Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File:                     2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier:          7BJk1ayC2BmCa6Vdmk5K1DnW+/E4h8IC97EZ03FMjlI=
Subject key identifier:   2D:29:44:18:44:68:05:31:18:44:27:FF:CA:1C:A1:4A:51:35:3F:BA
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       4AB84CBC3B6D4873A46373660E5A412B571D9FD8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number:          01A2
Signing time:             Fri 31 Jan 2025 00:42:53 +0000
Manifest this update:     Fri 31 Jan 2025 00:37:53 +0000
Manifest next update:     Sat 01 Feb 2025 04:26:53 +0000
Files and hashes:         1: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: /YAYApCJNF3JzXK7UNmTzgA8PYTEBZq4QRiOdDAbz5A=)
                          2: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: RbnEpPKdKdDlSoHqwAmvbALNZ4yay+wPesXMM0tRcic=)
                          3: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=)
                          4: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=)
                          5: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b8:4c:bc:3b:6d:48:73:a4:63:73:66:0e:5a:41:2b:57:1d:9f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Jan 31 00:37:53 2025 GMT
            Not After : Feb  1 04:26:53 2025 GMT
        Subject: CN=2D29441844680531184427FFCA1CA14A51353FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:1c:b2:d4:d8:a6:9d:b8:8b:a1:30:5b:c7:
                    a8:0a:34:ba:ae:25:ca:9c:37:a7:fb:4d:bb:7e:b8:
                    ac:90:c2:f2:a8:e1:92:90:3e:1e:5b:bb:47:2c:d5:
                    28:dd:2f:a6:47:30:68:08:50:ea:9e:22:f1:19:f0:
                    41:e3:46:42:79:ad:29:fe:19:85:15:20:0f:46:79:
                    7d:38:79:5d:5e:e2:63:2e:87:c6:7d:2d:e6:d5:36:
                    6f:75:40:71:fe:d7:15:0e:72:7a:f5:e8:28:41:3a:
                    d9:d0:a0:22:5f:ef:02:42:ca:5b:bb:cf:76:10:10:
                    dd:3a:87:be:fa:a6:ad:e2:1d:b8:94:9b:4d:92:c7:
                    e3:a5:6e:45:b2:b8:d6:96:f0:72:c2:0a:31:18:b8:
                    fc:4f:d6:67:80:8f:3b:5f:a7:2e:73:fb:f2:af:79:
                    4a:2f:5a:a8:cc:1f:b3:17:48:d7:18:19:18:0b:99:
                    39:85:90:3d:fb:bd:a1:77:04:7f:38:ac:3c:4d:cf:
                    eb:2e:2a:fa:20:b8:8f:1f:28:dd:71:bf:17:d8:5c:
                    f5:fa:16:bd:b0:f6:c6:02:f2:f3:e6:c7:78:4c:12:
                    54:31:58:3a:bd:0b:14:78:53:b6:72:cc:a1:15:48:
                    1c:09:a7:53:0d:6b:08:e5:ba:79:26:67:37:eb:91:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:29:44:18:44:68:05:31:18:44:27:FF:CA:1C:A1:4A:51:35:3F:BA
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:d7:b0:b2:93:f0:2b:cc:af:bb:c5:c7:81:39:3f:06:22:53:
         f3:d1:5d:13:d0:39:55:45:6e:63:aa:a8:20:a3:23:96:a4:d3:
         1f:24:55:3e:0a:c5:61:2f:96:7f:63:87:25:dd:c2:7b:ba:0d:
         9b:c5:e1:ac:99:86:49:bf:9f:dd:e1:ef:eb:eb:43:4b:c3:0d:
         9a:7b:93:ba:2b:6a:4b:f5:2c:11:bc:33:01:4a:c7:95:7d:63:
         fd:85:50:27:3b:64:73:53:6b:99:4c:2f:7e:46:9b:1a:58:d1:
         0e:bd:06:17:c6:71:b6:4a:a4:c1:60:a4:e2:dc:2e:7f:a9:b8:
         35:a1:28:43:ba:a5:13:55:8b:47:36:bb:27:a5:c7:ec:9e:21:
         ad:50:91:d0:53:9f:73:1b:34:7e:0c:55:49:70:74:63:2c:90:
         1f:fe:1d:0a:8f:e4:7d:93:26:fc:c3:6b:3f:35:8c:da:77:fb:
         ca:b9:84:d7:6b:83:5a:d2:71:d7:c4:4b:cc:18:a9:3a:97:4f:
         4f:61:58:0f:b7:b2:2d:5f:6c:0f:aa:0b:99:69:79:89:a8:71:
         12:d6:b0:f0:06:8d:2f:45:0d:6e:2b:76:61:ce:df:56:89:d9:
         06:66:13:0b:cb:f7:12:17:6f:a9:15:08:3f:58:94:ad:27:f9:
         b2:aa:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:09:23 2025 by rpki-client