Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File:                     D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier:          TCEEfV01x7r5Uad44rEZUvJX8mrOiv5v/GkEhTi9j9I=
Subject key identifier:   35:01:68:73:AC:22:C7:F3:D5:22:21:63:D3:C5:14:98:08:22:47:44
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer:       /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial:       07D757C4895B69303360DB69565A0AE3DC55BFD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number:          0399
Signing time:             Sun 13 Apr 2025 09:36:44 +0000
Manifest this update:     Sun 13 Apr 2025 09:31:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:20:44 +0000
Files and hashes:         1: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: PeKrYlxO9aJzSjjq2GCsehA7RgIXos16I20n9tzXipg=)
                          2: AS51019.asa (hash: RqQYQxP2LlV4zO7/d8ske+S6p2B1SREg+ga188kx8/8=)
                          3: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: sAGzWODmOzNCZuvtKadz69jjI7Oh3UgRZge/OeWdTeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d7:57:c4:89:5b:69:30:33:60:db:69:56:5a:0a:e3:dc:55:bf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
        Validity
            Not Before: Apr 13 09:31:44 2025 GMT
            Not After : Apr 14 10:20:44 2025 GMT
        Subject: CN=35016873AC22C7F3D5222163D3C5149808224744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:d9:89:e3:8f:32:08:3e:7a:9f:a0:6b:fe:
                    62:d1:f8:82:18:5b:1b:de:df:f7:c0:33:a6:33:2e:
                    20:be:c8:3e:e8:b7:0e:c8:c0:ac:d2:13:27:ae:55:
                    0d:4a:fa:3f:74:f6:77:aa:09:f9:19:fa:66:dd:59:
                    4a:3c:df:03:52:73:72:d0:48:02:e6:8b:f8:56:3b:
                    89:13:ab:21:fa:fe:36:55:fb:0e:70:d4:52:42:18:
                    e4:a7:f9:44:0e:8c:08:35:34:d1:f5:05:bb:2f:be:
                    aa:cf:59:ca:50:31:80:aa:68:0b:5a:2f:2f:e6:b3:
                    83:10:a3:c1:39:a5:68:cf:9f:3b:d8:8a:5d:d1:0b:
                    66:5d:64:2f:b7:56:af:13:b1:2e:4e:20:42:e0:2d:
                    da:f1:fd:84:62:3c:3e:db:73:ed:d3:e2:ae:1b:7f:
                    d9:03:78:fc:f4:e6:cb:83:03:a6:8d:ee:05:9a:4c:
                    1f:48:f1:9f:b6:c4:88:09:0e:e4:dc:5f:1e:0f:a0:
                    9c:af:0d:a0:9b:ef:81:da:f7:7e:cc:bc:6f:e8:74:
                    80:21:72:de:0b:36:4a:a9:78:2f:14:f0:d4:dd:16:
                    6b:eb:7f:32:e4:26:06:29:69:26:9c:0a:ba:13:33:
                    61:2d:fd:d3:96:be:f9:20:97:57:56:7e:ea:9e:6c:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:01:68:73:AC:22:C7:F3:D5:22:21:63:D3:C5:14:98:08:22:47:44
            X509v3 Authority Key Identifier:
                keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:60:f7:4d:ec:8f:48:66:ab:c6:41:8e:3b:6a:25:2e:eb:
         a4:5d:4a:4c:a2:60:13:4b:c6:0c:97:dd:3a:68:29:70:de:34:
         ef:2c:e0:6a:92:b0:d5:ef:1d:85:02:b1:2b:ad:96:5f:56:1e:
         eb:ff:20:d8:29:25:4d:27:7b:5b:78:03:8a:76:fc:8c:a3:67:
         99:a4:ed:26:98:5e:61:25:72:02:a7:38:ac:f5:e8:f0:2d:e7:
         6b:59:7f:2e:dd:bc:37:34:a0:c8:b4:ad:3e:e2:7d:fc:ee:da:
         44:31:4a:f3:cd:06:c9:77:f0:fb:ef:41:a5:4c:dc:eb:33:b0:
         35:6b:df:13:45:89:3b:9d:07:d0:69:94:1c:00:4f:a5:01:8f:
         5f:81:69:d4:d1:6e:e6:bf:67:e0:d9:19:cb:83:5a:83:bc:38:
         39:6d:cc:cc:6b:56:11:29:eb:e4:c2:32:25:ea:36:cd:c8:b5:
         59:07:93:7f:13:b8:0e:4f:7e:2e:f5:5b:3e:dc:fd:4f:07:f5:
         a2:8b:44:2d:f8:a2:f5:18:7f:16:dc:59:87:22:26:7c:c0:69:
         9b:b3:51:a1:a0:12:b5:88:3c:ac:33:70:ce:6b:7c:ed:40:13:
         93:78:d4:86:c6:8c:b0:59:55:48:39:ed:b3:b0:7c:ea:57:93:
         4f:d5:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----