Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
File:                     64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json)
Hash identifier:          khJTVJt1r4+0sceMtXCZhGykKHgiTgIlSII2M3J/Guc=
Subject key identifier:   C7:97:1A:14:B7:41:27:4D:A0:A8:29:CB:71:01:BD:28:65:53:16:E8
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Certificate issuer:       /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial:       79AD3833402352E1373666BB4AEF48E084589703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
Manifest number:          01B7
Signing time:             Fri 31 Jan 2025 14:30:57 +0000
Manifest this update:     Fri 31 Jan 2025 14:25:57 +0000
Manifest next update:     Sat 01 Feb 2025 14:38:57 +0000
Files and hashes:         1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: zuVNG769AmQTL2GS9uXer+mQk0NkW0hkc0JEDeRlLDo=)
                          2: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: 7wQrqMox9QAmR2vQp8q5VdavN4YrXCFJ3Bes/IozaAU=)
                          3: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: ZujLRBhcAaylT2jct3Y544NAE6KlaySAKXKPTdekmfU=)
                          4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Q0MksaznWSNZegMdCUOG/gHJD1ijN/io2ffJkKquBlg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ad:38:33:40:23:52:e1:37:36:66:bb:4a:ef:48:e0:84:58:97:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
        Validity
            Not Before: Jan 31 14:25:57 2025 GMT
            Not After : Feb  1 14:38:57 2025 GMT
        Subject: CN=C7971A14B741274DA0A829CB7101BD28655316E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:05:77:20:ce:47:1a:06:df:89:24:75:3b:
                    43:d8:ef:e9:64:7f:a2:ae:6e:90:62:5f:b0:d0:ff:
                    e9:00:d6:24:c5:1e:11:23:34:27:48:44:24:35:fc:
                    04:11:9a:81:88:c7:6b:ef:6d:13:f4:6d:8e:77:04:
                    2c:ee:24:cd:94:0c:d6:d8:9a:fa:6d:29:2a:07:2c:
                    09:9b:3c:22:73:0e:18:ec:72:ea:51:ba:a4:5b:b3:
                    ca:d7:16:81:d2:ed:69:d9:23:91:fe:29:a6:ac:c4:
                    9a:59:e7:38:4f:14:61:3e:71:7f:81:0a:d6:22:ce:
                    fb:4f:2d:d7:a8:fa:ef:60:b1:73:42:a2:35:87:43:
                    a8:a8:be:36:9e:a1:6b:41:20:9c:d9:36:1e:cd:8d:
                    00:b4:22:e7:6b:93:87:ae:b5:54:30:b4:c1:27:25:
                    a8:f3:a7:06:7b:99:b0:d3:f8:70:72:b7:f2:30:69:
                    96:f2:17:d7:07:db:12:c3:b7:b8:ff:97:d0:f0:3c:
                    8d:1e:80:0d:60:ad:59:69:0a:96:76:df:07:c3:50:
                    0a:43:6b:08:e1:95:e5:b4:c8:ea:53:49:55:84:14:
                    45:ed:1a:b4:c6:45:86:1e:ee:2e:87:20:49:83:da:
                    73:6d:f5:7f:bf:11:e9:28:e4:32:1b:4d:14:ee:55:
                    a7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:1A:14:B7:41:27:4D:A0:A8:29:CB:71:01:BD:28:65:53:16:E8
            X509v3 Authority Key Identifier:
                keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:48:18:c1:16:38:48:b7:80:20:c8:f7:78:d3:9a:46:4e:22:
         f6:8f:bf:a8:3a:10:7a:e5:da:37:02:90:5d:65:22:b1:e1:6b:
         cb:4c:5c:62:06:34:dc:68:ab:ca:39:02:c0:0b:d4:b8:7c:9e:
         b8:d6:d9:84:a4:bb:67:05:d4:3f:6f:ec:32:86:f5:5a:04:04:
         60:77:5c:f2:38:f9:9b:9e:c4:03:95:8e:65:1a:18:37:05:8c:
         3d:5a:db:90:2c:fd:41:ad:ee:9e:ba:73:55:f4:85:b7:e8:09:
         e6:cf:2f:2b:51:2a:1e:52:69:a5:af:3c:4b:0f:a0:b0:72:c1:
         a3:6f:ed:c0:b7:87:2a:ba:b3:d7:09:d5:dd:9a:02:99:75:97:
         a8:89:38:b5:2d:ce:75:7c:c5:ef:a3:af:14:85:73:1b:72:f4:
         10:6d:fc:03:a3:c7:1b:23:19:d7:30:cd:a2:10:af:f6:89:8b:
         d8:bd:2b:57:e8:be:4e:9f:f5:ce:18:79:35:67:ba:0a:c2:22:
         cc:43:7f:f2:23:9e:10:6c:a5:dc:e1:97:1d:f6:7c:de:da:30:
         d9:df:74:34:21:90:94:cc:17:36:0a:ca:e6:e2:4e:c9:82:82:
         a0:34:d7:d6:22:a2:52:5b:ed:52:f0:70:6a:c6:09:7b:d3:26:
         99:1f:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:38 2025 by rpki-client