Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
File:                     B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft (raw, json)
Hash identifier:          PS512VSlOiHlVxQ16T8ZbZrt/Rxa5kfiLV//5M3LEgI=
Subject key identifier:   09:6F:4D:D0:D4:EE:EE:53:04:9C:13:39:20:23:F6:32:C2:91:03:2D
Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
Certificate issuer:       /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
Certificate serial:       7FF0CB597ABD1F5ACB83A5D3329CC5D5E39A0B8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
Manifest number:          8D
Signing time:             Wed 21 May 2025 17:36:09 +0000
Manifest this update:     Wed 21 May 2025 17:31:09 +0000
Manifest next update:     Thu 22 May 2025 19:21:09 +0000
Files and hashes:         1: B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl (hash: TAnuGhZmVz3uXR2dtSqqDQZ06KLTMhIMlfuk9dCpjzM=)
                          2: 326130393a353463333a3a2f33322d3438203d3e20323135313437.roa (hash: Hh49k+Xt2ffEnf+1AdAQ2KRXHiXFSnVa9rayhA3bylc=)
                          3: 326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa (hash: DYKApsC0Xy9yKLi3q0BaMZa16VHMvjlxYhlK7Vyadxk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f0:cb:59:7a:bd:1f:5a:cb:83:a5:d3:32:9c:c5:d5:e3:9a:0b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
        Validity
            Not Before: May 21 17:31:09 2025 GMT
            Not After : May 22 19:21:09 2025 GMT
        Subject: CN=096F4DD0D4EEEE53049C13392023F632C291032D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:3d:09:b8:f4:a1:5e:18:16:ea:30:cd:02:
                    69:1d:be:d7:09:3f:b9:cf:83:bf:90:db:22:61:bf:
                    b4:8c:89:27:7b:ef:ce:82:65:49:1c:a7:6c:f4:66:
                    44:9f:41:a6:96:93:08:eb:e2:93:02:d7:e4:2f:dd:
                    91:85:06:6b:34:bd:c0:9d:cd:c8:85:35:98:e0:aa:
                    85:a9:80:59:d0:2f:69:2f:e5:29:32:be:af:02:4d:
                    5c:65:71:f7:89:e6:7e:ac:80:8b:ba:54:52:7f:a2:
                    6b:6f:57:e0:cd:73:ee:6c:7e:07:5b:bb:ec:17:82:
                    0c:77:47:97:56:85:05:b9:42:a1:ca:aa:0a:80:3b:
                    31:d3:08:9a:e9:e6:05:22:66:57:74:6e:9a:48:91:
                    4e:f1:54:b9:48:71:6e:84:22:42:dc:cc:ea:d2:6e:
                    34:c9:ff:af:ca:4f:eb:69:45:aa:58:00:e8:9b:93:
                    d5:1a:9a:aa:32:35:36:45:db:8a:09:ba:bf:87:f7:
                    c0:60:03:79:36:9a:56:69:58:15:2b:c0:9b:0c:cb:
                    f4:57:0d:ab:92:94:ff:c3:f1:60:90:6a:4a:eb:c4:
                    7a:8d:fa:5e:1b:ff:63:c4:c1:ec:b1:1a:a2:e2:c8:
                    34:ee:53:0f:f8:4c:e7:92:12:ef:50:22:f0:8d:73:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:4D:D0:D4:EE:EE:53:04:9C:13:39:20:23:F6:32:C2:91:03:2D
            X509v3 Authority Key Identifier:
                keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:47:3e:d5:43:ed:f9:cf:fb:7b:3f:cc:d1:ee:11:7f:84:56:
         eb:57:28:e6:d5:05:9c:94:96:ad:08:f0:db:2a:d2:0c:56:aa:
         ef:83:ea:cb:84:e6:ca:3b:0f:cc:77:b4:4c:6c:f9:a6:a8:2e:
         d1:76:61:2c:22:23:3a:cf:f3:57:54:f7:4a:3b:c8:da:34:6f:
         7c:aa:e3:09:10:91:2d:7b:b9:11:db:64:96:e2:62:db:2a:0c:
         7d:ba:a2:71:e9:45:a1:98:b4:d9:83:9f:4d:3d:f3:b8:1b:e0:
         38:17:51:30:87:7c:08:3a:c4:c6:1c:cd:88:d8:a0:09:d9:83:
         95:ca:5c:39:09:42:c0:1f:b5:ac:07:44:24:7d:07:84:db:7b:
         ec:b9:db:c4:99:0c:4d:b4:a8:ef:c0:59:32:95:c1:84:04:33:
         4f:e3:56:a1:6a:50:fa:b2:fa:bb:03:2c:30:03:79:41:c8:a4:
         9e:4e:5d:f4:32:8c:0f:38:fa:80:ad:48:5c:28:01:e5:55:ed:
         d5:6b:78:c7:12:7a:4e:44:7a:83:2e:66:85:bd:5e:59:80:de:
         0b:94:a5:c1:09:ce:86:33:0b:96:79:cb:88:78:3a:ba:eb:85:
         09:cb:ac:19:d2:85:46:96:d7:ec:49:07:e9:e1:9a:90:81:b6:
         cc:3f:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:42 2025 by rpki-client