Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File:                     C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier:          zf9LZ68Uo5MQ21ztRw6bWzk6SX9Jaw13IIsUIxsSPa4=
Subject key identifier:   FE:E9:66:F0:96:1D:22:3E:7E:E3:60:E1:04:1E:F0:3B:AB:83:4A:4C
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer:       /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial:       6E24B205EA4005A53F1F15B6B93F97EAE1C4A035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number:          020A
Signing time:             Sun 13 Apr 2025 13:39:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:34:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:37:16 +0000
Files and hashes:         1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: +j+wP0cylNToV1AbU+7+u+4n1XnRZJsDhvE51MyjlPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:b2:05:ea:40:05:a5:3f:1f:15:b6:b9:3f:97:ea:e1:c4:a0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
        Validity
            Not Before: Apr 13 13:34:16 2025 GMT
            Not After : Apr 14 15:37:16 2025 GMT
        Subject: CN=FEE966F0961D223E7EE360E1041EF03BAB834A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:4d:e0:81:6d:49:67:3d:5b:0d:10:70:2b:
                    6c:d0:43:9b:d8:7a:68:c2:d5:42:17:8b:df:f3:65:
                    7e:2b:b3:78:92:80:60:10:07:10:54:55:59:66:f5:
                    d2:06:80:71:da:04:01:b3:f5:15:fe:24:40:c7:0f:
                    9b:90:a0:1e:83:fd:ff:f5:58:0f:ba:ad:c3:26:97:
                    e8:16:83:1e:19:0e:46:06:02:7b:18:36:c2:f5:da:
                    5c:23:b3:10:8e:88:08:36:94:de:d2:5c:82:69:a4:
                    1a:4d:23:32:91:6d:51:16:87:70:94:2f:ca:44:00:
                    ae:2c:62:65:e5:2e:2d:d0:2f:fb:fa:66:49:f5:03:
                    5a:64:f3:71:48:84:9c:cd:db:8b:4b:f6:20:2a:b4:
                    e9:75:05:bc:ea:28:28:47:79:85:42:f6:08:6a:60:
                    51:0e:93:5c:53:3f:de:64:9d:ff:6e:17:9f:02:ce:
                    46:25:de:a0:ea:28:67:d3:45:68:36:92:a1:47:b6:
                    48:14:2d:72:30:1b:d6:08:fe:97:fc:4a:43:89:e8:
                    26:75:f5:de:fa:cc:3f:13:e5:86:63:9b:6f:82:9a:
                    98:fd:0b:78:a3:dc:e6:a4:d0:53:82:67:d5:a3:53:
                    1b:f8:eb:c4:c7:20:61:98:d0:fc:80:39:d7:2e:1d:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E9:66:F0:96:1D:22:3E:7E:E3:60:E1:04:1E:F0:3B:AB:83:4A:4C
            X509v3 Authority Key Identifier:
                keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f0:29:00:4e:3a:c4:9f:a6:c9:13:19:60:51:7e:a5:66:02:
         ca:ea:0e:da:b5:a8:46:e0:62:0c:9c:48:65:15:f8:08:68:53:
         50:0d:87:fe:7b:3a:d1:dd:92:96:cb:07:05:66:23:41:44:3b:
         c3:45:ef:9f:eb:3f:12:a1:6d:44:36:3f:b4:ac:2e:58:0a:ef:
         44:84:d8:2d:46:ad:8a:24:30:40:7f:e3:55:c6:19:71:58:85:
         52:9d:be:ff:22:96:81:8c:51:19:f9:0d:01:d1:d6:ad:86:ba:
         da:1c:ae:0b:b6:32:9d:2f:76:29:81:af:f4:b9:f5:4d:ba:2e:
         0a:73:0f:19:19:fd:f8:e1:9e:aa:2e:56:76:dc:5b:04:36:5e:
         7a:d3:69:6b:45:3b:0d:ff:c7:a3:76:ae:58:f0:fb:87:99:50:
         b0:a2:5a:a8:79:3f:fa:9c:0a:8d:e9:d6:00:16:d0:23:c2:1d:
         e8:d6:e9:57:e1:89:8d:51:d7:7f:cc:07:03:44:40:0b:bd:cc:
         d5:39:35:fc:53:95:26:97:9e:f7:57:9d:70:ab:05:4b:58:5b:
         36:62:5d:39:7f:5f:d1:87:19:88:0b:b8:ed:2e:b9:d2:9b:90:
         42:d1:af:25:8c:43:b5:39:4d:85:f6:0f:ab:de:ae:f7:77:05:
         9d:b8:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----