Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
File:                     64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json)
Hash identifier:          WVvoq4/y/P4LBaTUg/F2RV5tnLTKxkzakFRgjMcncJM=
Subject key identifier:   3D:5A:D7:90:B1:DC:C5:B4:BB:7F:64:D1:95:3C:A2:AA:66:2F:5D:D9
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Certificate issuer:       /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial:       47B906546B9CF64651A10161BCE77FD3AA4277E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
Manifest number:          0203
Signing time:             Fri 28 Mar 2025 19:49:01 +0000
Manifest this update:     Fri 28 Mar 2025 19:44:01 +0000
Manifest next update:     Sat 29 Mar 2025 20:55:01 +0000
Files and hashes:         1: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=)
                          2: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: NmrO4t1BO0eK0hIMULQGDlatpBJpT48XwcjvttuHKN8=)
                          3: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=)
                          4: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: 7wQrqMox9QAmR2vQp8q5VdavN4YrXCFJ3Bes/IozaAU=)
                          5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b9:06:54:6b:9c:f6:46:51:a1:01:61:bc:e7:7f:d3:aa:42:77:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
        Validity
            Not Before: Mar 28 19:44:01 2025 GMT
            Not After : Mar 29 20:55:01 2025 GMT
        Subject: CN=3D5AD790B1DCC5B4BB7F64D1953CA2AA662F5DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:35:04:2e:5b:c3:17:7c:02:e6:7c:99:63:
                    35:42:79:7c:64:06:16:6b:ad:59:8a:be:6e:70:a7:
                    04:5d:0c:ab:3c:df:be:c2:b2:30:85:73:1a:f3:5c:
                    14:c1:1b:a5:b0:94:c2:ea:2d:2d:a5:82:1b:15:5f:
                    07:b8:ab:7e:56:19:a4:ac:96:ec:a6:7a:64:92:79:
                    0a:1d:b8:2b:e2:b2:d5:3f:09:30:4d:0e:ff:43:93:
                    20:23:26:95:5e:3c:de:1f:f6:8d:c3:e0:25:77:97:
                    b1:26:07:70:1d:22:3e:24:a0:3c:ab:e7:fb:e9:12:
                    32:69:37:26:1e:b9:63:ce:6c:a4:eb:47:f7:69:e2:
                    c5:8a:4f:74:36:35:34:9c:a5:3f:3b:36:e2:5e:9f:
                    06:7a:c4:72:10:a9:9a:63:84:72:59:81:ed:70:ed:
                    66:52:22:ad:69:7c:0e:ab:35:af:3b:32:55:ce:48:
                    4c:c6:75:77:11:95:d4:49:3b:61:1c:93:0d:64:7e:
                    6e:a8:f2:ce:e7:18:e8:12:48:b3:bf:d8:d4:3d:83:
                    58:b0:97:e2:4d:e0:ad:58:68:8f:3a:84:ec:6f:4f:
                    00:14:fb:86:14:dd:c7:76:94:c4:0c:fb:e9:a0:78:
                    02:65:fb:3d:6f:f3:70:6c:a6:35:b0:f2:60:ef:3b:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5A:D7:90:B1:DC:C5:B4:BB:7F:64:D1:95:3C:A2:AA:66:2F:5D:D9
            X509v3 Authority Key Identifier:
                keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:48:df:7f:da:54:f3:91:f9:d6:94:2b:f4:04:b7:b5:56:
         7e:3e:0e:40:b8:62:06:52:dd:0c:b5:29:b8:77:f0:4c:fd:d0:
         04:60:d7:be:55:3c:d7:1c:bf:f8:1f:37:be:d9:60:1f:6a:43:
         05:ba:3a:08:b1:c3:bd:23:6e:b9:53:f7:2d:9c:a2:f4:ba:dc:
         4b:66:e1:a9:87:98:fd:91:e5:1e:9a:fe:f5:be:ea:80:b7:1e:
         6e:b6:78:1f:63:1f:fc:51:c0:16:d5:99:59:44:72:5e:0c:6e:
         d1:0e:20:a4:e2:96:d4:b4:6d:61:fc:2a:e6:5f:04:41:82:49:
         dd:13:49:0c:ff:d9:59:de:1f:c9:2a:23:33:51:71:bf:64:3c:
         c0:8b:f8:53:52:1d:d3:76:b6:7f:d5:23:1d:48:fc:82:5c:88:
         22:15:f8:15:9f:15:c7:7f:89:85:65:b6:89:a3:70:78:0c:ee:
         93:76:f1:35:78:9c:08:c4:99:85:cf:c2:6a:e1:52:4f:46:e6:
         16:31:9e:7f:93:b8:97:a0:93:60:ea:15:05:79:10:12:d0:9a:
         15:60:c4:df:a8:f0:44:ac:7b:19:8f:32:db:84:a8:16:8a:2a:
         80:9f:31:bf:6d:0a:ea:31:1b:03:9b:ba:d1:8c:5a:17:92:6e:
         5f:74:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:42:29 2025 by rpki-client