG+GZ/JlXEHxLrpkEMDqZ5vQW4snkmPGg=
Subject key identifier:   79:54:8A:D6:C6:21:C8:A7:BF:8C:EC:A2:A6:0D:EE:0E:C7:90:B6:3C
Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
Certificate issuer:       /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
Certificate serial:       3CBE22B1D9E4249BBC7FAB5BAEE6934BD306D07F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
Manifest number:          039A
Signing time:             Sun 13 Apr 2025 01:26:44 +0000
Manifest this update:     Sun 13 Apr 2025 01:21:44 +0000
Manifest next update:     Mon 14 Apr 2025 03:24:44 +0000
Files and hashes:         1: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: V/lPfNd86BCZsZt92stqhCJaBguB1AmGZvElKwvRy/w=)
                          2: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=)
                          3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:be:22:b1:d9:e4:24:9b:bc:7f:ab:5b:ae:e6:93:4b:d3:06:d0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
        Validity
            Not Before: Apr 13 01:21:44 2025 GMT
            Not After : Apr 14 03:24:44 2025 GMT
        Subject: CN=79548AD6C621C8A7BF8CECA2A60DEE0EC790B63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:f7:b9:5b:f0:e2:8f:eb:9f:67:cc:da:35:
                    6d:77:a2:f8:11:9c:c0:3f:50:24:56:cd:0f:17:96:
                    5f:cd:b6:58:25:59:97:ff:b4:cf:70:f1:d0:25:2d:
                    d0:fa:be:d0:1d:54:57:d4:7b:6b:9e:8a:41:46:3a:
                    83:9e:be:19:b0:7f:20:90:26:c2:1a:c4:3a:0e:ff:
                    bd:b9:a4:9f:de:12:85:36:c2:80:5a:36:41:88:77:
                    6c:c3:4d:98:f1:4a:93:6d:6c:38:db:53:f1:2f:ac:
                    4b:17:dd:b2:38:15:15:a4:d5:30:35:ab:13:cd:81:
                    f1:0d:29:aa:24:e7:ff:6f:5b:b6:63:4c:6e:30:82:
                    2c:e0:2f:7f:79:c3:44:47:58:12:ab:76:7f:8f:98:
                    b1:c8:2b:7b:06:f3:21:86:fc:da:b3:43:1d:b4:9e:
                    30:7b:60:68:d0:f6:5f:90:54:f1:cc:f4:39:ce:58:
                    06:cb:1b:73:32:15:56:18:63:50:24:55:15:32:fe:
                    3a:81:93:81:cc:bd:18:be:13:89:2a:db:90:47:b1:
                    e6:08:c7:70:8d:c9:28:62:c8:48:78:be:2d:c8:42:
                    3f:6d:94:b7:71:7d:38:70:4e:e1:97:18:12:7b:95:
                    ae:f1:e0:22:f0:fd:1c:96:8b:f0:b2:59:02:a1:e6:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:54:8A:D6:C6:21:C8:A7:BF:8C:EC:A2:A6:0D:EE:0E:C7:90:B6:3C
            X509v3 Authority Key Identifier:
                keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:af:38:c7:7d:27:47:1e:ed:f9:0b:88:99:b6:ae:0e:94:1a:
         e1:ca:a0:d9:3f:17:bc:16:d7:f4:ed:34:e2:a8:09:ce:0b:90:
         71:b8:72:a1:4c:64:3f:a9:33:a6:21:09:6c:2e:ad:5d:5b:e4:
         92:74:76:cd:09:bc:dd:77:15:e1:1e:44:af:b4:61:ef:2b:24:
         91:75:36:7c:13:bb:fa:bb:45:a1:97:b1:3f:5e:7b:da:df:d1:
         81:37:f4:16:fe:74:ce:fe:02:ea:b9:51:4d:ac:e1:1c:95:9d:
         a8:1d:2e:6b:ca:d0:65:d2:a5:99:12:97:a1:b3:cf:e5:0f:d8:
         78:f7:57:7a:a3:3a:0a:af:00:d2:17:65:93:a0:81:87:6d:b8:
         e9:e3:c8:ae:c6:6f:5b:ef:07:4a:c1:c4:30:79:61:b9:a6:50:
         0c:19:5b:2e:35:31:81:43:e0:44:eb:25:dc:eb:1f:58:86:00:
         88:71:3a:a7:b8:19:29:f4:7c:07:5e:f8:b9:18:24:dd:d6:97:
         4e:26:55:9e:56:fb:c6:3c:46:6d:76:8d:6e:06:95:f3:d4:71:
         f9:7d:24:80:d0:c2:3c:ce:59:de:71:b2:fa:28:91:f3:5e:52:
         72:55:d0:84:ac:d6:84:d1:f0:3a:4d:78:6e:75:cf:d3:d5:cf:
         4d:b4:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----