Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File:                     66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier:          +IoBM9pC4v3YKNnqTwt8gu0WcsPKxPwv/oXi92QUH4U=
Subject key identifier:   BE:D2:70:6B:5A:83:44:EF:84:93:3C:9F:51:E7:EA:01:E7:F4:BB:4E
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer:       /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial:       5E5ED1708BD7BA610BA304D96BCD14EB03A088D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number:          01A5
Signing time:             Sun 13 Apr 2025 09:22:58 +0000
Manifest this update:     Sun 13 Apr 2025 09:17:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:33:58 +0000
Files and hashes:         1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: exZbcwtuF+H3WJYFR13OFaTVSBNbUYj3j9PFzoLGbww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5e:d1:70:8b:d7:ba:61:0b:a3:04:d9:6b:cd:14:eb:03:a0:88:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
        Validity
            Not Before: Apr 13 09:17:58 2025 GMT
            Not After : Apr 14 10:33:58 2025 GMT
        Subject: CN=BED2706B5A8344EF84933C9F51E7EA01E7F4BB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:4e:d0:20:3c:92:76:7a:a0:4b:13:8a:e7:
                    71:9c:c2:dd:ad:16:16:37:54:9d:1e:ba:b9:8d:0c:
                    49:2d:22:a4:54:c2:9a:56:55:a1:92:db:a5:b8:95:
                    8c:c5:f8:60:94:7f:66:d2:6c:bd:0d:f0:d1:fe:89:
                    76:c4:70:77:58:76:7d:f1:c2:3d:62:0e:9a:07:6f:
                    6c:47:86:d3:cb:dc:40:2c:83:57:f2:c2:a5:4b:af:
                    c8:1d:bf:75:8b:51:fe:6a:12:c8:50:3b:85:b1:74:
                    08:aa:48:ca:41:68:21:ea:9d:86:b2:fc:d0:ad:45:
                    ce:c4:96:48:c0:2b:ea:6b:c8:1e:7c:11:9b:16:38:
                    9d:1a:5b:55:d7:a6:14:fd:dd:d0:f8:ed:6a:f1:4c:
                    ba:1d:d6:0c:b4:1d:c9:2c:0e:04:3c:c8:3f:97:4e:
                    77:28:69:e9:c7:71:ef:06:88:18:aa:a9:e0:86:90:
                    88:11:8a:97:55:1f:d8:cb:9a:92:9f:1d:dc:9e:d4:
                    c0:2f:5c:bc:2e:91:42:3f:00:18:74:30:da:db:ab:
                    1e:de:df:ba:58:a7:19:1d:3e:34:87:2f:a7:ff:a5:
                    03:aa:b7:c8:6d:eb:1c:f8:8b:27:d5:e0:82:c5:e5:
                    48:bb:ed:e7:5b:09:06:cf:11:c1:f9:5f:e1:30:5d:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D2:70:6B:5A:83:44:EF:84:93:3C:9F:51:E7:EA:01:E7:F4:BB:4E
            X509v3 Authority Key Identifier:
                keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:3a:94:37:ba:26:31:65:46:60:e2:c1:ac:6b:05:27:65:
         0c:7f:2a:98:48:d6:05:c5:c5:a9:1c:68:11:8a:30:4e:b1:29:
         d5:40:67:6c:af:3f:55:bc:eb:a1:e0:eb:df:50:81:34:47:b6:
         ba:1d:15:44:0e:f3:05:ca:04:06:a5:55:a8:c3:66:ae:a1:9a:
         de:fd:d7:df:60:69:97:d8:48:3e:b8:ec:71:17:37:60:08:7c:
         7d:7d:f8:c0:41:13:07:58:cd:54:e4:3c:33:a4:71:a9:2b:5f:
         c9:2e:6a:5f:6d:35:2f:4f:62:77:a7:2a:1f:c3:ee:a0:99:61:
         f1:c9:8d:f1:86:ca:58:39:e8:2d:7b:da:f4:d7:ff:71:f0:f2:
         84:74:f8:03:a9:34:14:f7:1e:18:ca:13:93:65:21:89:11:c6:
         25:48:88:c0:90:5f:6c:43:7a:c3:05:46:4f:26:4a:ac:ab:d8:
         29:84:83:3a:89:40:f2:ee:5c:2b:47:52:01:91:19:91:94:35:
         27:77:cd:61:06:95:cf:45:ab:27:83:92:17:5f:d5:b9:09:68:
         0b:9c:c8:77:39:74:54:a1:86:b6:93:31:db:f0:ca:63:21:89:
         9f:17:30:71:65:69:96:34:37:0e:86:18:24:88:3d:ed:85:89:
         0a:80:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----