Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
File:                     627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft (raw, json)
Hash identifier:          B4Mr3yUBZeGurmbTukhGtZx7R9X8zK8hBNXEjMSPOwU=
Subject key identifier:   43:28:7B:53:7D:7D:4F:16:E5:AB:F1:54:51:4D:54:E0:C3:A6:5D:01
Authority key identifier: 62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE
Certificate issuer:       /CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
Certificate serial:       5873D61A845EEA05F81039B1933A416EFB9FEDB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
Manifest number:          0327
Signing time:             Mon 24 Mar 2025 00:40:51 +0000
Manifest this update:     Mon 24 Mar 2025 00:35:51 +0000
Manifest next update:     Tue 25 Mar 2025 04:08:51 +0000
Files and hashes:         1: 627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl (hash: cociEyTMtRldpWQX+uAlmwyNWYqgKcyN+UasuuhAd4U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:73:d6:1a:84:5e:ea:05:f8:10:39:b1:93:3a:41:6e:fb:9f:ed:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
        Validity
            Not Before: Mar 24 00:35:51 2025 GMT
            Not After : Mar 25 04:08:51 2025 GMT
        Subject: CN=43287B537D7D4F16E5ABF154514D54E0C3A65D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:47:59:aa:cb:79:7a:f8:31:54:fc:2e:3b:
                    ed:a8:0f:b5:d3:ee:98:7e:46:81:4a:1f:91:cf:51:
                    5d:dc:92:38:da:dd:24:67:7c:f2:b7:f0:42:3a:b9:
                    b2:f1:48:48:67:ca:7f:38:5d:d7:a5:60:ee:bb:45:
                    3a:ab:27:07:1f:c8:a2:5d:ef:73:d7:1a:f2:41:42:
                    ec:f9:56:c4:4d:cd:1f:79:ad:9b:f0:d9:bb:d2:8a:
                    76:fa:f1:fd:0d:39:00:3c:6b:d6:a4:7f:a4:47:0d:
                    c5:15:11:57:58:6b:d2:15:2c:5e:f6:ff:b2:be:c3:
                    e4:fa:96:60:63:be:c7:e3:89:a7:d0:8b:ed:07:4e:
                    ce:a5:37:39:76:df:2d:c4:bb:79:77:58:e0:b2:69:
                    dd:11:00:38:02:2f:31:7d:0e:8b:62:a0:c3:86:1a:
                    51:17:1e:cc:a0:4d:52:89:44:3c:d1:ab:c7:f5:85:
                    52:e5:2e:8c:0a:e2:60:ba:35:1d:9d:07:3d:ac:1d:
                    9b:80:07:99:48:4c:3a:db:28:11:ef:6d:09:82:c6:
                    13:87:c2:f9:a7:40:a5:48:fd:cf:4f:d2:29:e6:1a:
                    f3:63:cb:ca:50:da:50:ab:99:56:65:bd:2d:ef:55:
                    d0:e8:7e:9f:3c:8e:ff:3d:e4:e4:b4:32:75:41:14:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:7B:53:7D:7D:4F:16:E5:AB:F1:54:51:4D:54:E0:C3:A6:5D:01
            X509v3 Authority Key Identifier:
                keyid:62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:30:ac:dd:bf:aa:f8:0f:c3:0e:f0:ea:bc:e4:fa:23:3e:
         fc:ff:12:37:2b:4f:3a:b3:7c:f3:fb:64:2c:97:7a:5f:04:cc:
         a9:66:11:34:af:d6:e0:64:de:41:f6:31:e0:a4:b1:ec:9b:4b:
         d4:14:d7:7d:9e:e8:83:28:9d:37:83:cb:09:bb:fc:ed:c5:8f:
         4f:57:b4:6b:7a:c7:ed:c8:1f:05:07:70:64:f7:0f:a1:b8:41:
         d1:eb:b2:f6:0b:d7:e7:0f:39:49:b0:47:14:24:9a:a2:9f:87:
         67:6c:c3:bd:c1:a7:05:e2:6e:d3:eb:62:78:65:56:df:25:21:
         19:50:a1:49:62:2f:f8:ca:e6:a9:5d:d8:30:97:bb:6a:e6:c4:
         5c:69:3e:1c:8a:a3:e2:a3:64:8c:78:0c:68:a6:bf:50:f1:14:
         3b:5f:be:8e:1d:18:6d:84:d8:68:5e:97:7f:33:f3:97:4e:8e:
         a1:94:41:58:87:1f:9a:1c:c7:c5:8d:2f:0e:22:13:2c:c1:f9:
         51:90:fb:83:4b:82:b5:2f:26:c5:c2:46:a6:cb:01:ec:26:10:
         03:02:ab:dc:7e:72:bd:1a:2c:ab:c2:53:12:c5:e0:6f:57:76:
         f2:29:73:58:af:6a:8d:b9:be:62:c4:1a:f4:1d:a4:1c:2b:2d:
         4b:7a:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----