Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
File:                     9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft (raw, json)
Hash identifier:          TL4l/wZ/LdQrcLWK8DYTeMJJXrfzBJ/ta9xIcGHhT7A=
Subject key identifier:   35:F3:19:75:2D:8F:20:89:08:A6:A2:55:A9:16:E3:7C:1D:EB:3D:DB
Authority key identifier: 98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8
Certificate issuer:       /CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
Certificate serial:       01E7B6F30F9027863DAC78DF896C8AED9448991A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
Manifest number:          18
Signing time:             Fri 31 Jan 2025 02:33:30 +0000
Manifest this update:     Fri 31 Jan 2025 02:28:30 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:30 +0000
Files and hashes:         1: 326130363a613030373a3a2f33322d3332203d3e20323135363439.roa (hash: r2Odt3IY0KcEXOjg3ZomCmpglxo3i3Egjj6VgNOH1vU=)
                          2: 9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.crl (hash: lMR2vwZVy7VjB2m8JUIKaEaPWXepS2nvqNjdWrDZfFM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e7:b6:f3:0f:90:27:86:3d:ac:78:df:89:6c:8a:ed:94:48:99:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
        Validity
            Not Before: Jan 31 02:28:30 2025 GMT
            Not After : Feb  1 04:00:30 2025 GMT
        Subject: CN=35F319752D8F208908A6A255A916E37C1DEB3DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0b:6d:c6:4f:28:29:2b:c0:0f:fc:6c:e5:ea:
                    54:8d:9f:68:21:fb:09:5e:d0:f9:b3:37:13:b2:d3:
                    8c:2c:7c:05:dc:13:a4:dc:a9:1c:ed:20:08:33:3c:
                    42:19:07:3a:73:46:be:09:c7:30:06:e8:67:70:82:
                    0e:b3:56:6e:c9:72:fc:e9:8e:38:86:81:c1:ca:ad:
                    75:24:fd:58:28:66:11:79:5e:50:d6:ec:6f:c0:2f:
                    fc:b0:36:c0:a6:04:bb:a5:72:12:74:39:02:8a:c6:
                    2e:3c:0c:90:6c:89:18:8e:99:90:15:73:e2:ae:eb:
                    c8:e1:6c:9a:b6:23:32:91:4c:41:57:39:58:1b:50:
                    6e:7c:5c:55:4e:cc:36:6b:2b:42:0b:20:26:ec:df:
                    13:47:c5:7f:c8:aa:24:aa:a8:68:24:46:00:af:82:
                    e5:03:32:e1:58:f8:81:b3:ea:48:99:67:69:00:35:
                    1b:ab:8c:a3:1d:6b:58:b5:a0:b8:78:7b:32:20:3b:
                    2d:2b:4a:56:32:e7:da:3e:99:74:0d:af:6a:4b:39:
                    a0:1a:c4:93:d3:e0:5b:d0:e1:01:16:c0:29:c3:8b:
                    d8:95:11:a2:37:5e:40:99:1f:f0:b6:b6:5a:1f:8b:
                    0e:3a:b5:a9:71:ce:e0:67:53:a2:72:c7:fc:99:69:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F3:19:75:2D:8F:20:89:08:A6:A2:55:A9:16:E3:7C:1D:EB:3D:DB
            X509v3 Authority Key Identifier:
                keyid:98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:d8:ce:ac:9d:69:af:ca:ca:16:1d:8d:63:21:bc:cc:0d:
         02:c6:03:fb:c6:6f:e5:20:7f:d0:40:65:71:9b:15:57:24:31:
         fb:f6:74:4c:68:63:e3:9c:ab:f5:90:74:3c:30:fe:3b:9b:a8:
         91:4c:62:82:0f:41:02:79:3f:9a:a6:d0:8a:39:e1:4f:c9:2c:
         92:83:b8:64:17:b6:c1:9d:e7:a4:3e:af:b2:f6:c1:b9:c4:b6:
         22:85:dc:cf:06:fd:30:f9:cc:28:9d:8b:a1:11:bd:0f:6f:7e:
         9c:a7:a8:62:4f:1b:48:b3:43:e4:13:8e:bd:3e:fc:eb:84:7b:
         43:61:9c:e1:91:4f:96:51:cc:5a:98:f9:72:91:bd:e5:62:8f:
         b3:07:3f:b5:b5:b8:63:52:7a:3d:f2:6b:e6:ad:52:fe:6b:fd:
         d2:ff:84:54:d6:b2:7b:d5:f0:3c:50:17:01:85:51:77:37:0a:
         38:db:cf:5c:b6:1a:d1:ee:a8:80:68:40:c4:6a:db:f2:5e:78:
         df:e9:a8:86:31:b1:0d:97:ae:bf:a7:82:72:74:77:12:0c:b0:
         ef:7a:bb:e0:6e:75:c6:17:ad:bd:bd:96:54:3d:38:a7:94:f5:
         b0:5c:1e:d5:13:29:8b:f0:4e:64:f0:e2:16:d7:07:38:d2:72:
         13:40:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----