Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft
File:                     99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json)
Hash identifier:          R9KexRpO6FyefHZxYnqDeUVZUJbz7cPHO2MvDLd+DJ4=
Subject key identifier:   1E:EB:57:A1:26:8A:CA:A8:9A:AF:7B:B3:C8:2A:68:B2:56:D1:49:08
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       21D37DE3284813EAB4331AB0B2C5675FC84C1FFF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft
Manifest number:          0212
Signing time:             Wed 02 Jul 2025 13:23:36 +0000
Manifest this update:     Wed 02 Jul 2025 13:18:36 +0000
Manifest next update:     Thu 03 Jul 2025 14:43:36 +0000
Files and hashes:         1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: DjyQT4fQDwKcrgBODCqnbRCM0Gg4yQyHP/MXA89m+v4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d3:7d:e3:28:48:13:ea:b4:33:1a:b0:b2:c5:67:5f:c8:4c:1f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jul  2 13:18:36 2025 GMT
            Not After : Jul  3 14:43:36 2025 GMT
        Subject: CN=1EEB57A1268ACAA89AAF7BB3C82A68B256D14908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2c:da:ba:85:a5:7e:35:05:f6:b6:7e:70:3e:
                    7a:18:9e:18:fe:dd:9c:55:fc:97:41:16:21:69:d9:
                    52:f2:dc:87:bb:1f:36:a0:25:a5:62:e9:61:35:1e:
                    86:8e:76:80:c5:37:7d:ef:87:16:f4:f8:77:3e:f6:
                    11:55:0c:24:85:f2:7a:f8:a7:ed:f5:2b:c6:bb:4b:
                    b2:74:e8:00:f4:c3:51:dc:20:16:aa:ea:f9:4a:74:
                    a6:a3:5e:49:8e:86:3a:54:cd:f8:a0:9c:05:3c:c1:
                    bf:5a:aa:80:9f:12:03:ee:76:f0:78:34:c1:c0:19:
                    3a:5f:51:29:5c:38:1b:29:5d:f1:81:67:b5:70:c9:
                    ec:27:4c:55:bb:23:42:2c:82:18:8a:5b:5b:23:87:
                    a1:f4:3e:97:ad:be:0a:ca:4b:fc:84:7f:2f:50:c4:
                    dc:66:a2:f9:f0:8e:7c:0c:4d:b9:99:9c:d0:16:d6:
                    1a:61:d4:8a:8d:2e:24:2b:d2:20:ef:5b:6c:af:1b:
                    ce:e6:e0:ef:64:2d:fd:93:5d:ac:de:52:d4:5e:0e:
                    8c:af:0a:d9:7c:7c:92:0f:61:92:d7:4f:c9:2a:33:
                    13:07:61:a9:7e:3b:47:91:07:73:92:b7:88:04:14:
                    57:20:d1:03:39:20:05:8a:54:79:10:ef:3a:f0:59:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EB:57:A1:26:8A:CA:A8:9A:AF:7B:B3:C8:2A:68:B2:56:D1:49:08
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d1:4b:9d:9d:30:1d:af:0c:09:fc:2f:aa:5d:d9:d7:59:ab:
         81:22:df:44:5a:22:dd:17:72:2a:5f:f7:cc:64:fa:3c:b7:3c:
         47:05:54:53:d3:59:e7:ec:7f:ce:d4:9a:89:39:e5:10:b4:f8:
         0a:0d:e1:07:8b:15:3e:1f:b3:a9:8a:a9:e9:01:12:29:fb:e6:
         7a:97:a6:9e:c7:8b:50:1a:f5:49:64:40:64:aa:27:a1:65:0b:
         5d:b3:9b:8d:52:2e:50:49:89:68:0c:31:52:82:50:37:ef:74:
         50:94:fd:29:65:9d:8e:08:dc:da:b9:f7:59:77:f7:3a:6d:49:
         06:82:07:69:53:65:ab:0a:64:04:c4:e4:b3:75:96:0e:08:74:
         f2:93:0c:5b:29:35:70:17:8e:83:d3:60:cd:cc:06:e5:d5:d1:
         b9:76:f6:3b:af:5e:8c:ea:29:16:cb:34:06:45:d2:60:e0:4d:
         d9:1f:41:d1:8d:07:a8:92:58:7d:dd:2d:99:0d:8d:17:6c:2b:
         64:3d:52:54:d9:5b:d5:0d:9c:7f:43:f7:c5:b5:4d:bb:e8:f9:
         16:77:fb:62:30:d9:d2:46:91:a4:16:b0:bc:62:99:df:77:2a:
         3d:e9:70:9c:0f:b4:35:16:d2:b8:74:91:62:2e:07:f5:dd:7c:
         d6:4c:02:7f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUIdN94yhIE+q0MxqwssVnX8hMH/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1
N0VGOTFBNDAeFw0yNTA3MDIxMzE4MzZaFw0yNTA3MDMxNDQzMzZaMDMxMTAvBgNV
BAMTKDFFRUI1N0ExMjY4QUNBQTg5QUFGN0JCM0M4MkE2OEIyNTZEMTQ5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2LNq6haV+NQX2tn5wPnoYnhj+
3ZxV/JdBFiFp2VLy3Ie7HzagJaVi6WE1HoaOdoDFN33vhxb0+Hc+9hFVDCSF8nr4
p+31K8a7S7J06AD0w1HcIBaq6vlKdKajXkmOhjpUzfignAU8wb9aqoCfEgPudvB4
NMHAGTpfUSlcOBspXfGBZ7VwyewnTFW7I0IsghiKW1sjh6H0PpetvgrKS/yEfy9Q
xNxmovnwjnwMTbmZnNAW1hph1IqNLiQr0iDvW2yvG87m4O9kLf2TXazeUtReDoyv
Ctl8fJIPYZLXT8kqMxMHYal+O0eRB3OSt4gEFFcg0QM5IAWKVHkQ7zrwWdDxAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUHutXoSaKyqiar3uzyCposlbRSQgwHwYDVR0j
BBgwFoAUmdkiV0rc/os3QZMARFEvmlfvkaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzIvOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1N0VGOTFBNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0
NDUxMkY5QTU3RUY5MUE0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC8yLzk5RDkyMjU3
NEFEQ0ZFOEIzNzQxOTMwMDQ0NTEyRjlBNTdFRjkxQTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCa0Uud
nTAdrwwJ/C+qXdnXWauBIt9EWiLdF3IqX/fMZPo8tzxHBVRT01nn7H/O1JqJOeUQ
tPgKDeEHixU+H7OpiqnpARIp++Z6l6aex4tQGvVJZEBkqiehZQtds5uNUi5QSYlo
DDFSglA373RQlP0pZZ2OCNzaufdZd/c6bUkGggdpU2WrCmQExOSzdZYOCHTykwxb
KTVwF46D02DNzAbl1dG5dvY7r16M6ikWyzQGRdJg4E3ZH0HRjQeoklh93S2ZDY0X
bCtkPVJU2VvVDZx/Q/fFtU276PkWd/tiMNnSRpGkFrC8Ypnfdyo96XCcD7Q1FtK4
dJFiLgf13XzWTAJ/
-----END CERTIFICATE-----