Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File:                     5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier:          LgIWTas3gmOz1MNzx2GcwoCM/HWdA+x3BzGj2MAQDZ8=
Subject key identifier:   85:81:F5:0F:4F:94:63:62:F3:3D:19:67:8E:F0:4C:D3:75:3F:31:AD
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       4239D978661012BEF39ADCCD68D8B2735844B504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number:          4B
Signing time:             Fri 28 Mar 2025 19:53:31 +0000
Manifest this update:     Fri 28 Mar 2025 19:48:31 +0000
Manifest next update:     Sat 29 Mar 2025 23:42:31 +0000
Files and hashes:         1: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: 5G6r44LqsanyM1lrV2ci15oTlyRIvUb7wagBAyJE9a8=)
                          2: 3130342e3136372e31392e302f32342d3234203d3e20323135323438.roa (hash: GMEP9iKl4Ev2lmXnOs/u75idB5oA52kN/Oszr3FXVVw=)
                          3: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: kUiBrX3+9cuSC9lMhoz9V2p165UrI0C31waBU1/3ZFc=)
                          4: 3130342e3136372e31392e302f32342d3234203d3e20333936303634.roa (hash: 6fhYYyEnaWNq97PI/L9874+nfD60vOGcyWKDeMmVfsI=)
                          5: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=)
                          6: AS215248.asa (hash: Nv2XVNSUKiPy4+No+h39/uphBOnDST4g6yIotocoOL8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:39:d9:78:66:10:12:be:f3:9a:dc:cd:68:d8:b2:73:58:44:b5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Mar 28 19:48:31 2025 GMT
            Not After : Mar 29 23:42:31 2025 GMT
        Subject: CN=8581F50F4F946362F33D19678EF04CD3753F31AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:f7:48:01:ba:02:f3:f3:a2:d2:a3:fb:b9:
                    8c:2e:63:4b:04:3b:d4:f8:2a:2a:0b:38:5a:88:89:
                    e3:f0:bf:97:91:88:be:75:1f:eb:a4:3d:e3:67:ca:
                    02:91:b2:cd:c4:6c:4c:6a:1f:54:41:78:6b:24:c6:
                    8a:7a:b4:81:98:8b:1b:6d:2a:c9:72:22:b0:81:cb:
                    ed:08:dc:23:bf:24:3e:99:42:d3:a0:6e:33:41:d9:
                    1a:12:84:fc:fc:22:d7:34:02:2c:50:dd:2b:a3:92:
                    bf:0a:78:79:a4:04:c8:21:c4:72:ff:6f:59:36:74:
                    95:d0:02:af:eb:a6:f8:d4:a5:68:22:1e:70:8f:c1:
                    69:86:a9:79:d6:14:7a:52:63:67:4d:3c:f5:ed:0f:
                    75:c6:89:c1:8b:00:d2:03:3b:5b:71:af:81:37:f0:
                    5f:39:7c:5c:73:40:aa:97:7e:cd:35:d8:c9:da:73:
                    64:f0:45:71:0c:82:13:36:6f:c4:5c:54:af:09:d8:
                    5b:9e:4b:41:f4:f7:be:4f:17:31:5c:a4:26:5a:81:
                    e4:f9:93:1c:64:cd:9f:3c:62:46:68:ca:54:7e:c2:
                    e7:3d:04:4b:15:4d:6f:04:d5:67:e3:f2:46:7f:2a:
                    f9:0e:ef:b5:a9:bf:5d:3f:fc:64:51:9d:3b:cc:b4:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:81:F5:0F:4F:94:63:62:F3:3D:19:67:8E:F0:4C:D3:75:3F:31:AD
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:6e:92:3f:81:14:5e:ce:cc:63:3f:1b:4d:2b:49:b1:1b:f5:
         82:8a:9e:e4:6a:bd:b0:60:10:d1:df:86:67:cf:d1:f1:45:f4:
         c1:94:5c:fd:10:33:fd:70:4d:dd:b0:92:88:98:bf:c0:73:39:
         44:69:bb:9c:8f:40:72:01:f6:83:a0:7f:8b:7a:34:a5:42:5a:
         77:19:d7:2d:74:aa:62:3f:b9:04:6e:8d:83:22:4e:8d:b5:67:
         55:1d:da:2e:d9:dd:46:4d:24:ca:ef:9d:9a:41:92:04:2e:42:
         b3:22:65:6f:bb:ab:5c:6d:9b:04:f0:db:40:94:20:d2:ab:de:
         41:67:5c:06:ae:ac:00:de:70:0c:45:fe:cb:16:aa:9e:90:c7:
         e3:25:69:54:cb:19:8c:c9:a2:d0:7a:4b:5f:6e:ae:c8:87:62:
         52:9a:27:d6:88:1a:61:24:64:83:f2:49:77:18:82:89:a8:23:
         9a:a2:fa:3d:2a:4f:1c:c9:e4:33:62:f6:7b:cc:7b:aa:35:e4:
         3f:7f:43:8f:96:05:77:6d:b7:e2:54:a3:bb:e6:92:5b:a5:00:
         83:a4:3e:30:30:3a:f0:38:6e:87:d8:63:2e:33:86:0e:a7:f4:
         55:4c:d7:9c:81:09:ca:03:5f:49:e4:14:07:61:44:01:84:03:
         84:9f:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----