Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
File:                     6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft (raw, json)
Hash identifier:          jhLmBNgNtk/O97JK0rfrjToSgzMqp4VjZEVlWSMzGnM=
Subject key identifier:   03:B9:7D:7D:EC:52:4D:67:83:03:C7:8A:66:0D:99:45:AB:74:E5:B9
Authority key identifier: 6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3
Certificate issuer:       /CN=6aaaf98568fc24ed7425ff75abd5f145101fbaa3
Certificate serial:       4939A7BC006E215EB61C5FA916D096A7BCB0BA06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
Manifest number:          02E5
Signing time:             Mon 03 Feb 2025 02:27:33 +0000
Manifest this update:     Mon 03 Feb 2025 02:22:33 +0000
Manifest next update:     Tue 04 Feb 2025 03:04:33 +0000
Files and hashes:         1: 6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.crl (hash: jNMHajarKuKo35M7k5vE9WR/wnqCZ9FetmevmxRAKuk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:39:a7:bc:00:6e:21:5e:b6:1c:5f:a9:16:d0:96:a7:bc:b0:ba:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aaaf98568fc24ed7425ff75abd5f145101fbaa3
        Validity
            Not Before: Feb  3 02:22:33 2025 GMT
            Not After : Feb  4 03:04:33 2025 GMT
        Subject: CN=03B97D7DEC524D678303C78A660D9945AB74E5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:58:ce:50:05:61:31:ed:5c:a0:a6:f7:c3:
                    cd:71:f1:86:1e:17:c9:f9:90:fa:02:18:03:7e:c7:
                    b4:c2:b2:d1:7b:5c:4c:6b:22:94:e7:cb:72:06:4d:
                    b8:b2:ce:77:d0:84:9f:30:1b:fc:ff:40:0e:51:e3:
                    1a:01:0c:2f:98:41:bd:2c:4a:da:7e:ee:7a:18:9d:
                    f8:05:49:45:ef:50:97:e1:8d:87:ec:8d:98:b9:1d:
                    72:70:a5:f1:be:a3:e0:9b:e8:58:4a:e8:c2:d6:d3:
                    c5:08:1a:af:39:b0:38:4f:49:78:f8:d3:c1:e1:ad:
                    2a:f4:d4:f4:08:96:26:bb:c3:7d:af:40:a4:95:16:
                    5c:f7:33:a2:8d:9b:a1:5b:3e:44:54:51:b3:01:4e:
                    d1:c0:16:43:57:9e:e7:c3:ff:15:97:0e:86:4d:b8:
                    6c:ea:47:a3:4c:c2:a5:ca:d5:c4:b9:5c:93:59:16:
                    be:6e:4b:e2:d5:92:9e:c8:87:53:c3:79:61:b3:5c:
                    19:e2:d3:1c:b1:73:e9:83:21:97:55:15:22:fe:35:
                    8c:eb:5b:11:c6:15:66:b0:41:71:74:b5:26:cd:f4:
                    f8:bd:00:27:d4:c6:ac:ae:1d:ce:6f:47:1e:5f:a7:
                    a5:61:dc:fe:94:df:c9:f9:1f:04:a2:f5:37:73:02:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:7D:7D:EC:52:4D:67:83:03:C7:8A:66:0D:99:45:AB:74:E5:B9
            X509v3 Authority Key Identifier:
                keyid:6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:fc:cd:cb:c4:2e:00:1c:4d:85:80:c2:38:74:8c:6a:b6:
         1f:3f:01:12:50:86:c4:85:0a:84:05:bf:56:9a:69:14:64:7f:
         c3:94:bb:33:a1:af:85:15:8e:b5:3c:39:41:f3:b4:e2:0d:bd:
         64:39:a6:ac:a4:79:c7:d8:42:a5:32:5b:0f:a9:17:e8:a8:46:
         fd:97:ff:e9:10:0a:21:7a:20:11:61:39:68:6a:51:13:74:d3:
         ae:86:f9:a1:aa:2f:fb:ae:db:36:bb:71:7a:a6:3d:27:1e:bb:
         75:03:6d:1b:af:f0:b8:bd:af:90:89:3c:d1:a8:a1:b3:7b:c9:
         8f:3a:80:2a:ea:fd:91:40:8f:5e:5d:86:78:20:29:71:47:87:
         78:1b:d1:5a:a2:83:71:e2:f0:98:6a:08:1e:42:61:6a:2d:f4:
         e7:2f:9b:e3:be:be:e3:03:7c:49:ef:31:a0:5c:dd:49:a3:ce:
         36:52:16:f2:a7:d2:f1:9d:34:96:5c:58:aa:2d:1e:63:5c:67:
         2c:73:b3:77:27:f0:fb:8e:75:8d:97:22:ab:4a:30:f0:b5:89:
         33:6f:fe:0a:c1:18:f2:81:0a:24:39:44:7d:70:41:ad:5a:c0:
         3c:fc:44:d0:d6:54:8c:2b:3c:4b:26:cf:a4:bb:30:af:39:25:
         8a:80:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:02 2025 by rpki-client