Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
File:                     069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json)
Hash identifier:          9OJbiS4u4ws/Wt7YkRrGW0uWUVADUtP27fbUmRlEKuE=
Subject key identifier:   2E:8A:24:5C:A3:0F:FF:5A:AC:85:B0:61:86:B6:70:7F:5F:D5:0D:CE
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Certificate issuer:       /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial:       55D42515D786A638BC2889736B77F2CF9FA47597
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
Manifest number:          02CE
Signing time:             Fri 28 Mar 2025 17:50:41 +0000
Manifest this update:     Fri 28 Mar 2025 17:45:41 +0000
Manifest next update:     Sat 29 Mar 2025 21:04:41 +0000
Files and hashes:         1: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=)
                          2: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=)
                          3: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: jX+SP7a/sPE0lIJAycH9nSOdsl8AcRTQhE4BUgBxkT0=)
                          4: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d4:25:15:d7:86:a6:38:bc:28:89:73:6b:77:f2:cf:9f:a4:75:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
        Validity
            Not Before: Mar 28 17:45:41 2025 GMT
            Not After : Mar 29 21:04:41 2025 GMT
        Subject: CN=2E8A245CA30FFF5AAC85B06186B6707F5FD50DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:53:b8:0d:ea:09:a5:ac:e4:a2:1f:dc:99:
                    89:44:01:96:ee:e7:e3:1f:8d:77:16:d2:53:dd:90:
                    4e:a5:63:f0:d1:b7:b7:f2:bb:f9:38:c0:82:8f:8f:
                    bd:16:05:a8:76:b6:7b:ff:0f:82:db:9d:e9:c1:f3:
                    1b:f4:16:69:c9:5c:5e:b3:a1:ef:75:4d:ac:c4:9d:
                    b1:0f:ba:39:01:b0:99:69:ec:03:e7:96:66:75:88:
                    c0:ef:8e:64:78:23:f9:27:d8:9f:f2:8b:42:8f:d7:
                    fa:90:ac:76:8d:3a:36:1e:2c:30:e2:ec:32:f6:fe:
                    69:80:b6:ef:b5:49:28:86:ae:a6:4e:5f:81:f6:5c:
                    f3:c2:8a:c2:fa:9a:7f:8b:1c:5c:83:b1:a2:87:3e:
                    aa:d6:dd:44:25:e1:86:3e:98:2a:10:c4:59:e4:bf:
                    93:db:fe:62:85:b9:1f:75:69:43:96:7f:32:e6:7f:
                    f5:2a:63:2e:e4:34:4c:f3:07:20:44:a6:aa:52:c9:
                    80:85:48:86:5a:42:dc:aa:e0:29:4a:d7:ea:d6:d2:
                    c4:30:48:43:f6:86:99:2c:7e:08:08:69:83:4c:5b:
                    82:20:0d:9b:84:1e:65:21:aa:6b:47:2a:d2:02:f7:
                    af:6d:14:42:96:49:1a:35:a7:2a:e1:ea:dd:ee:25:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:24:5C:A3:0F:FF:5A:AC:85:B0:61:86:B6:70:7F:5F:D5:0D:CE
            X509v3 Authority Key Identifier:
                keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:96:7e:4c:35:da:cf:c9:c8:06:9d:eb:54:b4:04:c5:4c:
         43:58:71:c1:e7:84:aa:3e:9c:dd:62:6c:09:e8:a0:3d:c7:86:
         18:bd:cc:cd:02:93:bf:96:2c:2d:7b:4e:62:97:6d:ef:d8:19:
         2b:43:bf:26:b6:b2:ed:e1:7c:7f:5f:8f:d0:02:36:7b:be:f0:
         be:5a:87:cf:9b:8c:4e:f1:ac:58:b4:ff:4c:28:dd:7d:d4:78:
         89:9a:26:0c:ac:a6:58:6c:fe:d1:fa:63:10:4d:c4:6e:a7:21:
         80:19:cd:11:e1:98:e1:b5:9b:c2:57:63:67:ca:c6:68:40:ac:
         bf:68:1c:db:3a:f2:c2:9f:ee:22:79:ab:43:c4:22:6c:51:e2:
         c8:42:da:35:de:6b:29:6f:d1:ba:0c:e2:60:97:83:bb:13:b0:
         b5:ee:e6:10:8b:61:63:38:2b:3b:b8:8e:56:dc:29:5f:3d:c8:
         d4:75:ae:aa:ec:6e:e1:54:74:a4:bc:5e:0b:bd:35:25:9a:57:
         df:46:20:0d:50:7a:6e:e4:27:d9:05:82:e9:03:3d:7e:53:32:
         d3:84:0b:d0:b7:84:55:3f:f6:ad:ec:bc:e5:ef:1f:e7:a2:56:
         e5:1b:c7:24:2f:60:17:7d:7e:e1:35:b9:6a:fb:52:9f:de:f5:
         6a:55:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----