Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File:                     922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier:          CwnC5zZCP+USa6AEGBbSnNNWkxbQYs8KoL0nJGsEHi8=
Subject key identifier:   CE:0D:A8:8B:6D:77:67:FC:CB:57:A9:52:92:CC:FE:26:FE:34:23:15
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer:       /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial:       27BBE4AF8F2B20EFD26736D42DB99326694786C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number:          022F
Signing time:             Sun 13 Apr 2025 09:07:45 +0000
Manifest this update:     Sun 13 Apr 2025 09:02:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:45:45 +0000
Files and hashes:         1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: 2c8K/KGHGBa//LwMKNYUNuhM0m7ZcXisTGl3UGm9yXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bb:e4:af:8f:2b:20:ef:d2:67:36:d4:2d:b9:93:26:69:47:86:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
        Validity
            Not Before: Apr 13 09:02:45 2025 GMT
            Not After : Apr 14 12:45:45 2025 GMT
        Subject: CN=CE0DA88B6D7767FCCB57A95292CCFE26FE342315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:2d:e4:f3:cd:ba:90:a8:5a:e0:1a:30:8b:
                    d1:97:be:c5:af:b0:2e:65:df:99:cf:2a:08:51:32:
                    24:4c:ea:e3:88:4c:3d:bf:1a:43:c5:a4:27:b0:11:
                    72:83:94:9f:57:71:80:27:9b:13:22:7a:56:1e:1c:
                    8f:0e:4d:fd:e2:6d:77:c6:24:79:f6:15:c4:36:94:
                    b6:39:a7:9f:3f:b6:4a:c6:e7:d5:8f:1c:87:6d:d9:
                    d1:a2:e3:6f:06:a2:1c:6e:a1:49:56:9f:fe:b9:15:
                    e4:c4:3f:88:aa:3b:5c:de:18:82:de:e0:50:4b:77:
                    a3:10:cb:9b:85:c7:07:b4:02:27:43:99:0c:c3:17:
                    71:05:96:bc:78:13:5b:23:6b:23:c0:7e:73:d2:09:
                    84:11:f1:35:47:b0:8a:01:1b:74:09:8f:d3:92:06:
                    b2:14:fa:a3:9c:1a:be:58:c7:92:00:55:74:6b:ba:
                    f4:f3:a5:1e:b6:29:7e:9b:7b:35:c4:b5:fe:7b:0e:
                    eb:29:b5:71:af:88:8f:80:3c:1e:9a:e9:d3:fd:ad:
                    46:04:fd:f9:2f:cb:d7:54:f7:6f:11:93:33:f9:a8:
                    bb:84:c4:1a:99:95:87:f2:0d:39:36:b3:8a:55:9f:
                    ef:bb:bd:d0:be:4f:a5:a9:6e:7f:b2:a7:14:69:67:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0D:A8:8B:6D:77:67:FC:CB:57:A9:52:92:CC:FE:26:FE:34:23:15
            X509v3 Authority Key Identifier:
                keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:7c:b6:74:14:d3:07:eb:c8:99:60:9f:2b:22:b5:3d:72:
         b9:48:be:22:d5:a7:e5:3e:26:ca:97:49:c6:99:52:3e:58:68:
         85:f4:c5:79:c4:ad:ff:cc:30:a8:5e:25:d9:88:a0:ee:46:c1:
         93:be:c6:24:d3:ca:16:30:40:08:cc:a4:66:3e:fd:5f:c7:26:
         9c:17:c7:64:a8:b8:99:ca:a4:e3:fd:26:d0:03:88:cd:db:a2:
         04:58:4b:fc:5d:e8:bc:27:cd:16:ea:50:41:9f:ce:c6:90:80:
         af:94:6d:ef:69:77:4e:aa:bf:74:cd:23:d7:78:a2:d1:74:ae:
         88:7f:20:37:49:19:77:79:54:76:4e:57:af:bc:60:80:53:2b:
         ae:90:ea:3b:47:23:28:d4:79:8e:da:c2:41:2b:93:ae:fa:f3:
         4e:b5:76:4f:92:ae:5a:6b:35:21:fe:a6:d3:ab:de:61:9c:fc:
         2a:9a:c2:c1:d2:b5:bb:07:2f:f0:78:3c:0e:f1:f5:16:18:c1:
         02:d0:e4:6d:5a:fa:bd:ec:9c:a5:84:22:3b:a6:8f:d8:71:cd:
         1a:43:d3:48:07:c3:2b:8b:26:0f:0f:ba:28:9e:9f:b3:ac:f0:
         6f:b7:6d:01:09:d0:02:e7:81:09:27:03:0a:bb:0d:ad:9c:ea:
         d8:95:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----