Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft
File:                     DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft (raw, json)
Hash identifier:          R87OvFWgH2QvqNYe1brnvDnUUK/O52ot5f278+I972M=
Subject key identifier:   67:E4:68:9D:A8:53:76:90:6E:D2:B9:4B:47:A1:20:43:DA:9C:35:1A
Authority key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E
Certificate issuer:       /CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
Certificate serial:       79D861E56C6DAEF9AE0E612E3385CDDA1F78FE8A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft
Manifest number:          2A
Signing time:             Sun 13 Apr 2025 11:40:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:35:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:47:02 +0000
Files and hashes:         1: 326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (hash: 7YCpwymksWPwg5ziGzmWS9FgFbgvTAl7aySk1Jpj/x4=)
                          2: DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl (hash: ZzQ7mz0jeFvpCZQR9pnqN8RiUfyKGtfgfZHufS6kU50=)
                          3: 326130613a363034343a626330313a3a2f34382d3634203d3e20313939373633.roa (hash: 3n+4yNulEMaksO5/ZQTRg4MIPlOtdwvsGLaK42kyDMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d8:61:e5:6c:6d:ae:f9:ae:0e:61:2e:33:85:cd:da:1f:78:fe:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
        Validity
            Not Before: Apr 13 11:35:02 2025 GMT
            Not After : Apr 14 11:47:02 2025 GMT
        Subject: CN=67E4689DA85376906ED2B94B47A12043DA9C351A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:ea:81:2b:70:ef:1f:4f:85:ab:f0:9d:96:
                    be:ba:e8:8f:82:58:3a:06:75:ff:6c:28:10:fd:8c:
                    36:90:8b:e0:ec:cd:4b:ac:09:a0:0c:14:f4:c8:20:
                    69:52:3a:19:12:fd:9c:d2:35:f5:53:e7:ba:36:40:
                    98:dc:7a:2c:5b:7a:d5:42:38:c9:e4:aa:73:f4:49:
                    55:1c:ea:88:e1:5c:0f:86:af:e4:c2:dc:d4:3c:be:
                    1b:26:cc:e1:c5:b9:77:3a:46:bf:bb:e8:8f:ef:7a:
                    fe:f4:5c:a9:0c:9b:36:fa:dc:20:14:d4:0d:ae:80:
                    d4:1c:bc:a9:e9:ca:cf:80:56:3f:ad:70:40:2a:97:
                    ed:e2:e7:4f:89:4f:3b:e8:d8:04:99:c2:61:9e:7c:
                    0a:fa:d2:5d:a3:55:0c:8c:9d:c0:a8:46:d3:22:b9:
                    75:6e:67:ef:10:57:0b:98:0e:fc:a5:70:94:b2:6e:
                    4d:2d:c5:58:44:36:e2:38:bc:29:2c:e4:ea:c0:c6:
                    ef:fb:15:33:ec:bd:74:58:a0:d8:84:c4:07:3c:f9:
                    3e:a4:19:e6:67:e7:d8:85:50:eb:a9:83:49:8f:fc:
                    25:a8:3c:a5:ec:71:b2:99:df:45:c6:33:b4:af:c6:
                    b9:a1:ef:96:34:64:b7:bc:65:c3:2a:c2:4d:d2:fc:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E4:68:9D:A8:53:76:90:6E:D2:B9:4B:47:A1:20:43:DA:9C:35:1A
            X509v3 Authority Key Identifier:
                keyid:DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bc:e7:8a:e6:33:3c:5d:c6:4a:73:ad:19:93:4d:1d:46:f9:
         a3:27:f5:58:ae:e7:dc:dc:89:e2:34:ee:26:32:f1:31:a0:f4:
         a6:14:d7:ca:c6:1b:14:c4:a7:b8:c3:e8:84:4f:28:2b:17:52:
         04:2f:26:53:ba:65:76:0b:cb:7e:e1:f4:b1:96:91:01:14:c0:
         6a:20:73:2f:1a:2f:16:71:5e:3f:0c:96:16:23:af:5e:69:a9:
         de:f8:dc:6a:cc:9a:58:1c:dd:ce:18:04:36:66:09:a8:b2:ca:
         18:14:2b:b7:c2:16:02:23:eb:ed:f6:a2:be:ed:4b:0a:03:b2:
         f7:f5:65:63:e1:d8:97:6c:f1:1e:e7:7c:6c:76:0f:2a:25:02:
         87:23:52:b7:c0:2a:19:ee:f8:74:46:bc:d5:19:a7:12:df:d1:
         b1:bf:b9:2e:b4:f5:ba:f4:57:0c:2c:94:1d:6f:08:e2:d2:7d:
         33:4a:3e:15:73:4a:2d:a2:28:f1:88:c3:0f:06:b8:f5:70:56:
         4f:a1:06:47:46:17:63:d6:08:60:3c:de:49:b6:77:31:cf:a4:
         0c:90:5f:99:ca:68:35:16:65:2e:39:0a:60:3a:9a:ab:8d:6d:
         c2:84:d2:84:cd:a7:c3:1d:99:35:84:84:d9:cb:4b:41:ff:7f:
         bc:47:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----