Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          cgaatVW1Jd8qWt+OKz3IXZmBFNscxReJrrMNMzQmzp0=
Subject key identifier:   E2:E1:FE:0C:9A:65:AE:33:A6:02:DE:CC:CA:2F:9E:06:0A:1A:71:EA
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       512D1733D1F1C10C438EC6CC3B3A45682D2A923C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          D0
Signing time:             Fri 31 Jan 2025 07:15:31 +0000
Manifest this update:     Fri 31 Jan 2025 07:10:31 +0000
Manifest next update:     Sat 01 Feb 2025 08:40:31 +0000
Files and hashes:         1: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=)
                          2: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: uIxJ3UFV88gdf1a1dt8XtjU4DtxXj1IO303U8FnQSeU=)
                          3: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2d:17:33:d1:f1:c1:0c:43:8e:c6:cc:3b:3a:45:68:2d:2a:92:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Jan 31 07:10:31 2025 GMT
            Not After : Feb  1 08:40:31 2025 GMT
        Subject: CN=E2E1FE0C9A65AE33A602DECCCA2F9E060A1A71EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:a6:59:31:60:98:d6:30:c0:23:bb:45:bb:
                    9b:52:a1:d9:f1:74:4d:ff:42:fd:58:b7:dd:9a:0b:
                    9e:89:bb:9f:76:39:c7:2b:91:7b:62:a1:39:8c:bc:
                    8d:ad:e2:e5:48:ed:3a:fd:d8:16:fa:7f:13:c9:ca:
                    87:3b:ac:46:cf:97:ac:b0:78:58:9a:11:9e:ed:db:
                    ef:a6:d4:6c:6b:6b:2f:42:fd:13:fc:88:a2:17:72:
                    ea:35:dc:c0:47:1a:a3:b1:7d:21:71:60:f3:38:a6:
                    e6:b0:86:03:c9:25:87:8a:01:18:c0:5f:9c:48:84:
                    fc:b5:8e:2d:42:b9:81:3a:24:05:fd:76:a6:d2:47:
                    e6:14:0a:2c:78:68:36:93:60:c5:7e:66:fa:74:05:
                    99:48:a5:92:19:5e:43:9f:88:9c:4b:63:09:96:4d:
                    06:5b:13:dd:74:8d:ff:31:2b:9d:df:f9:cc:19:1e:
                    a1:e1:91:17:2a:da:b8:30:de:b8:6c:ef:ea:03:cf:
                    c1:76:bc:cc:8d:31:1e:ee:98:d9:b1:f5:69:34:20:
                    8d:bc:f0:34:91:f1:30:95:92:f6:54:2f:b8:56:24:
                    d1:48:69:e6:fd:f5:b2:44:5e:c3:c3:6c:1c:cf:38:
                    86:57:6d:77:ec:97:bb:08:97:75:b9:d6:ee:c7:91:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E1:FE:0C:9A:65:AE:33:A6:02:DE:CC:CA:2F:9E:06:0A:1A:71:EA
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:37:c3:3d:a5:8d:0f:fe:b6:e7:9b:a6:7c:52:ef:5a:8e:37:
         d4:76:9d:af:b1:e6:5b:ab:dc:72:cb:59:9e:cb:89:f0:44:51:
         be:9e:69:2a:ad:80:13:c7:cf:ce:85:9c:47:fc:cd:dd:c8:7d:
         e5:9f:55:b9:d9:1b:87:49:01:0d:65:a8:ac:09:b0:90:34:1b:
         03:cc:04:39:61:39:b9:f6:3b:82:4a:df:83:1f:9e:bb:bb:5e:
         11:cf:dc:a0:51:60:aa:dd:40:54:a1:8c:a6:17:ee:2e:89:c4:
         de:7b:1d:ed:c5:84:f4:5c:f6:bb:12:9b:f9:07:79:47:35:6b:
         df:60:e3:a2:2e:16:29:8a:e7:cc:63:2e:f2:d8:23:d4:2f:ca:
         c8:12:f2:e9:af:a9:b9:7f:d9:b9:f4:d8:81:29:f6:9c:05:50:
         8b:92:64:77:d9:8c:95:80:f7:b8:62:83:e0:0e:9b:68:2c:95:
         db:cf:8b:70:cf:e9:2c:a7:3a:c3:1e:c0:37:ac:ec:27:87:5c:
         15:df:72:2d:94:dd:8a:3f:bc:dc:3a:8d:5c:ce:63:1a:bd:bd:
         04:c3:2d:09:14:9e:7a:91:e3:2c:16:cd:e0:0f:27:c4:88:97:
         08:26:5f:91:52:20:e7:06:49:61:0a:cd:9b:a0:0b:e5:67:e4:
         71:1e:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:10 2025 by rpki-client