Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft
File:                     99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json)
Hash identifier:          w/4ENnENCyR/20/HzQ1NjRNF7ATp7AlffFSf0r70PwE=
Subject key identifier:   C6:E6:D5:A9:08:15:6A:E5:19:B8:B5:94:CD:84:2B:76:9B:A7:9B:68
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       33CCC262BD0E54E018D4E5444CAA55321A912A84
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft
Manifest number:          0191
Signing time:             Sat 29 Mar 2025 02:15:33 +0000
Manifest this update:     Sat 29 Mar 2025 02:10:33 +0000
Manifest next update:     Sun 30 Mar 2025 06:05:33 +0000
Files and hashes:         1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: VOCmprDSsLESXkO/FQJq5Di1ywk4dkWCDc9M2CxoYeM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cc:c2:62:bd:0e:54:e0:18:d4:e5:44:4c:aa:55:32:1a:91:2a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Mar 29 02:10:33 2025 GMT
            Not After : Mar 30 06:05:33 2025 GMT
        Subject: CN=C6E6D5A908156AE519B8B594CD842B769BA79B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:01:08:9f:a6:a9:6a:d0:03:33:b1:0f:37:48:
                    67:f2:da:76:2b:01:37:83:48:57:9f:68:96:88:61:
                    d6:10:3c:53:16:21:ca:14:4d:e9:5a:b4:55:ae:4a:
                    96:97:0b:87:4e:64:3c:0b:a2:d6:5a:93:95:d6:88:
                    92:86:c2:a5:7b:0c:58:0c:a1:df:ec:bc:e3:2a:53:
                    ad:6d:c0:47:d4:4f:55:e2:25:71:02:22:29:0f:ff:
                    26:c3:85:f3:f7:e9:82:a5:ff:47:0e:a5:f7:0a:d8:
                    e2:e0:53:18:de:38:48:4e:3f:61:91:49:24:75:e5:
                    a4:3b:6e:b6:07:81:a5:20:4b:c6:9e:41:39:97:b4:
                    d7:bc:cf:1f:08:fa:ca:76:21:ab:0e:b0:b7:f2:9a:
                    cd:b5:a2:86:f9:cb:c3:51:f9:da:e0:3d:8a:77:bb:
                    81:f2:d5:03:cc:2b:6a:84:67:b1:76:30:d6:0f:7e:
                    91:3e:5f:ac:5c:e8:44:80:47:17:a6:50:b8:69:57:
                    0b:00:95:78:e8:9e:c6:d7:f2:d3:02:14:f4:2d:a9:
                    e1:9a:52:2e:ac:06:b7:fb:90:1a:8c:f2:c0:9f:05:
                    da:84:13:b0:df:d8:cc:d0:9d:95:23:e1:c1:b9:c0:
                    37:e3:36:3a:d9:73:e2:dd:19:f1:ad:b7:81:a5:27:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E6:D5:A9:08:15:6A:E5:19:B8:B5:94:CD:84:2B:76:9B:A7:9B:68
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:03:ce:19:cc:1b:ba:c1:ac:37:53:54:58:8a:03:36:98:ee:
         52:e0:20:6b:18:7b:e2:2e:3e:a2:53:1b:b7:d4:3d:d8:c9:c6:
         10:fc:78:7a:74:49:8f:16:da:1f:ec:86:71:fc:67:0e:96:59:
         90:a0:09:de:1e:02:25:21:c5:1b:19:f8:9a:09:48:51:0b:d2:
         78:d1:13:73:13:e9:5c:55:bb:fa:a4:8c:76:66:f4:73:8b:d2:
         fe:c1:fc:3d:21:74:0f:0f:e0:0e:0b:d4:3d:be:f0:c4:e2:35:
         a8:5a:0b:3b:2c:d4:da:7a:76:b7:9c:51:db:b4:75:95:02:f0:
         00:f1:bf:aa:fc:00:59:37:d2:8d:61:6a:98:2b:e7:92:2d:c2:
         4a:b7:6b:ac:29:2c:d1:83:6a:cf:86:ef:6b:e3:cd:66:8d:d2:
         39:29:f4:43:00:69:96:2f:88:a1:de:71:af:5b:2f:25:c2:b3:
         62:5f:ba:56:05:fb:2d:48:bd:d5:16:b7:ed:cc:d3:c1:e4:d9:
         95:fe:a2:ca:40:38:b4:40:0b:b7:14:39:63:4e:f3:66:1d:c1:
         e6:db:43:d5:6b:06:66:29:7e:e1:19:18:0f:75:6e:43:96:c2:
         3a:77:9e:71:37:5f:75:69:a1:39:b2:23:20:c8:5d:df:49:01:
         8d:08:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----