Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/0/A3ECAB0E01320FE1011B510681851BB12AA3274D.mft
File:                     A3ECAB0E01320FE1011B510681851BB12AA3274D.mft (raw, json)
Hash identifier:          tKPjNqgkV/SUHEw40MRUzy+JgDM1r7O2YhSvLWBrZXE=
Subject key identifier:   24:2B:A1:5D:88:51:D0:D9:A2:FC:96:15:8A:29:71:03:BB:3F:70:D9
Authority key identifier: A3:EC:AB:0E:01:32:0F:E1:01:1B:51:06:81:85:1B:B1:2A:A3:27:4D
Certificate issuer:       /CN=6916ebca588f26bb452c9e6c3a25a758135ca68ded638ec885
Certificate serial:       120DF839E59BF5373AAB47CD2942E17E0E0CDB07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca588f26bb452c9e6c3a25a758135ca68ded638ec885.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/0/A3ECAB0E01320FE1011B510681851BB12AA3274D.mft
Manifest number:          04
Signing time:             Thu 03 Jul 2025 03:57:26 +0000
Manifest this update:     Thu 03 Jul 2025 03:52:26 +0000
Manifest next update:     Fri 04 Jul 2025 06:26:26 +0000
Files and hashes:         1: A3ECAB0E01320FE1011B510681851BB12AA3274D.crl (hash: dgqi32r5s6uTk2ZcVMH3BCkeTVjmCwf5AJn3nqYx3ls=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0d:f8:39:e5:9b:f5:37:3a:ab:47:cd:29:42:e1:7e:0e:0c:db:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca588f26bb452c9e6c3a25a758135ca68ded638ec885
        Validity
            Not Before: Jul  3 03:52:26 2025 GMT
            Not After : Jul  4 06:26:26 2025 GMT
        Subject: CN=242BA15D8851D0D9A2FC96158A297103BB3F70D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:3b:73:8d:30:70:3a:2d:e7:7e:5f:8d:ba:
                    26:b8:83:8b:da:f7:f1:d7:a7:22:27:7d:28:1c:b1:
                    36:12:06:2f:1c:ad:50:04:c8:c1:21:6c:4f:6b:00:
                    9f:b4:46:a4:b7:47:bb:bc:86:c5:61:6f:6b:40:a5:
                    fc:4b:b8:32:34:e6:1c:7d:18:a0:05:dc:67:ae:a8:
                    09:5d:c8:83:c8:6e:8f:41:10:92:28:fe:aa:37:0f:
                    bb:f6:68:35:8b:50:b0:97:4e:2f:28:c1:4a:3b:fa:
                    96:6f:43:fe:fa:49:f9:d6:eb:c1:3d:b6:9a:34:f4:
                    fa:72:14:2f:06:90:f4:e9:31:b7:15:6a:eb:7c:66:
                    e7:4e:5e:72:bf:99:89:9e:e2:52:25:4c:1b:df:82:
                    7c:4c:9b:d3:82:3c:45:df:e6:80:66:56:e9:b3:8f:
                    2f:49:b7:e9:c0:1f:0f:1c:9a:cd:bf:2a:91:bf:e5:
                    52:8f:52:9e:fa:98:bf:fb:8e:19:5e:12:82:c0:51:
                    08:ac:17:85:a1:9d:91:1e:77:19:48:93:49:d9:29:
                    1a:21:48:35:c4:50:77:56:b0:68:22:eb:2a:d6:c6:
                    42:cf:0f:2d:0c:17:6a:50:e8:f4:99:bc:42:94:4a:
                    3f:94:bb:92:c4:e8:c0:1a:34:52:a3:91:a0:ed:23:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:A1:5D:88:51:D0:D9:A2:FC:96:15:8A:29:71:03:BB:3F:70:D9
            X509v3 Authority Key Identifier:
                keyid:A3:EC:AB:0E:01:32:0F:E1:01:1B:51:06:81:85:1B:B1:2A:A3:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/0/A3ECAB0E01320FE1011B510681851BB12AA3274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca588f26bb452c9e6c3a25a758135ca68ded638ec885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/0/A3ECAB0E01320FE1011B510681851BB12AA3274D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:d2:b6:b0:75:55:e6:fb:89:30:bc:ff:f1:05:0f:c4:09:
         23:1c:98:88:ee:b1:4a:6e:37:4a:f9:9d:75:98:33:82:17:8c:
         e5:e7:7c:44:f1:d4:32:24:4e:7a:4e:01:ce:e8:f5:d3:ad:11:
         68:4f:06:fb:a1:63:61:51:52:c8:43:31:71:d8:ed:57:17:fb:
         b2:a8:34:be:fd:7f:75:3b:db:d3:6f:f2:d5:fc:9e:a1:59:77:
         3a:03:62:36:84:d8:df:c0:30:bb:cc:45:cf:93:f7:ca:67:39:
         d2:58:eb:91:37:ad:37:83:ee:ca:26:c6:31:da:b7:95:63:06:
         01:9b:9f:f0:43:1c:d0:b7:ed:ba:ff:83:b7:39:77:de:c4:6d:
         54:ab:f6:06:3f:5d:f8:98:45:d0:e4:06:9e:2f:f6:d7:42:b4:
         48:0b:78:e4:3e:df:72:28:c2:d2:5c:6f:66:2f:aa:29:1a:b8:
         28:c9:4c:35:7c:e7:6c:db:50:0b:03:68:e0:f0:c4:bf:b8:ae:
         a6:01:10:ce:ce:d0:db:0c:87:ba:63:49:10:d1:4f:76:1e:23:
         78:42:9b:71:13:3d:91:74:5f:c0:3b:02:8f:e6:85:c3:3f:91:
         a3:65:cb:0d:e9:65:38:be:c0:91:01:08:00:85:9e:26:0b:1f:
         79:f3:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----