Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
File:                     D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json)
Hash identifier:          0Pw43riIH8EjFB5rNrrmuDnfln69yBK22Mu8icA9+yI=
Subject key identifier:   C0:A4:70:C5:32:2B:43:28:85:0F:2C:BD:BB:0B:E4:6E:67:1F:48:64
Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C
Certificate issuer:       /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
Certificate serial:       438338DBD606E9CDA6B848D804507D8102FBA7A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
Manifest number:          0175
Signing time:             Sat 29 Mar 2025 00:53:34 +0000
Manifest this update:     Sat 29 Mar 2025 00:48:34 +0000
Manifest next update:     Sun 30 Mar 2025 03:31:34 +0000
Files and hashes:         1: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: 8Q5h1wwdh+WBajiRSRlSgOI8q/feGRmMIUl6JUPtO5A=)
                          2: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: 7+OQpnNul6GvEz/TmHkQD01IKA9VIbWseT8LVp2j0nw=)
                          3: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:83:38:db:d6:06:e9:cd:a6:b8:48:d8:04:50:7d:81:02:fb:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
        Validity
            Not Before: Mar 29 00:48:34 2025 GMT
            Not After : Mar 30 03:31:34 2025 GMT
        Subject: CN=C0A470C5322B4328850F2CBDBB0BE46E671F4864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5f:b4:88:55:c4:b6:d2:ee:a2:99:5f:b2:df:
                    f6:f5:2e:48:12:69:e9:0a:2c:2d:bc:50:f4:02:5f:
                    ad:e9:29:f5:fb:37:37:65:f2:6c:3e:e9:db:ab:b8:
                    b2:94:6c:f0:b9:90:cb:c1:3a:ab:84:ac:25:c9:2f:
                    7a:73:21:ac:67:b7:6a:88:f6:6e:c6:73:b2:ee:4d:
                    52:c4:76:cd:f7:fb:02:08:c1:d2:91:31:31:66:fc:
                    db:a4:45:70:84:c9:30:69:e5:77:2c:64:31:74:43:
                    78:62:15:f1:9b:11:6f:5e:18:2a:f4:2a:d9:31:f5:
                    6e:00:50:d5:71:3d:26:10:07:5d:a5:ce:9c:be:d1:
                    95:b4:f5:f1:24:42:63:6c:ff:53:a6:02:b2:f7:f0:
                    74:ad:9d:74:9a:1b:35:0c:97:fd:d3:ea:df:67:28:
                    c1:be:d4:be:e9:02:ea:6d:7a:d5:3b:94:65:63:1b:
                    ab:f8:ae:5d:0e:ec:65:f3:57:14:f8:0b:d0:69:bf:
                    0d:a1:21:d7:9d:7e:d2:7b:78:af:24:01:65:e4:3e:
                    5a:28:39:70:5d:fa:0e:bb:30:53:83:ec:c7:7f:8b:
                    dc:1a:d4:32:d9:8c:f1:b5:1e:69:12:40:b0:09:e2:
                    4d:6a:1b:e4:ce:16:bf:46:ad:8d:2b:ec:74:5f:75:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:70:C5:32:2B:43:28:85:0F:2C:BD:BB:0B:E4:6E:67:1F:48:64
            X509v3 Authority Key Identifier:
                keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:00:3d:81:95:33:3a:f4:45:7e:a7:10:03:3a:6e:82:75:
         2e:ac:3b:47:98:b2:1e:21:d5:9f:b4:dd:4b:a9:7b:64:ba:50:
         3b:dc:a9:e3:10:b5:22:6b:d1:20:0f:c6:8e:e4:50:36:a4:aa:
         ff:03:30:d8:dd:31:d6:18:f9:c0:ad:ca:35:84:6f:00:ae:c6:
         93:38:45:11:3e:d4:82:28:5b:19:e5:c5:27:6d:d5:f9:91:d5:
         90:9c:0b:da:3d:69:0c:36:89:6a:5a:63:65:d2:80:ab:39:ab:
         65:4e:d3:86:04:1c:47:97:de:d1:8c:06:1d:7e:5c:54:cd:a9:
         0e:b4:08:10:d0:a1:bc:bf:96:97:97:b5:77:2e:fa:39:6c:5d:
         59:34:1d:92:e0:48:58:21:a4:44:93:85:f5:47:fb:a8:ec:19:
         cb:65:61:54:b3:a6:6f:78:dd:97:0c:aa:6d:f7:e4:f9:31:1e:
         25:3a:79:c9:16:6b:ab:42:41:c4:81:68:ad:b5:87:4d:a1:8d:
         44:88:11:a1:92:6f:61:f6:27:0c:1a:6d:98:cb:ee:ac:3a:a1:
         4e:c5:f8:bd:a8:28:2f:8a:1d:03:6d:dc:75:bb:ef:52:88:16:
         9a:b0:d6:6d:e6:3b:5a:5e:15:d6:ad:0f:b3:8c:8e:b0:75:44:
         ca:46:8c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----