Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
File:                     F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json)
Hash identifier:          BtPddj4RgI8B9SnVFLswtdKpHHYSQMf8e0i1k7rYjus=
Subject key identifier:   52:7B:AC:69:6B:22:E2:0A:A9:03:8B:07:71:6F:D0:7D:56:73:07:9E
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Certificate issuer:       /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial:       2E14377039DE69CFBA42E77E55CC7BA42283A49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
Manifest number:          0488
Signing time:             Sun 13 Apr 2025 00:47:40 +0000
Manifest this update:     Sun 13 Apr 2025 00:42:40 +0000
Manifest next update:     Mon 14 Apr 2025 03:47:40 +0000
Files and hashes:         1: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=)
                          2: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=)
                          3: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: muToXyQQPQk1kATIKIk2PX93pnZZn2qQ05PiLXKydlA=)
                          4: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: j/tvDF/xrBJ6Z/GVFcZpOag/ZBQuFXiJ56kFmYlSx34=)
                          5: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=)
                          6: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=)
                          7: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: NLU++5xZjzD437PtmNgvfxHCqYMIFnb00RqdIBmj2Iw=)
                          8: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=)
                          9: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=)
                          10: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: zWNLpbTnjqiVffcczG/ghrxSrCwY93Mfi/pfHSiwT+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:14:37:70:39:de:69:cf:ba:42:e7:7e:55:cc:7b:a4:22:83:a4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
        Validity
            Not Before: Apr 13 00:42:40 2025 GMT
            Not After : Apr 14 03:47:40 2025 GMT
        Subject: CN=527BAC696B22E20AA9038B07716FD07D5673079E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:40:41:03:cf:97:c0:e7:16:99:70:02:ea:
                    37:82:01:c9:0d:1b:2f:3c:f8:34:29:ad:65:b6:c6:
                    84:ad:e2:00:f1:f8:c7:85:42:e6:29:4d:55:d7:b7:
                    0d:3e:b0:62:85:5a:1d:19:10:b8:a6:68:e2:f2:9d:
                    5d:9c:53:2e:2f:f1:9e:3d:dc:7a:7c:f2:cf:54:c4:
                    1c:1c:7c:ea:c0:43:47:42:34:c1:2d:56:c6:85:99:
                    45:29:64:e0:db:fe:23:23:a5:b0:64:a3:55:b1:f2:
                    a5:83:b9:e6:9c:c9:60:c7:d2:5b:ab:b1:26:b5:cf:
                    07:2f:49:4c:e2:0f:22:45:17:09:bd:ac:25:82:b4:
                    c9:a9:3a:6e:38:50:f5:64:8a:a8:0c:3d:fc:84:b4:
                    32:4c:76:9f:e9:f6:b8:00:49:6c:89:c1:58:c0:8f:
                    bf:f9:cc:27:d9:c6:aa:90:11:17:7b:83:a5:de:d0:
                    38:bc:8e:8d:19:64:08:b3:a0:f8:6e:9a:8c:82:8f:
                    ab:72:a6:7a:e2:4d:c7:3a:bc:27:98:21:d2:74:f7:
                    43:ff:70:69:43:c3:de:9e:a4:76:67:1e:f7:bd:55:
                    78:44:a2:57:32:94:be:d9:bf:78:2a:82:0a:a9:bd:
                    87:e1:fc:d8:83:71:9c:49:9e:ce:eb:d8:9e:0a:23:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7B:AC:69:6B:22:E2:0A:A9:03:8B:07:71:6F:D0:7D:56:73:07:9E
            X509v3 Authority Key Identifier:
                keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f1:ec:25:10:a3:81:fb:f1:83:2a:bb:c8:85:9c:74:f5:e4:
         0a:48:83:99:eb:65:9f:ff:d1:a4:bf:cf:a2:1c:54:ff:18:81:
         cf:4d:4f:ae:20:f0:3a:01:e9:70:23:07:a2:b1:ee:d9:79:44:
         53:95:5a:38:9d:9b:3a:58:34:c5:99:e3:37:53:0e:2a:9c:b8:
         02:b0:56:52:b0:6c:2c:fb:f5:b3:03:52:34:d9:7b:76:71:ca:
         93:55:23:65:33:8f:b3:04:b7:bd:66:3c:63:b2:3a:09:ac:91:
         92:04:45:01:72:cd:83:26:01:68:3a:92:e3:33:b3:ed:07:93:
         ec:78:08:67:6a:e8:4a:d2:f1:b6:f3:7e:c1:27:64:9d:51:38:
         fd:a9:ba:08:8b:e2:40:a6:9b:64:a6:88:c4:0b:3c:84:dc:90:
         dc:5a:07:17:bf:f1:a0:86:f5:79:96:1c:76:15:ed:71:e1:ed:
         ef:0f:99:7b:0c:62:62:5a:f0:a0:b6:27:2f:11:28:96:e0:4a:
         a8:05:e4:4d:22:ee:37:f5:ec:8e:6e:a0:2d:62:b0:9f:6d:15:
         82:b9:52:d4:22:34:27:0a:86:b4:b2:13:11:84:b6:f8:b5:54:
         ce:3e:ad:a7:03:59:30:71:f8:ca:39:01:b2:5b:1e:db:4f:38:
         fa:71:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----