Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
File:                     2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft (raw, json)
Hash identifier:          ndFOTwM9QH8XbDuN+WL1PYEj7+pR/HIh56i/sOmD8+g=
Subject key identifier:   BE:EC:D6:83:B6:1D:93:A7:23:67:55:6F:BB:C3:7E:0A:7F:8E:36:EA
Authority key identifier: 2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97
Certificate issuer:       /CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
Certificate serial:       02BD24FA0F3B9F3FCE868B9375538BF1098C53C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
Manifest number:          E3
Signing time:             Thu 10 Apr 2025 21:19:14 +0000
Manifest this update:     Thu 10 Apr 2025 21:14:14 +0000
Manifest next update:     Fri 11 Apr 2025 23:24:14 +0000
Files and hashes:         1: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: qLEvjwfoEyhWj9DVGwn8qdOomSXN46J1BxYBuAy12X4=)
                          2: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl (hash: K68Hs8TtSAviYyUoN/04uGCIh078WV8gA/GUPjalAIM=)
                          3: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: lmNISwXtJNWjiKcmw5GjTGP7+E6qXcw7mfSumJB2dso=)
                          4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: Nh5XT638Xw3szIHzPWQzM5n7CuKdiXjt2Xw+j5HN5b4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:24:fa:0f:3b:9f:3f:ce:86:8b:93:75:53:8b:f1:09:8c:53:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
        Validity
            Not Before: Apr 10 21:14:14 2025 GMT
            Not After : Apr 11 23:24:14 2025 GMT
        Subject: CN=BEECD683B61D93A72367556FBBC37E0A7F8E36EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:23:10:25:58:55:4a:66:3e:5a:bb:30:c3:e0:
                    c8:68:54:f8:e5:8d:51:d4:80:85:d4:8b:1c:a3:af:
                    2c:1f:15:ef:f7:f4:01:8f:de:95:48:c9:7d:83:0c:
                    88:6d:ff:d4:48:ad:ef:3c:12:f5:f2:c4:02:ab:fd:
                    78:18:52:88:d7:6c:cd:1c:01:88:4e:7f:56:18:5e:
                    6a:05:c5:6a:ab:af:c9:ce:66:d2:e2:7a:f7:78:c4:
                    da:c6:9c:ef:a8:01:83:6c:38:39:d4:74:39:17:97:
                    0c:f2:5f:d7:2a:ba:4b:9d:af:b0:2c:da:28:d4:6d:
                    27:b2:17:3a:81:93:cf:77:9f:0c:e8:87:ee:ba:1f:
                    6e:dc:07:cb:79:17:a8:67:67:d9:c5:02:3f:53:11:
                    57:3a:d2:10:a0:8d:7b:03:22:66:cc:3f:0f:49:79:
                    2e:33:f9:5e:ae:9f:b0:58:4f:00:96:01:a0:8f:f8:
                    06:ae:29:de:33:c1:e8:a3:72:16:0c:72:4e:bf:64:
                    8f:6b:a3:0d:99:dd:32:9a:8d:93:e9:81:29:ab:2f:
                    e0:df:cd:f9:fd:aa:90:08:9c:05:e3:21:37:17:81:
                    cd:40:bf:c7:99:b1:3b:dd:6c:f7:3f:71:1b:55:f1:
                    10:10:42:96:9a:6f:48:2b:59:77:8f:0f:be:bd:96:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EC:D6:83:B6:1D:93:A7:23:67:55:6F:BB:C3:7E:0A:7F:8E:36:EA
            X509v3 Authority Key Identifier:
                keyid:2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:96:37:ab:04:d6:9e:96:02:de:6e:e7:d1:71:f7:ab:cd:
         d6:69:b7:5d:c2:ac:c7:32:60:7d:d5:bb:fb:69:98:16:34:0b:
         b4:fd:0c:b1:14:f8:74:dc:95:9b:b7:52:88:5c:b2:b6:66:5c:
         80:60:00:5a:91:ad:2e:0f:08:3a:67:a9:df:fd:a0:4a:cc:b3:
         9c:5a:1b:73:83:8c:56:3d:6e:e8:df:f5:05:14:70:a1:57:4c:
         91:ba:00:27:95:8e:09:bf:f2:cf:24:36:db:f6:f5:80:16:da:
         4c:2e:17:8f:9f:ad:c8:5f:15:f5:9f:bd:f0:b7:36:c6:92:08:
         dd:a8:59:91:58:be:6f:61:11:66:89:43:fd:a8:97:6d:07:43:
         3f:1f:4a:5f:1a:05:aa:12:b6:80:f4:f0:1b:25:e6:79:fc:67:
         ec:48:82:c1:8a:a1:20:8e:7a:b8:86:9a:19:d4:15:46:1c:97:
         96:bd:0a:69:d4:cd:49:d3:ad:44:2c:2c:02:22:3f:aa:c1:c5:
         06:b8:a2:45:df:3f:46:22:f8:91:b6:e9:90:e9:aa:71:7d:af:
         67:04:ee:87:cb:8b:f5:c2:58:91:0d:6b:f5:1a:71:d5:7a:6b:
         4c:e4:c2:4a:98:38:e6:d3:73:47:d5:67:d2:bb:e1:9e:9e:59:
         72:6f:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----