Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File:                     21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier:          rq7YaP5TTN9HxF5sGK7Evs86T+01xrsZ9SHUxLLvatQ=
Subject key identifier:   B7:92:AD:CE:EE:E5:F7:81:C9:A4:5E:78:0F:58:62:C0:E4:79:89:CC
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer:       /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial:       0C6C2FA20ABEA5D7279EF1F0923A7AED3C3E1019
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number:          06
Signing time:             Fri 28 Mar 2025 05:58:46 +0000
Manifest this update:     Fri 28 Mar 2025 05:53:46 +0000
Manifest next update:     Sat 29 Mar 2025 07:49:46 +0000
Files and hashes:         1: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: cq0zLFi62AgT9ulu3y1NWN1nZncxP3JdQJ8I6r1sTNk=)
                          2: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6c:2f:a2:0a:be:a5:d7:27:9e:f1:f0:92:3a:7a:ed:3c:3e:10:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
        Validity
            Not Before: Mar 28 05:53:46 2025 GMT
            Not After : Mar 29 07:49:46 2025 GMT
        Subject: CN=B792ADCEEEE5F781C9A45E780F5862C0E47989CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:e3:b5:9d:9a:67:e6:4b:3d:78:9e:90:cc:
                    6f:42:79:b7:8e:2a:f2:f6:87:ec:86:15:56:25:fb:
                    28:eb:fa:35:af:2b:b4:5f:e8:21:8b:59:9b:f4:48:
                    91:eb:be:51:bd:ff:44:cf:99:98:ea:a6:72:40:02:
                    87:e4:18:ae:0c:36:42:f0:28:02:fa:bb:41:ac:2f:
                    c6:fa:54:97:a0:a2:86:a4:39:77:f4:af:be:9e:2f:
                    97:9a:2f:23:a9:03:ea:6d:14:46:f9:69:1c:44:34:
                    d1:48:75:d2:df:ba:8a:0f:84:91:77:8c:12:79:85:
                    54:49:0d:5c:70:cd:b6:6e:6c:8b:0e:1d:41:89:85:
                    04:d3:d9:e6:8a:ff:67:90:a8:51:78:db:57:d8:4b:
                    e7:03:b1:7c:cc:1b:e4:63:cb:21:ab:c0:bf:a4:d1:
                    e5:56:08:dd:a7:9f:d8:f2:8d:8b:58:a7:f9:99:ce:
                    69:1b:38:30:c1:d3:3c:f0:87:8e:fc:11:c0:1c:b0:
                    ee:d7:67:5d:d6:4c:dc:a9:d9:f6:65:b3:0d:43:f6:
                    76:78:aa:69:bc:3e:31:b4:a2:89:4d:44:42:5c:5b:
                    b5:7f:10:fa:56:dc:a2:65:0c:a5:46:98:45:99:8c:
                    39:54:22:7c:43:9a:6d:50:d3:0c:c6:c5:aa:14:72:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:92:AD:CE:EE:E5:F7:81:C9:A4:5E:78:0F:58:62:C0:E4:79:89:CC
            X509v3 Authority Key Identifier:
                keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:b5:78:f7:c3:25:e0:dd:91:bf:98:73:24:5d:62:f1:19:
         43:b7:0b:a3:98:40:17:a2:fc:e3:f7:c7:78:e4:79:0c:e7:a6:
         86:20:20:6b:b0:0e:08:de:e8:60:df:99:ec:fe:7f:4b:82:a4:
         7b:d2:bd:0e:b4:44:aa:1e:1e:c4:8b:ae:d6:14:e8:79:0f:66:
         00:2e:e2:bd:eb:15:17:8c:81:09:9c:25:c3:2d:4e:e2:31:16:
         d3:32:ac:e2:70:8b:d7:69:5c:1a:99:d3:66:41:42:34:3d:06:
         75:ca:4a:4f:73:7e:45:6f:9b:72:f6:98:0a:c3:0e:b8:5b:24:
         6f:2b:1f:68:6e:60:7c:d4:9b:80:fe:a9:7e:97:d3:f7:a6:d4:
         0d:7b:55:d5:0d:6e:1e:9d:7b:3f:2b:e0:52:17:1c:49:6a:74:
         25:f5:35:e4:e2:5b:be:e4:3b:56:d5:85:30:d3:ef:ab:5b:5a:
         53:a1:53:36:91:20:f3:0f:0c:ed:ff:6b:a0:bf:31:89:fe:62:
         0c:4e:18:c9:c5:2c:44:d9:ca:ad:ea:f8:54:13:d1:bb:b0:7a:
         c5:18:0f:03:dd:96:ee:d0:62:9c:63:fa:41:6d:f1:18:9e:38:
         f2:ea:ba:2c:cf:de:a7:28:cf:8c:fa:cd:69:56:e8:b8:47:97:
         2c:a4:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----