Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
File:                     8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json)
Hash identifier:          hTOh0vy8paYjTzxVY7tPQp6DXVrZGpc1NXGcSgU7TtE=
Subject key identifier:   B4:D7:ED:6A:8E:2C:8E:4F:3A:19:A4:70:DE:28:94:D2:98:54:65:33
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Certificate issuer:       /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial:       2B82DFA96E46BDFFEBDAA2C0D7C463D3583B0BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
Manifest number:          03AF
Signing time:             Sat 29 Mar 2025 07:49:01 +0000
Manifest this update:     Sat 29 Mar 2025 07:44:01 +0000
Manifest next update:     Sun 30 Mar 2025 09:06:01 +0000
Files and hashes:         1: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: D04ae2SRdtKJx7avocdxkHAFAepjsts9k/904EQDNhs=)
                          2: 3138382e3136342e3135382e302f32332d3233203d3e20323039323432.roa (hash: a8q0y7nvMPxAQTNauYzxQwFEB0FcxQ6k8ECPLkihDTg=)
                          3: 3138382e3136342e3135342e302f32342d3234203d3e203136323736.roa (hash: CSYWsES4pD37cXQNnf4UjazVxkggSvafg/VoS+NTVDg=)
                          4: 3138382e3136342e3135372e302f32342d3234203d3e203631333137.roa (hash: 1OXX2SrcK/gmhp0BoSKo0TlJRIbDJQHbnTI5VzAFuV4=)
                          5: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=)
                          6: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: cpIUaG75nQ9+tjTT3dgJFEhXX/QGASOcX9UuEjDZoPQ=)
                          7: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: Zqg95JNQ7Tjc8CMis4303+CnonKl6jZjeNtUp3/4jl4=)
                          8: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:82:df:a9:6e:46:bd:ff:eb:da:a2:c0:d7:c4:63:d3:58:3b:0b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
        Validity
            Not Before: Mar 29 07:44:01 2025 GMT
            Not After : Mar 30 09:06:01 2025 GMT
        Subject: CN=B4D7ED6A8E2C8E4F3A19A470DE2894D298546533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:ab:09:b8:0b:2d:c5:ae:54:28:08:9c:2d:
                    8e:b0:af:bc:10:5a:06:03:9c:9d:85:84:37:c1:1b:
                    1e:45:5c:f2:8e:46:db:6c:42:5b:5e:80:23:b9:d6:
                    b2:a0:4d:50:05:b5:c4:21:0a:d5:eb:73:9c:32:b2:
                    76:4c:d7:0d:ea:c5:f4:c6:28:7e:71:8f:e7:d7:8e:
                    b5:fa:9a:76:75:54:0c:fd:f9:04:cb:5c:5d:5f:72:
                    5d:ad:3f:13:6d:5b:b7:c6:c0:b9:6e:da:d3:9f:64:
                    1f:40:61:09:3d:70:37:96:2a:59:d1:31:54:3f:86:
                    f4:cf:ec:8e:10:79:0f:88:ef:65:97:70:83:8e:f9:
                    c9:b0:23:c4:19:f7:1c:9f:2d:48:aa:dc:30:bf:41:
                    ea:9f:88:c0:88:62:4a:9e:c1:75:95:4d:5c:5a:7b:
                    73:7d:c1:fd:aa:c2:bd:9c:9f:a3:e2:cf:20:47:35:
