Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.mft
File:                     6F184C05E9A68EF8ED5B077D11D0A9D93084A508.mft (raw, json)
Hash identifier:          XyUgW9AdAtWQ0BsWnOfk/4nmXd2VA+5VJsHLlstlUEw=
Subject key identifier:   BF:F6:B4:B5:39:75:DF:14:85:E3:40:69:F8:54:9D:C2:60:99:AA:11
Authority key identifier: 6F:18:4C:05:E9:A6:8E:F8:ED:5B:07:7D:11:D0:A9:D9:30:84:A5:08
Certificate issuer:       /CN=6F184C05E9A68EF8ED5B077D11D0A9D93084A508
Certificate serial:       5B8990E017A12C45D1E030E65EC634FD671DE6AB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.mft
Manifest number:          70
Signing time:             Tue 25 Feb 2025 21:46:10 +0000
Manifest this update:     Tue 25 Feb 2025 21:41:10 +0000
Manifest next update:     Thu 27 Feb 2025 01:38:10 +0000
Files and hashes:         1: 326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa (hash: 2eUlfOyHgmU4D6Jh0JcmBvp2wwPjwOyZEtlMrKbtYMA=)
                          2: 6F184C05E9A68EF8ED5B077D11D0A9D93084A508.crl (hash: H7GRrS+XFEIG6KWk1WIHcOI7qJmqoUGRaocPOWN2iek=)
                          3: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: QbPYWXWOIK6i/lnbINjQYVsO8X2c+gFN2A3RuxiRGJc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:89:90:e0:17:a1:2c:45:d1:e0:30:e6:5e:c6:34:fd:67:1d:e6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F184C05E9A68EF8ED5B077D11D0A9D93084A508
        Validity
            Not Before: Feb 25 21:41:10 2025 GMT
            Not After : Feb 27 01:38:10 2025 GMT
        Subject: CN=BFF6B4B53975DF1485E34069F8549DC26099AA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:8f:8c:33:5b:68:6b:69:6c:d8:cb:5a:34:
                    60:4f:cb:12:14:cb:ec:83:95:a2:0a:d6:c8:5b:54:
                    c5:99:b4:e5:f7:b4:da:34:6c:b4:cd:83:4d:df:6e:
                    e7:ca:e5:83:7a:03:83:7e:a3:04:47:be:7a:c4:95:
                    d1:bd:de:45:51:c3:40:e5:15:d4:96:a8:4b:ee:e2:
                    00:f2:93:70:7d:3a:39:07:4d:0a:48:3f:87:a5:a5:
                    15:a5:26:11:bd:a9:71:49:8a:5f:eb:1e:14:7b:ed:
                    bb:f4:5f:a8:6c:45:ae:fb:0d:17:21:39:ef:46:85:
                    76:e1:2e:d0:39:15:c0:f8:28:0a:2b:6e:33:09:93:
                    74:94:16:be:28:ac:0a:97:3b:0c:38:6d:51:c2:1c:
                    bc:96:c1:7a:9b:91:ff:d6:39:0b:f4:83:e0:43:b7:
                    51:59:73:01:d5:19:90:e1:03:88:10:58:3e:4c:32:
                    3c:df:32:23:ef:42:1f:99:d4:62:bf:0b:7f:68:9e:
                    72:40:a5:cd:07:0f:3d:84:21:16:29:e9:6a:38:7b:
                    98:56:60:c8:e3:c9:86:01:81:0b:f4:bb:63:d1:05:
                    4b:09:b2:5e:73:cb:82:39:70:9a:1d:b0:96:b5:94:
                    96:16:85:55:b2:10:b6:c9:1b:c9:30:8e:0c:c6:2a:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F6:B4:B5:39:75:DF:14:85:E3:40:69:F8:54:9D:C2:60:99:AA:11
            X509v3 Authority Key Identifier:
                keyid:6F:18:4C:05:E9:A6:8E:F8:ED:5B:07:7D:11:D0:A9:D9:30:84:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:82:26:88:44:d2:23:9e:2f:48:6e:c2:1d:41:c5:c4:51:
         fa:cf:d5:b0:d5:91:0e:06:e1:6f:4c:e0:fc:17:d7:5d:72:cc:
         0b:46:76:17:0d:76:81:cc:b9:60:58:52:bf:8e:f4:fb:5f:4c:
         51:87:8a:f1:b9:1c:68:69:fc:8b:07:d8:fc:32:6b:ef:02:75:
         f6:db:fd:be:db:f1:fd:2e:b6:d8:9c:e1:17:5f:23:8c:72:b3:
         86:27:d5:2f:ac:34:9f:d7:a2:79:40:a9:51:a4:e9:15:fe:5f:
         41:f0:98:67:ff:e4:ce:ce:e3:0d:b7:1c:02:e8:7e:a0:b6:56:
         29:e0:d4:a7:a8:bc:34:cd:7e:a2:cd:a9:44:b8:8a:80:8a:e7:
         c1:f7:07:58:6f:3f:2f:82:fe:05:fb:89:d0:21:7d:c9:a9:a6:
         d6:20:bb:a0:1a:23:46:91:bb:d3:f4:19:b5:8e:11:6d:ea:cb:
         f0:06:ae:b1:47:4f:7d:d4:78:c7:ae:a6:78:69:5c:3f:93:be:
         b6:12:63:51:5c:e1:99:c6:99:ae:47:04:f2:8f:ef:e2:86:ec:
         b3:ac:6a:58:7b:4b:06:75:a4:32:6e:ee:c4:fa:d5:ce:73:56:
         5f:3a:64:5b:c0:a4:c1:a1:3f:92:c1:ce:68:5c:b1:65:ca:fa:
         d3:6f:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----