Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.mft
File:                     68D097AFD88AEF3F10282F3218FC13F01A0DE486.mft (raw, json)
Hash identifier:          Ti6Q3p7C8wfEwvf51/rh7RY5mUnyS9//S/RtTWA3wwY=
Subject key identifier:   1B:3F:0A:0E:5E:57:AF:4B:5E:64:89:3F:00:7D:21:D6:CA:3F:83:53
Authority key identifier: 68:D0:97:AF:D8:8A:EF:3F:10:28:2F:32:18:FC:13:F0:1A:0D:E4:86
Certificate issuer:       /CN=68d097afd88aef3f10282f3218fc13f01a0de486
Certificate serial:       4C1A72B882C0B59CEBB707B79DF275E45F43ED44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNCXr9iK7z8QKC8yGPwT8BoN5IY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.mft
Manifest number:          0200
Signing time:             Fri 31 Jan 2025 14:40:57 +0000
Manifest this update:     Fri 31 Jan 2025 14:35:57 +0000
Manifest next update:     Sat 01 Feb 2025 16:13:57 +0000
Files and hashes:         1: 68D097AFD88AEF3F10282F3218FC13F01A0DE486.crl (hash: o4jwcM7D0sUriQtNiBNRg/lj1RhRRQu2XoQjQY/WYMQ=)
                          2: 3138352e3230362e3235332e302f32342d3234203d3e203630373831.roa (hash: AMOOReO25pB/UyWle0jkXv+B6m1MTNWZ4+1w+73+7MY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1a:72:b8:82:c0:b5:9c:eb:b7:07:b7:9d:f2:75:e4:5f:43:ed:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d097afd88aef3f10282f3218fc13f01a0de486
        Validity
            Not Before: Jan 31 14:35:57 2025 GMT
            Not After : Feb  1 16:13:57 2025 GMT
        Subject: CN=1B3F0A0E5E57AF4B5E64893F007D21D6CA3F8353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:68:a2:67:34:30:7a:c1:be:c8:bb:19:67:
                    e8:be:d7:4a:21:f8:5f:75:82:12:b2:17:4e:0f:fe:
                    13:aa:8b:24:e9:fb:15:fb:5d:21:d0:0a:48:c5:bb:
                    b7:79:91:b2:c6:59:f1:c5:0a:92:37:5c:e9:0a:bf:
                    b9:89:27:6d:47:d6:54:99:9e:e4:2d:84:df:e6:7f:
                    9d:24:6f:63:69:26:cb:cf:74:62:b5:65:e8:33:78:
                    fa:7e:89:68:88:64:e3:eb:f1:f8:69:36:e1:d3:5a:
                    c0:6f:21:66:63:6f:4a:23:29:3a:28:82:00:fc:1f:
                    48:34:ba:38:c5:65:6b:a1:96:f3:a4:f2:bd:b8:c3:
                    23:75:df:b0:96:f4:f6:7c:1b:2c:d0:aa:fc:ed:34:
                    a0:aa:83:ef:df:f5:ab:9a:d2:a2:3a:77:86:8a:8a:
                    eb:b1:fc:ed:6c:ed:d3:2e:e0:c8:02:35:40:b2:af:
                    6a:24:4b:ca:7a:94:ab:38:5d:61:c4:ec:59:ff:6e:
                    56:db:cd:2c:ec:9c:98:21:16:0f:24:b9:37:8c:7e:
                    5a:2e:15:e3:c9:0d:7b:ea:0e:e7:47:d1:93:e2:06:
                    79:df:c2:3b:27:bb:83:ee:40:f1:d0:e8:05:1a:e1:
                    ef:7b:a5:57:f4:44:9e:42:b5:cf:4a:b0:d7:61:6b:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:0A:0E:5E:57:AF:4B:5E:64:89:3F:00:7D:21:D6:CA:3F:83:53
            X509v3 Authority Key Identifier:
                keyid:68:D0:97:AF:D8:8A:EF:3F:10:28:2F:32:18:FC:13:F0:1A:0D:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNCXr9iK7z8QKC8yGPwT8BoN5IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:48:2b:4d:90:95:a3:d9:ec:ac:06:5f:95:c6:1a:84:be:cb:
         03:39:45:e3:4d:c3:07:3c:7b:2a:dc:ee:76:5e:88:ba:58:93:
         42:88:a6:79:f7:e5:10:78:1d:1f:49:90:71:d2:0b:4c:04:19:
         03:98:fe:23:06:d8:be:da:89:a4:14:df:17:6f:81:7f:8a:fc:
         5d:ba:94:0d:98:24:42:c3:9e:da:83:97:c5:c2:4d:89:5c:18:
         54:52:b9:9e:57:a4:b2:38:01:37:8a:1e:83:30:e4:2d:b2:ad:
         e0:aa:80:a3:43:e2:fc:20:18:21:6d:11:02:e4:59:05:b7:1f:
         98:a5:86:b4:d9:7e:83:57:b6:a1:90:dc:ac:64:7d:f4:4f:f0:
         2c:55:9b:27:b6:9d:61:d8:eb:36:8c:16:c2:6f:8f:0d:1f:40:
         7a:ba:b9:3f:b5:14:a1:d9:9f:72:95:7b:00:e7:7c:2c:b4:77:
         54:b9:9c:0e:d5:14:9d:d1:c0:b7:22:a7:8e:8c:a5:57:c2:8a:
         f9:cd:f2:bb:d7:90:87:d5:68:84:cc:a8:58:27:cb:58:7e:14:
         80:1e:c4:94:ba:f8:a4:32:67:35:cd:38:d9:1d:89:14:bf:54:
         bf:8c:fa:f7:7c:47:97:b1:68:93:90:ac:93:ac:7d:df:42:a2:
         6f:38:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----