Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
File:                     58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft (raw, json)
Hash identifier:          PGbbKrsXIONjwwBn8sg5dN5UihKvva1SbRv0/hf3Wls=
Subject key identifier:   B2:45:7B:9E:D7:FB:43:2C:C5:E4:13:D3:E1:3D:89:55:96:65:8B:96
Authority key identifier: 58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
Certificate issuer:       /CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
Certificate serial:       0AD5F00FEE2FB08008C7D064EEC9138367669D20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
Manifest number:          01B7
Signing time:             Fri 31 Jan 2025 03:56:30 +0000
Manifest this update:     Fri 31 Jan 2025 03:51:30 +0000
Manifest next update:     Sat 01 Feb 2025 06:20:30 +0000
Files and hashes:         1: 326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa (hash: CF0jWSCzZFUy1Fafe137rlHbiCFDPVBfanWNlQQSeOA=)
                          2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl (hash: dZH4qJWf/MTK3uG7DDnlzkTNeB33ckkq4PWaeM1voys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d5:f0:0f:ee:2f:b0:80:08:c7:d0:64:ee:c9:13:83:67:66:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
        Validity
            Not Before: Jan 31 03:51:30 2025 GMT
            Not After : Feb  1 06:20:30 2025 GMT
        Subject: CN=B2457B9ED7FB432CC5E413D3E13D895596658B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:15:a6:6c:b3:e0:0b:d9:59:7f:96:01:f2:
                    22:1f:0d:f5:3b:5c:88:00:c7:e5:67:1f:cc:a2:39:
                    bf:a9:21:58:85:b9:8f:da:a4:0b:ff:31:92:93:7b:
                    84:21:cf:2b:9c:46:e0:4c:f4:a4:0b:b7:83:5c:de:
                    c1:a6:91:ba:32:83:b4:7f:6a:c7:c2:7d:13:54:21:
                    02:e7:04:55:a1:74:97:c1:15:da:15:a3:61:5d:0a:
                    eb:b2:0d:d7:18:30:b5:23:e5:a9:81:18:41:65:c3:
                    78:af:32:ed:2b:36:eb:d1:d2:77:be:ba:0f:b6:36:
                    cb:26:d8:93:df:e1:76:75:ab:61:f0:cb:b5:f1:00:
                    7f:2f:4c:ad:0d:58:f9:1e:f9:eb:31:f6:32:2b:ea:
                    a4:6c:ec:4e:a0:d1:20:8f:fd:ed:6d:7b:19:fc:5a:
                    39:cd:a7:50:8e:05:ee:fc:db:c8:e7:cc:be:0c:f3:
                    11:b5:da:d1:74:80:45:c5:ce:b5:86:48:41:37:9b:
                    1f:1b:41:45:24:bc:fb:96:08:2e:05:cf:d8:e2:94:
                    cb:11:38:53:87:79:6b:84:be:02:b1:18:eb:76:69:
                    f7:50:23:c4:e8:61:99:7c:21:0f:25:2a:21:d2:8e:
                    78:0d:6e:d3:8a:1b:63:1b:df:ae:9d:d6:56:04:47:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:45:7B:9E:D7:FB:43:2C:C5:E4:13:D3:E1:3D:89:55:96:65:8B:96
            X509v3 Authority Key Identifier:
                keyid:58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:50:db:1d:6c:84:51:2d:a1:c3:63:ab:d5:7c:1f:96:0f:
         cf:9d:df:7a:1d:55:72:06:5a:1f:71:9e:59:70:37:6e:e5:01:
         b9:bf:3b:7f:c1:3d:2e:e2:46:e3:d6:63:0f:4b:19:3b:ef:e0:
         30:57:11:5e:2b:e1:63:88:6f:91:f3:7b:e9:72:d7:d6:11:5d:
         ab:4f:a7:cb:98:8d:5a:01:81:0b:5d:97:e8:3e:d8:c1:cf:fe:
         e1:96:16:0d:f1:e9:2f:26:b7:6e:b8:cf:f1:26:f6:22:bf:5d:
         c8:30:40:72:51:ed:81:30:74:ed:d7:8a:5a:c8:20:d7:e7:f4:
         8c:6a:d4:49:dc:27:d1:88:48:c9:06:a7:12:59:98:f6:03:1e:
         fc:15:c9:fe:f0:8d:b7:cc:08:a4:c5:61:c9:b4:7e:02:99:02:
         91:84:16:32:51:5e:9b:4d:f6:69:00:33:49:0a:2f:59:65:29:
         bd:9a:37:29:46:33:70:c6:66:fd:c0:23:d8:5e:fa:37:a9:33:
         38:f5:6b:0b:53:64:b1:91:26:d9:e4:5a:99:a1:6b:e3:88:ab:
         12:29:7b:84:52:ab:c3:70:af:f3:79:9f:3e:0f:51:91:aa:b8:
         ad:2c:2c:8a:0b:c3:25:99:b0:9a:54:9f:38:1c:da:ed:c9:8d:
         5b:c0:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----