Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
File:                     C3A70AD7F32685733597C663E02CE28A3306F923.mft (raw, json)
Hash identifier:          mHBjM7tPNDIpdktAcaugr70rO8VkszFxmQL3/KYBOqo=
Subject key identifier:   72:98:1E:EE:4A:D4:69:FD:99:F1:E0:D1:D7:2E:E6:98:FB:E9:3A:ED
Authority key identifier: C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
Certificate issuer:       /CN=c3a70ad7f32685733597c663e02ce28a3306f923
Certificate serial:       1096A9E120AF7CA91EA25B4D31BAF97CBA72C040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
Manifest number:          4C
Signing time:             Sun 13 Apr 2025 04:22:31 +0000
Manifest this update:     Sun 13 Apr 2025 04:17:31 +0000
Manifest next update:     Mon 14 Apr 2025 05:49:31 +0000
Files and hashes:         1: C3A70AD7F32685733597C663E02CE28A3306F923.crl (hash: e+x5Itgx/nIKp6fXt2Y2REWn7hikNb4k2tWslVbw0Jk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:96:a9:e1:20:af:7c:a9:1e:a2:5b:4d:31:ba:f9:7c:ba:72:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a70ad7f32685733597c663e02ce28a3306f923
        Validity
            Not Before: Apr 13 04:17:31 2025 GMT
            Not After : Apr 14 05:49:31 2025 GMT
        Subject: CN=72981EEE4AD469FD99F1E0D1D72EE698FBE93AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:e0:2f:ce:cb:d1:66:dd:ca:74:23:6a:3a:
                    15:33:75:72:a2:18:24:cf:85:3b:18:7d:71:58:12:
                    c3:71:67:ca:fa:bf:9a:9a:ac:51:06:3f:51:14:5d:
                    f4:0f:41:f2:d3:6a:22:33:9c:b7:86:82:0f:bd:70:
                    65:a2:ff:30:1b:61:71:39:59:3f:29:74:57:be:ff:
                    a4:50:6c:e5:15:ba:8e:83:93:e2:4e:c0:63:0a:d3:
                    7e:21:00:ed:89:93:f3:b2:be:30:62:79:2f:6f:26:
                    e7:69:8f:94:71:9d:1a:a7:86:f7:4f:83:cf:a5:a5:
                    d5:a0:bc:c0:47:c8:45:18:ec:82:8e:1d:f3:da:7c:
                    22:7b:50:2c:55:98:5b:f1:39:02:33:69:84:d4:53:
                    81:47:b8:85:89:33:7b:f3:6b:4a:ee:cd:80:81:63:
                    0f:59:db:6b:2e:d7:c0:00:aa:cf:7f:bd:c3:20:56:
                    82:91:f2:2e:39:7a:1e:a0:28:6b:cc:0e:a5:b8:f6:
                    d8:17:61:ff:57:5d:43:ec:ad:59:47:43:24:4a:88:
                    bc:8c:17:8b:94:4e:ca:30:f7:c4:aa:50:03:20:9a:
                    de:ef:57:b6:49:d9:ce:14:48:fc:c6:b6:e2:66:9d:
                    03:ae:40:1c:26:d0:78:e7:d7:85:56:f4:85:5e:ae:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:98:1E:EE:4A:D4:69:FD:99:F1:E0:D1:D7:2E:E6:98:FB:E9:3A:ED
            X509v3 Authority Key Identifier:
                keyid:C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:00:c9:65:94:c9:bd:df:19:1f:81:4c:a2:ac:30:f9:dc:77:
         57:ba:d2:65:44:db:cf:b7:4d:54:a6:3c:c0:a7:f0:ae:6d:35:
         fc:4f:eb:80:6c:bd:b0:52:7d:65:db:21:4d:6e:4c:d2:f0:eb:
         a9:d8:e4:3b:cb:4a:78:69:99:8c:ab:d6:2c:6f:ec:7a:81:78:
         9f:4f:42:4b:c4:c1:d4:6e:64:82:e9:30:fd:bc:b6:e0:a6:d6:
         1e:20:f7:89:bd:3e:a4:06:f2:77:0e:2a:4e:bb:05:51:29:ce:
         20:55:1f:22:eb:4a:bd:4d:47:96:b4:70:82:02:0f:bb:2d:e0:
         95:57:de:4e:75:11:71:bd:f0:49:a4:48:f9:74:16:9b:2c:e3:
         47:25:92:d7:8d:56:09:86:40:10:52:30:4b:ba:80:9d:e3:cf:
         56:dd:76:f8:14:d2:c2:c8:37:ca:45:f8:70:31:41:cb:fe:86:
         df:52:8f:25:45:2d:cb:c8:0f:f2:9e:5e:bb:8f:37:26:4c:c3:
         10:2f:ba:b2:35:c7:63:f5:15:19:be:99:73:54:e4:97:cd:08:
         b6:8a:f1:e7:72:ac:9b:b9:b6:55:ee:89:87:88:3e:09:58:11:
         1e:c9:76:db:f6:da:8e:51:12:5b:16:15:34:7f:ce:d5:63:54:
         6a:7b:3c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----