Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft
File:                     81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft (raw, json)
Hash identifier:          utnCMapl+7Ktf+a4vwgornUfOYrk46pFjfasTqx0Cw0=
Subject key identifier:   E1:40:13:A1:B4:62:9F:44:E8:39:5E:2F:C6:2D:29:04:00:FD:7F:9D
Authority key identifier: 81:E2:18:87:4C:71:49:A0:F1:BC:56:CD:BE:C9:F9:4B:F5:9C:20:4F
Certificate issuer:       /CN=81E218874C7149A0F1BC56CDBEC9F94BF59C204F
Certificate serial:       2821D2568288CA7735B4A137D28E46522D428FF2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft
Manifest number:          0115
Signing time:             Mon 10 Mar 2025 13:39:08 +0000
Manifest this update:     Mon 10 Mar 2025 13:34:08 +0000
Manifest next update:     Tue 11 Mar 2025 16:59:08 +0000
Files and hashes:         1: 81E218874C7149A0F1BC56CDBEC9F94BF59C204F.crl (hash: GMu8HO/xKjrEaumpyo2vhdeXwMrrTAm6Nx/Cm2Y//1o=)
                          2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: Kcf1QRYEJfczCfOHcRWwddAWc71UJKDi3P9jLYnnmxY=)
                          3: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: U0rfiUq9YDTkYI4V420VpJi+Erpt4ClH+3f2ybSKabQ=)
                          4: 326131343a373538313a366664303a3a2f34342d3634203d3e20323135393334.roa (hash: W0J6pGpY7USt3uOGn+2U/+zzKb37zNSvY+tzxs3qCuc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:21:d2:56:82:88:ca:77:35:b4:a1:37:d2:8e:46:52:2d:42:8f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E218874C7149A0F1BC56CDBEC9F94BF59C204F
        Validity
            Not Before: Mar 10 13:34:08 2025 GMT
            Not After : Mar 11 16:59:08 2025 GMT
        Subject: CN=E14013A1B4629F44E8395E2FC62D290400FD7F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:f3:58:a3:8e:71:c1:31:e2:6c:30:91:32:
                    7b:19:96:50:2e:f9:0d:53:5b:91:49:44:14:ee:c7:
                    5b:d8:10:a2:7b:e6:f9:82:9f:a3:28:a4:9c:b6:c1:
                    a3:eb:d5:42:a0:ac:8d:06:1b:27:2c:eb:35:59:ce:
                    00:54:4e:9a:08:f2:48:97:de:90:5c:18:1b:03:1f:
                    a4:c4:50:9d:4b:6a:d1:73:36:5d:dc:1c:38:f9:84:
                    7d:84:c0:c2:b4:7e:89:28:5d:bc:53:91:45:dc:cb:
                    81:d0:0c:ce:15:8b:8d:2b:79:d1:ee:d3:ec:81:3f:
                    42:ab:54:79:cf:7e:9a:49:9f:2f:81:f8:16:d7:5a:
                    e9:b6:b9:bf:d6:3f:89:3e:1f:65:0a:29:ca:b0:19:
                    bd:78:83:b4:5c:be:d8:3f:13:8e:f1:bd:eb:18:1b:
                    3c:1b:7e:4d:63:67:b0:04:93:3b:9b:22:38:48:38:
                    80:cb:12:ed:21:ec:68:62:7b:ff:cd:50:09:4e:07:
                    b9:dd:40:7b:85:e4:dc:3c:54:93:96:b2:65:dc:53:
                    0c:ea:f7:c9:a9:f4:68:40:dc:e8:6f:64:2b:66:0c:
                    fa:82:fd:e8:4b:ec:da:3d:1d:96:44:83:a8:22:d7:
                    de:db:85:1d:56:c4:86:4b:b5:5f:50:c9:df:b0:75:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:40:13:A1:B4:62:9F:44:E8:39:5E:2F:C6:2D:29:04:00:FD:7F:9D
            X509v3 Authority Key Identifier:
                keyid:81:E2:18:87:4C:71:49:A0:F1:BC:56:CD:BE:C9:F9:4B:F5:9C:20:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:9a:2d:76:30:5a:26:b5:ae:a4:df:e9:27:8f:3c:aa:a5:
         2b:ce:97:f9:56:3e:e7:d1:f9:32:f3:eb:40:43:a0:2c:ec:de:
         27:d3:cf:1c:2f:e6:dc:5e:f7:e8:f0:2c:a6:ec:24:28:db:f8:
         42:dc:1c:2e:fb:fe:f7:78:fd:4c:17:29:5c:1a:9c:34:35:66:
         8a:0d:a2:3e:0a:1f:28:63:3b:83:78:b1:11:fb:29:c8:de:16:
         01:2a:92:54:87:07:12:f4:f5:96:fb:ee:4e:06:b1:e7:a8:11:
         e5:9a:4f:11:55:63:28:e8:06:1f:07:b0:44:a0:1d:97:6b:fb:
         ce:b4:43:bd:68:b3:1b:e3:0b:83:fc:b6:fe:a8:91:f3:89:b4:
         ab:bf:d0:a0:46:ef:a1:fe:f9:d4:9f:19:58:7a:ec:f4:e8:98:
         63:1c:85:da:70:93:ce:3b:92:71:4c:1f:59:de:b5:7f:db:78:
         88:9e:35:da:ba:d2:ca:45:b6:74:2d:61:d5:66:7c:1d:23:fe:
         86:46:dc:a9:11:a3:49:6d:93:46:b7:88:8f:07:90:00:e5:3f:
         88:cd:b0:ff:4f:89:ec:a3:77:46:5a:57:f6:95:28:29:96:2c:
         0b:b8:29:69:fd:35:36:19:cd:21:cd:3f:61:25:04:a4:68:fc:
         1c:98:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----