Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft
File:                     F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft (raw, json)
Hash identifier:          88pbIbf65UJQ5/+3zT9myrxKVmpRvHUCX7TuUEmfti8=
Subject key identifier:   82:A3:E9:58:72:F0:75:02:06:18:B0:D7:66:8A:B4:97:81:F1:8A:D6
Authority key identifier: F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
Certificate issuer:       /CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
Certificate serial:       773BFCF2573C41198FAA8992701E635308E0F099
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft
Manifest number:          20
Signing time:             Thu 24 Apr 2025 20:03:53 +0000
Manifest this update:     Thu 24 Apr 2025 19:58:53 +0000
Manifest next update:     Fri 25 Apr 2025 21:03:53 +0000
Files and hashes:         1: F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.crl (hash: X6bYcUw/01LhZtoBDD6sS9hfoZL1eVXruCmhMkQ3jEk=)
                          2: 326130363a396634303a313a3a2f34382d3438203d3e20323133373037.roa (hash: n27iqAXuEam/zakDHlq3DR1FmT6AVTRE8CLqIku5Ff8=)
                          3: 3230322e35302e35332e302f32342d3234203d3e20323133373037.roa (hash: iaFeacRadeJFe1GETpDvF5UZqc5zJysNy36E46llZNg=)
                          4: 326130363a396634303a3a2f34382d3438203d3e20323133373037.roa (hash: RxP3G9Dz65dSnJ+P11VF2MeHIurw059gZkJBqC2EPl8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3b:fc:f2:57:3c:41:19:8f:aa:89:92:70:1e:63:53:08:e0:f0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
        Validity
            Not Before: Apr 24 19:58:53 2025 GMT
            Not After : Apr 25 21:03:53 2025 GMT
        Subject: CN=82A3E95872F075020618B0D7668AB49781F18AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:59:21:39:e6:7c:44:12:01:24:41:12:42:
                    d5:59:ba:99:ff:6f:e7:50:3c:41:e9:96:b3:01:dd:
                    89:05:b9:6c:93:07:3b:55:0d:83:fe:da:22:6e:f6:
                    e1:bd:09:44:72:12:cf:07:f8:f0:6c:f9:53:56:f8:
                    1f:36:8e:19:db:96:32:9f:db:75:62:de:31:37:f3:
                    d9:00:16:69:d7:51:a2:32:23:57:40:d0:5c:53:66:
                    d6:c9:d6:da:6f:ba:8f:2a:db:92:35:29:7d:fd:27:
                    cc:10:da:0c:6c:9c:93:b8:88:f1:85:97:6c:40:65:
                    27:d5:c1:02:6b:30:47:6c:00:75:3e:5e:39:c4:3c:
                    92:ba:be:e8:f4:8e:b5:da:51:ee:6e:6f:45:1d:19:
                    e6:ae:67:4b:89:fa:6a:e6:12:70:95:f5:70:8f:e5:
                    44:47:c8:92:29:ea:24:b0:d7:1d:63:d1:53:98:d8:
                    6a:83:0c:c1:cb:13:55:97:ff:32:26:3d:c8:e0:50:
                    f7:e4:0c:6b:b0:d6:bf:68:9e:51:8f:88:20:0d:4d:
                    38:a1:91:64:5f:be:28:e2:dd:87:d7:a3:a6:00:e5:
                    02:17:4e:f0:c4:5d:71:94:35:0f:b8:98:6e:0c:2d:
                    47:5c:69:d1:1b:13:27:c7:ce:66:d7:c1:20:c8:e8:
                    9b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A3:E9:58:72:F0:75:02:06:18:B0:D7:66:8A:B4:97:81:F1:8A:D6
            X509v3 Authority Key Identifier:
                keyid:F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:04:64:30:56:7a:47:d5:8f:3c:23:bb:08:8f:31:cc:df:05:
         4c:65:1e:e0:35:e1:86:56:63:0e:90:bd:ed:ad:29:ce:b9:ef:
         4e:05:86:36:c1:6b:30:8c:cd:78:e7:a8:88:ab:ef:c8:af:e1:
         8f:76:48:aa:d6:14:6a:4c:e7:c1:fa:b9:b6:a7:95:0f:07:a8:
         76:61:b5:44:a5:87:3b:14:b7:1f:8e:5c:77:7b:c6:8c:17:0e:
         63:73:cb:36:29:46:77:9f:db:46:0c:af:85:b2:b9:d7:2e:4c:
         1f:5e:87:8f:b1:95:0d:24:11:e8:0d:e1:18:da:7a:66:47:15:
         83:86:1e:2f:ec:82:2c:e4:81:a6:24:71:3e:29:54:e5:f5:e9:
         e3:b1:a0:ea:69:1e:f4:38:4e:88:9c:4f:7c:e5:2b:22:20:8a:
         e4:02:bd:d6:4b:14:21:ab:4a:12:71:b2:98:85:ae:2c:dd:09:
         01:67:4b:5e:d1:3c:93:84:5c:a5:2e:48:4a:3a:21:05:b6:1f:
         76:55:87:b2:2a:73:51:b4:8d:ad:bc:0d:8f:fd:26:c4:63:bf:
         f2:df:33:68:f0:4f:0a:84:7f:87:99:35:8f:22:27:ac:d3:f4:
         8d:45:4e:34:f3:1e:74:43:2d:05:ab:d6:bc:e5:f3:34:f7:9b:
         0e:0c:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----