Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File:                     D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier:          jGgxXlz5RwO8kTVCFn4YlsmlSkSFeqDluz3tK8t/Nfo=
Subject key identifier:   36:70:91:86:95:6D:FE:26:49:BC:B9:7D:B3:61:29:04:3B:BD:A5:A2
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer:       /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial:       3FA6AACCBB899F192B3154A5EE68F1F02E3CDE16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number:          02E4
Signing time:             Sun 13 Apr 2025 05:51:02 +0000
Manifest this update:     Sun 13 Apr 2025 05:46:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:45:02 +0000
Files and hashes:         1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: tHiNPLeborN3MzxDKSTEAgj3ZJMcJjV9OqmGVy4ABhE=)
                          2: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: TSZMS89pNTdqOGoGXWXQvZlKC1htikXY95q1iGIZChA=)
                          3: AS202881.asa (hash: n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=)
                          4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3wDhadYEfX0Hhy3fPxID0nH+bbX55tStnGOk9S2bMKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a6:aa:cc:bb:89:9f:19:2b:31:54:a5:ee:68:f1:f0:2e:3c:de:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
        Validity
            Not Before: Apr 13 05:46:02 2025 GMT
            Not After : Apr 14 07:45:02 2025 GMT
        Subject: CN=36709186956DFE2649BCB97DB36129043BBDA5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:58:53:15:4d:61:35:6c:0c:cc:a5:dc:04:
                    49:12:d8:25:2e:90:15:f1:a9:43:22:a4:a1:05:0c:
                    0c:ed:14:40:fc:f6:0b:95:7a:d8:71:67:64:8e:bf:
                    e9:ba:bb:7c:40:e0:0d:32:6f:97:39:b1:47:fc:4f:
                    3d:6b:50:1f:ad:3b:e0:ca:32:18:6a:71:53:59:ec:
                    b4:b9:1d:fd:f3:44:d8:a9:e2:10:8e:44:98:c2:28:
                    40:b5:ab:b9:2a:b8:d5:6a:c7:85:ca:6a:f6:e2:e6:
                    ae:8f:05:a2:35:cf:02:a8:e3:e0:9d:ec:b9:46:d9:
                    ae:06:0b:fd:72:34:e4:bf:19:7d:0a:9d:7c:22:1e:
                    bf:93:11:e1:f4:60:b2:99:a0:cf:c9:3b:d1:a6:74:
                    2b:8c:79:b9:c6:4f:57:f2:ec:94:2d:58:16:ba:5b:
                    12:de:60:1a:7c:e7:20:2c:21:3b:54:fd:2f:ef:2a:
                    41:d5:b2:cb:a2:91:58:8f:47:6f:fc:d1:7d:3c:72:
                    72:5e:eb:07:33:43:bf:37:2f:1e:de:c7:56:56:86:
                    3d:49:66:fd:9a:c4:7e:77:eb:4f:8c:f3:5b:bd:0f:
                    ef:b1:93:26:6f:6b:a9:ad:46:e8:62:f6:ac:fa:2b:
                    23:ce:32:6e:c1:4f:cc:0f:65:6e:dd:e7:67:39:f5:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:91:86:95:6D:FE:26:49:BC:B9:7D:B3:61:29:04:3B:BD:A5:A2
            X509v3 Authority Key Identifier:
                keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:69:69:4f:f3:ce:e2:c9:b5:86:c0:32:6e:6f:5f:75:d8:
         13:9d:2e:63:de:09:d3:78:9a:3e:71:d1:dc:68:73:a6:d6:32:
         0c:4e:52:5e:d4:d0:12:51:1d:a4:fa:d0:9e:5f:ed:7c:78:20:
         57:a5:51:12:db:ae:98:8a:ad:58:21:68:0e:bc:44:c9:6e:02:
         12:17:8f:fb:e9:c9:04:2c:56:a1:89:82:46:c4:f6:7c:b1:a8:
         11:98:54:45:df:44:ab:3b:f5:f3:1e:44:88:0d:eb:00:ab:ae:
         ae:17:f8:f2:d2:40:49:3b:a6:97:c9:61:58:2f:ad:87:d8:80:
         1f:3f:8d:52:95:3b:ac:ea:38:64:c6:4e:36:be:d9:2f:d3:40:
         41:50:63:8f:6e:53:23:ef:f4:8a:ff:f9:d7:e4:25:05:78:e7:
         69:f2:04:60:de:c1:61:6e:72:9e:61:bc:57:5e:0d:6a:d1:33:
         31:c7:46:4e:e4:d8:da:3b:03:47:4d:da:78:ac:7b:92:0d:63:
         f8:33:7e:b4:c5:c3:f9:63:16:41:63:80:8d:71:0c:c0:04:1a:
         ce:90:4e:35:39:12:85:57:59:6c:30:91:f0:1b:0b:42:96:cf:
         4a:55:9b:07:6e:b7:ea:cb:4f:c3:f8:f4:eb:d8:eb:9c:80:09:
         9a:04:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----