Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
File:                     B6366F3DD14AC5399103961C30642E6779892C6C.mft (raw, json)
Hash identifier:          v4O4wWgdOX+IlFcDe97tqOazkbhA3ASgGCCp0Jrm9FI=
Subject key identifier:   7B:15:9C:DE:7E:D2:FB:5A:77:7A:4D:1B:9B:67:91:3B:33:86:14:8C
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       72740C46C1EC493DE03D531E1A57F7C007B934CA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
Manifest number:          E9
Signing time:             Fri 31 Jan 2025 15:41:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:36:37 +0000
Manifest next update:     Sat 01 Feb 2025 16:57:37 +0000
Files and hashes:         1: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: Bbj3dkfLCLvHSBOV2mo0X/dvVWVRNeC0CCNXaIH1NSU=)
                          2: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: dd3FrIdYxmcCZ+0yiqqDqpbbY31J+y6oBOm7qM8H0EU=)
                          3: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: NwxUM+Bu0lOfXqc/NSfMdy0y0UUCQqdUXqKBNCkgBgQ=)
                          4: B6366F3DD14AC5399103961C30642E6779892C6C.crl (hash: WXLQjSl4AKKXA/pQj9YJAiEQlQmGHiy16BXDACd5Rik=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:74:0c:46:c1:ec:49:3d:e0:3d:53:1e:1a:57:f7:c0:07:b9:34:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Jan 31 15:36:37 2025 GMT
            Not After : Feb  1 16:57:37 2025 GMT
        Subject: CN=7B159CDE7ED2FB5A777A4D1B9B67913B3386148C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:29:40:75:13:97:3a:98:43:f6:76:7d:66:
                    13:f7:a4:f0:84:6b:2b:a1:cf:55:93:2e:37:ae:93:
                    df:51:e8:0c:ed:88:25:cf:cd:90:81:e4:d6:f6:cc:
                    6e:a7:7a:3a:64:6b:03:93:4d:b7:31:b0:86:ba:1e:
                    28:fe:65:15:3d:a7:fd:03:a3:ea:6d:8a:1d:97:2c:
                    e3:fa:ca:7f:6d:89:c6:6a:a8:dd:f5:b1:5e:71:49:
                    7a:47:10:b7:eb:61:59:26:a9:e7:5e:8c:bb:a4:f3:
                    d4:a6:2a:37:10:f4:b1:7d:04:97:ec:16:c5:7a:70:
                    01:0f:4d:a7:7e:d2:74:4c:8d:5d:5b:6c:db:3a:2c:
                    63:f6:82:b5:39:1f:a5:65:1c:a0:d9:e4:51:9e:fc:
                    f5:6b:3d:48:52:e5:4d:8b:67:d1:2a:84:16:3e:78:
                    ef:85:32:ca:51:f0:2d:a6:56:ed:4b:12:ba:51:42:
                    1c:cd:9d:01:69:6e:01:aa:e1:f6:ad:7e:00:92:d6:
                    8e:17:85:93:cc:bd:69:a8:10:64:79:88:4b:52:17:
                    22:84:50:48:5c:92:46:a8:a5:2d:a3:fb:a2:ea:37:
                    de:35:62:5c:e8:c4:c1:f4:36:b1:ee:1c:75:c0:22:
                    21:1a:9b:03:89:46:26:51:8c:cd:17:41:0a:26:10:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:15:9C:DE:7E:D2:FB:5A:77:7A:4D:1B:9B:67:91:3B:33:86:14:8C
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:e0:ab:29:97:ba:86:77:7d:66:5c:a7:d0:f7:51:e7:a3:
         8e:56:0c:2f:b5:f5:29:32:35:2f:c9:31:c7:af:3d:95:a6:2e:
         3f:db:d9:7d:75:4e:b6:3a:14:04:68:ec:56:cf:25:ed:8f:07:
         4a:d7:f0:f0:dd:21:f0:78:16:35:77:af:24:85:bc:59:e5:02:
         b6:27:08:be:5d:01:82:57:66:d5:91:0b:90:8c:ee:00:e4:60:
         cb:d2:3e:49:cb:fa:b7:a5:03:ac:1b:07:04:d0:c9:76:2f:b5:
         9a:df:3b:e8:0f:ef:8a:68:75:2e:9b:8c:d8:9a:f9:b1:68:d7:
         39:e1:ad:fe:62:77:8c:5e:1b:e9:7d:5e:33:c5:21:6a:9d:4b:
         a8:60:a0:bc:ff:79:3a:b0:fa:77:95:37:b1:91:a9:6c:f0:fa:
         08:fd:43:54:3a:c4:00:04:10:13:76:4d:59:6e:a0:28:84:1f:
         e8:a4:f4:4f:9f:36:85:9b:5e:92:9c:4c:9e:42:a4:58:97:04:
         6b:c1:61:e7:30:59:2f:a4:72:45:bf:67:70:dd:43:03:77:8c:
         23:84:aa:86:65:b7:2e:9d:4b:5e:b6:29:0d:21:10:7a:4e:8a:
         a5:44:29:73:73:c9:5e:3e:4e:fa:ff:0e:fc:55:7f:a4:d3:bf:
         37:9d:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----