Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft
File:                     99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json)
Hash identifier:          hSq/Ge6igt1GMkutnSc13qHM14scJegn09YrvKbV4YQ=
Subject key identifier:   6E:2E:87:E3:BA:8D:B4:D6:F2:57:D1:31:C7:D6:9B:9F:D1:95:15:0F
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       30E4E815BE0BC382E28694B6B70B1E834478A6F8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft
Manifest number:          0144
Signing time:             Fri 31 Jan 2025 11:40:11 +0000
Manifest this update:     Fri 31 Jan 2025 11:35:11 +0000
Manifest next update:     Sat 01 Feb 2025 11:47:11 +0000
Files and hashes:         1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: N36sqvP7/MjrLZ1JnFY0E5EnoBn9vafL1Poz6vuDgDw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e4:e8:15:be:0b:c3:82:e2:86:94:b6:b7:0b:1e:83:44:78:a6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jan 31 11:35:11 2025 GMT
            Not After : Feb  1 11:47:11 2025 GMT
        Subject: CN=6E2E87E3BA8DB4D6F257D131C7D69B9FD195150F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:a8:bc:bc:28:12:89:63:b5:0f:9c:ea:40:
                    80:3b:54:d7:69:f3:cd:5e:3e:2a:bc:69:1b:0e:77:
                    99:07:8d:1b:ed:19:80:63:02:38:7a:01:09:f6:e3:
                    19:05:ce:49:a2:0c:ad:0d:df:48:3e:55:94:66:ce:
                    1e:20:28:c7:59:6a:d0:de:97:31:bc:b9:fd:39:ae:
                    7e:a8:e8:30:3c:1b:b8:cd:7b:18:75:e1:c5:93:c1:
                    c3:b5:8f:a1:d1:dd:a0:c0:01:58:7f:d7:86:e2:e9:
                    41:00:0b:88:b2:79:ab:ec:bb:fc:25:01:71:59:af:
                    18:66:23:36:11:d3:c2:70:5b:a9:5e:d5:20:6a:af:
                    7a:58:12:51:01:6c:38:3b:ca:ac:cf:0a:ed:59:b6:
                    cc:69:7a:52:0c:80:d8:47:ce:71:97:cb:7d:f3:f1:
                    99:35:0d:27:c5:88:84:71:fd:39:39:45:5d:3e:a1:
                    cb:fa:55:29:28:64:00:8c:27:7c:4d:95:c8:e4:10:
                    f4:45:f5:6d:f8:51:9f:8d:5b:af:76:65:41:2b:07:
                    cf:d3:27:b1:9a:ae:f4:e1:98:19:14:47:87:fd:53:
                    24:b9:90:33:e5:e7:32:8b:d1:03:17:cf:b5:f0:20:
                    fb:7b:bc:9f:b9:f3:ee:45:d1:02:62:35:e1:c7:40:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2E:87:E3:BA:8D:B4:D6:F2:57:D1:31:C7:D6:9B:9F:D1:95:15:0F
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:a8:35:b2:0f:27:fb:c0:00:12:48:2b:7f:21:67:ff:d2:
         10:f0:da:4b:bb:4c:2d:36:a8:c4:b7:aa:ed:de:8f:5f:b0:fa:
         0d:57:63:c2:e6:71:6c:8e:5d:ab:e9:bc:f4:8c:33:ee:63:9c:
         e2:97:fd:92:d2:d3:4b:49:05:a2:05:96:d1:18:c6:af:d6:ef:
         4d:6e:62:83:9c:56:f2:29:6d:fd:fc:7f:06:1b:b1:7b:75:66:
         56:88:ec:e8:85:45:84:55:b6:09:54:c7:2d:22:ad:e0:65:d7:
         36:25:d1:09:ae:0d:09:8c:6b:a8:8b:e2:3a:1f:66:9c:68:da:
         93:0a:2f:96:e1:e0:18:5a:bf:d7:a1:eb:27:3e:4d:c6:19:25:
         32:2f:f0:60:3c:c8:52:f2:cd:83:d1:0b:8d:9a:82:93:1b:5a:
         a7:e3:6c:87:25:2c:d6:fc:c5:68:33:61:84:d0:53:f5:ea:f8:
         c3:ca:0d:51:46:b6:de:96:af:c2:1b:90:11:05:7b:76:eb:52:
         b7:15:36:78:e0:b7:d7:47:62:f6:66:bc:65:f9:f6:66:18:ec:
         ec:1a:25:87:f1:8b:b4:ef:99:19:71:e5:d1:33:b7:42:65:1f:
         ec:e3:ae:33:1a:da:46:ef:ad:b3:e2:70:22:49:9e:9a:26:22:
         97:ad:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----