                    d0:80:f2:b3:a3:b6:ac:d7:52:72:77:1e:8d:80:f2:
                    de:a5:4b:0f:bc:a0:c0:97:4a:3d:dc:e6:05:c3:60:
                    d9:24:ca:b7:08:3d:ac:62:53:34:6a:7c:ce:bc:b0:
                    c7:8a:87:72:a2:a9:fd:82:2a:42:99:bc:48:3b:30:
                    f5:aa:06:ec:ad:12:d8:6c:79:06:f3:72:3f:04:da:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D7:ED:6A:8E:2C:8E:4F:3A:19:A4:70:DE:28:94:D2:98:54:65:33
            X509v3 Authority Key Identifier:
                keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dc:8c:ba:36:3a:43:97:cb:c5:91:d6:71:7d:2a:09:cb:df:
         93:30:ba:03:07:83:92:b5:36:35:fd:cf:a0:8e:bb:47:4a:67:
         8f:fb:f0:f1:2b:07:9a:5d:bd:da:12:07:36:d2:e1:73:cd:38:
         66:6d:4e:55:a5:f8:5d:1a:e3:41:b5:50:94:df:54:93:73:ec:
         4d:3e:ea:aa:14:19:19:d8:9a:4a:61:61:83:f3:ea:46:b7:83:
         53:b0:29:72:7e:ea:f1:25:72:27:cc:3b:75:d1:e7:f8:68:71:
         e8:93:11:90:da:01:92:7c:6f:c3:ba:33:b7:c0:80:43:f4:1c:
         ab:4f:7a:99:44:30:1a:a8:9f:f3:91:34:7e:9b:12:6e:b7:97:
         77:79:4d:99:1b:13:02:44:23:ff:03:03:b9:b5:b1:40:08:c3:
         fc:6b:7e:7b:4c:c8:96:03:b2:2c:85:0b:4f:2a:ee:42:1b:33:
         8e:dd:93:29:5e:25:34:b1:cd:8e:77:c0:ec:e5:ef:45:45:48:
         0e:19:5f:1a:f3:44:10:58:e4:9a:52:a7:2a:7f:52:be:f7:8f:
         a0:1e:39:01:ba:f4:8a:2a:16:a9:5c:2e:43:bf:2a:38:0b:67:
         c6:3e:dc:90:16:64:52:ab:a4:1b:de:2c:83:40:06:70:7e:c8:
         4f:c8:e7:fe
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUK4LfqW5Gvf/r2qLA18Rj01g7C+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz
MGY3YzRjYTAeFw0yNTAzMjkwNzQ0MDFaFw0yNTAzMzAwOTA2MDFaMDMxMTAvBgNV
BAMTKEI0RDdFRDZBOEUyQzhFNEYzQTE5QTQ3MERFMjg5NEQyOTg1NDY1MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRPasJuAstxa5UKAicLY6wr7wQ
WgYDnJ2FhDfBGx5FXPKORttsQltegCO51rKgTVAFtcQhCtXrc5wysnZM1w3qxfTG
KH5xj+fXjrX6mnZ1VAz9+QTLXF1fcl2tPxNtW7fGwLlu2tOfZB9AYQk9cDeWKlnR
MVQ/hvTP7I4QeQ+I72WXcIOO+cmwI8QZ9xyfLUiq3DC/QeqfiMCIYkqewXWVTVxa
e3N9wf2qwr2cn6PizyBHNdCA8rOjtqzXUnJ3Ho2A8t6lSw+8oMCXSj3c5gXDYNkk
yrcIPaxiUzRqfM68sMeKh3Kiqf2CKkKZvEg7MPWqBuytEthseQbzcj8E2mWbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtNftao4sjk86GaRw3iiU0phUZTMwHwYDVR0j
BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj
M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE
M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m
NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG
NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNyMujY6Q5fLxZHWcX0q
CcvfkzC6AweDkrU2Nf3PoI67R0pnj/vw8SsHml292hIHNtLhc804Zm1OVaX4XRrj
QbVQlN9Uk3PsTT7qqhQZGdiaSmFhg/PqRreDU7Apcn7q8SVyJ8w7ddHn+Ghx6JMR
kNoBknxvw7ozt8CAQ/Qcq096mUQwGqif85E0fpsSbreXd3lNmRsTAkQj/wMDubWx
QAjD/Gt+e0zIlgOyLIULTyruQhszjt2TKV4lNLHNjnfA7OXvRUVIDhlfGvNEEFjk
mlKnKn9SvvePoB45Abr0iioWqVwuQ78qOAtnxj7ckBZkUqukG94sg0AGcH7IT8jn
/g==
-----END CERTIFICATE-----