Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File:                     2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier:          uFtkE8dTsV5RhVppWNwwrc6Yyw1jLCk6fdpGQQYCR3E=
Subject key identifier:   D4:62:C0:27:E4:1E:E6:CA:3C:3B:C9:92:EF:61:71:83:BB:EA:20:93
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       7B67C5C84EBD145D010FECFE9493C6D08C40E9E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number:          01F0
Signing time:             Sat 29 Mar 2025 07:29:05 +0000
Manifest this update:     Sat 29 Mar 2025 07:24:05 +0000
Manifest next update:     Sun 30 Mar 2025 08:57:05 +0000
Files and hashes:         1: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: uFtRcc1CAs+vojRB2o/ACbeUTOk/lQZbdAjFf7U0hCM=)
                          2: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=)
                          3: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: /YAYApCJNF3JzXK7UNmTzgA8PYTEBZq4QRiOdDAbz5A=)
                          4: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=)
                          5: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=)
                          6: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:67:c5:c8:4e:bd:14:5d:01:0f:ec:fe:94:93:c6:d0:8c:40:e9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Mar 29 07:24:05 2025 GMT
            Not After : Mar 30 08:57:05 2025 GMT
        Subject: CN=D462C027E41EE6CA3C3BC992EF617183BBEA2093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:03:c4:0c:2e:91:f7:8e:45:cb:95:1f:f2:
                    35:51:76:52:ed:73:16:be:56:d5:7b:a6:d1:51:55:
                    0a:2a:a9:f2:4e:50:be:40:4d:be:9b:91:38:1e:17:
                    4c:2d:ab:db:2b:eb:09:a6:d2:83:f6:d6:00:91:a3:
                    3c:f5:4f:c5:0d:44:78:61:d6:86:3f:c3:1c:ea:6f:
                    d6:5b:dc:97:12:21:ad:bc:75:70:49:1f:7b:a4:b6:
                    c3:18:96:33:bc:1d:46:00:98:77:b2:1d:1b:a4:68:
                    cf:37:65:e8:45:e3:94:b0:eb:27:a8:55:3f:27:d9:
                    2c:d3:09:ac:f4:10:1b:91:47:c4:fe:30:1d:b5:c6:
                    f2:55:81:fb:d3:f5:d2:56:ec:86:49:84:56:d6:d1:
                    4e:9d:d0:e7:73:eb:c8:c3:36:01:de:6d:23:b7:f0:
                    90:2f:07:2d:7a:81:4a:44:02:77:ae:6c:f6:4c:e2:
                    48:a7:8a:2a:6c:98:57:7c:41:98:0d:e2:84:d1:54:
                    6a:a6:8f:fe:9d:49:cd:7d:88:0e:02:1d:4b:66:ca:
                    b1:57:4d:90:a9:89:cf:20:2e:d7:9a:02:a6:f9:f8:
                    85:05:d3:47:d1:3d:45:ca:2d:52:ba:72:c7:f0:53:
                    12:f5:92:53:a0:f5:c3:b9:30:b5:97:45:f6:c7:2c:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:62:C0:27:E4:1E:E6:CA:3C:3B:C9:92:EF:61:71:83:BB:EA:20:93
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:58:db:b6:88:29:bf:fa:47:3e:9f:90:f9:5b:e8:e1:6c:41:
         aa:dc:37:71:10:45:d7:54:b6:f1:8e:9a:69:aa:af:5e:b0:57:
         ab:35:23:1d:c6:bf:22:2f:d5:31:7a:89:89:14:0e:0e:6f:24:
         85:c8:60:89:cc:4d:93:97:a2:f7:62:96:04:be:48:ec:07:3f:
         ca:a1:ac:87:06:59:9d:83:c5:8b:e5:00:06:46:e1:65:10:8b:
         db:7f:ee:ee:83:a5:e1:bb:49:db:c3:86:2d:34:df:a2:2f:2d:
         d2:a0:b7:fb:09:24:c0:61:a1:c2:2e:17:57:d1:01:71:e1:64:
         c4:64:0d:f1:49:a8:34:7c:e6:8e:0e:e9:e2:a0:ae:c1:22:7e:
         c2:97:61:36:82:d7:90:ec:d7:56:61:49:06:b8:7d:3f:78:1a:
         cc:89:ee:97:87:df:01:99:35:bb:23:5b:10:ff:e4:98:11:bf:
         7e:88:7c:4c:89:69:54:1f:40:d4:38:dd:91:75:01:4d:5f:a8:
         7a:d2:7b:bf:35:2e:b1:3c:de:24:b5:dc:02:04:c7:36:fc:d4:
         9b:11:51:cd:ed:8e:82:71:ff:f7:41:6c:f2:ea:fa:40:51:01:
         fd:c0:e3:ec:65:76:74:61:90:ce:e2:1e:3c:58:17:0a:89:2c:
         45:dc:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----