Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft
File:                     81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft (raw, json)
Hash identifier:          kpY/KytwbB4r4U20X7N0iK1YngVd9jeiX1H2AN9wrro=
Subject key identifier:   81:DC:EC:BC:59:9E:16:D2:AF:9D:64:7B:D8:BF:3B:BD:2D:59:AC:F7
Authority key identifier: 81:E2:18:87:4C:71:49:A0:F1:BC:56:CD:BE:C9:F9:4B:F5:9C:20:4F
Certificate issuer:       /CN=81E218874C7149A0F1BC56CDBEC9F94BF59C204F
Certificate serial:       204B054A087EAF0664371EDFBCE6BDC8AA472F77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft
Manifest number:          0108
Signing time:             Fri 31 Jan 2025 03:38:39 +0000
Manifest this update:     Fri 31 Jan 2025 03:33:39 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:39 +0000
Files and hashes:         1: 326131343a373538313a366664303a3a2f34342d3634203d3e20323135393334.roa (hash: W0J6pGpY7USt3uOGn+2U/+zzKb37zNSvY+tzxs3qCuc=)
                          2: 81E218874C7149A0F1BC56CDBEC9F94BF59C204F.crl (hash: 3wbPVgHNmWfS7HW9s2/iG5ccwAIUXj1wGb4nfKCxDXQ=)
                          3: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BgYqorJS3JMSFw9edwIe+WRFHvfHgPoI33vzwRUQxGM=)
                          4: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: U0rfiUq9YDTkYI4V420VpJi+Erpt4ClH+3f2ybSKabQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4b:05:4a:08:7e:af:06:64:37:1e:df:bc:e6:bd:c8:aa:47:2f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E218874C7149A0F1BC56CDBEC9F94BF59C204F
        Validity
            Not Before: Jan 31 03:33:39 2025 GMT
            Not After : Feb  1 06:00:39 2025 GMT
        Subject: CN=81DCECBC599E16D2AF9D647BD8BF3BBD2D59ACF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:22:bf:41:43:01:b8:ae:a3:ea:29:59:95:
                    23:04:c9:7b:07:6a:98:5d:18:ed:0e:1c:10:aa:bb:
                    5b:3a:83:22:c6:4b:a6:b6:b1:fc:ce:2a:f6:da:ff:
                    c6:50:dc:b4:fc:01:62:de:33:67:5f:3e:dc:aa:dc:
                    06:61:5f:d7:48:30:74:9b:d1:70:e0:d7:4f:99:4c:
                    54:66:53:e2:69:6a:f5:8b:03:9e:a7:e5:1d:7d:09:
                    66:80:0e:43:6f:fc:a8:bb:66:b9:49:ff:56:48:db:
                    9c:8b:8b:ff:08:2a:34:5a:7a:86:24:70:d0:8a:09:
                    a3:fd:09:37:5c:09:b9:79:1f:8c:29:86:89:2d:c8:
                    d8:a8:48:eb:06:18:9f:cb:f7:77:6d:a7:5f:9c:fd:
                    ab:74:19:a0:ff:63:dd:80:81:79:f6:f0:2e:4e:c4:
                    d2:6f:c6:71:34:9c:f8:d7:63:f2:cc:e5:fa:39:4e:
                    7a:00:2d:8f:b1:3e:2d:1c:b9:f7:b6:a6:23:0b:6c:
                    6f:bc:eb:e9:8b:21:43:13:6d:22:a7:bf:80:9d:20:
                    d2:bd:32:49:19:a2:e5:18:af:cb:8f:8f:4e:4e:a3:
                    50:99:31:78:6d:37:f7:2f:26:57:af:ab:5e:9a:5d:
                    5c:ab:5f:88:b9:0a:b8:2a:28:69:d1:93:76:ac:89:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DC:EC:BC:59:9E:16:D2:AF:9D:64:7B:D8:BF:3B:BD:2D:59:AC:F7
            X509v3 Authority Key Identifier:
                keyid:81:E2:18:87:4C:71:49:A0:F1:BC:56:CD:BE:C9:F9:4B:F5:9C:20:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:49:15:1c:cd:43:6f:fa:b2:0e:7b:df:8e:c0:f7:73:c3:6a:
         3a:21:0b:2c:5a:5c:6a:d0:87:d6:5f:64:b0:df:67:99:c5:46:
         b7:e6:67:ef:9a:7a:1e:2d:2c:e2:80:71:3f:c5:a8:12:52:2c:
         6a:3c:d8:0a:5e:a4:f2:5f:65:de:f9:fc:25:be:a8:c5:20:be:
         93:95:63:69:35:4c:94:75:5d:f7:0d:39:43:d3:99:b0:10:05:
         3b:2f:6b:62:cf:3a:e6:f6:3f:c6:43:35:89:b0:d9:06:05:5f:
         c3:fe:aa:67:a3:ec:b2:d8:e5:3d:ca:ab:e8:23:10:d1:79:92:
         0b:59:b1:fa:58:3d:a3:28:af:0b:31:25:b7:36:5e:f1:97:e8:
         e3:34:01:32:49:02:6c:f0:a6:51:f4:11:4d:54:22:9a:38:c3:
         f8:64:d2:6b:e7:d7:d0:da:c1:85:4b:fe:3b:9d:67:23:59:55:
         25:42:82:9e:6d:fa:5a:91:a7:53:b5:d9:7b:f8:0c:ca:a1:6d:
         ef:c6:52:e1:f4:fa:23:6d:cb:a4:96:a7:36:93:57:83:0b:ba:
         f6:ba:34:79:ef:9c:31:4d:10:10:1e:f1:8e:e2:10:a6:54:14:
         ea:18:1a:36:9d:d9:53:1a:68:7a:05:cc:ff:21:30:cb:96:81:
         6c:80:13:5a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUIEsFSgh+rwZkNx7fvOa9yKpHL3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFFMjE4ODc0QzcxNDlBMEYxQkM1NkNEQkVDOUY5NEJG
NTlDMjA0RjAeFw0yNTAxMzEwMzMzMzlaFw0yNTAyMDEwNjAwMzlaMDMxMTAvBgNV
BAMTKDgxRENFQ0JDNTk5RTE2RDJBRjlENjQ3QkQ4QkYzQkJEMkQ1OUFDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBiK/QUMBuK6j6ilZlSMEyXsH
aphdGO0OHBCqu1s6gyLGS6a2sfzOKvba/8ZQ3LT8AWLeM2dfPtyq3AZhX9dIMHSb
0XDg10+ZTFRmU+JpavWLA56n5R19CWaADkNv/Ki7ZrlJ/1ZI25yLi/8IKjRaeoYk
cNCKCaP9CTdcCbl5H4wphoktyNioSOsGGJ/L93dtp1+c/at0GaD/Y92AgXn28C5O
xNJvxnE0nPjXY/LM5fo5TnoALY+xPi0cufe2piMLbG+86+mLIUMTbSKnv4CdINK9
MkkZouUYr8uPj05Oo1CZMXhtN/cvJlevq16aXVyrX4i5CrgqKGnRk3asiXrrAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUgdzsvFmeFtKvnWR72L87vS1ZrPcwHwYDVR0j
BBgwFoAUgeIYh0xxSaDxvFbNvsn5S/WcIE8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDlmNzEwMjMtOTA0OS00ZWNiLWE4YTUtN2YwOGQ4ZWFk
Njc2LzEvODFFMjE4ODc0QzcxNDlBMEYxQkM1NkNEQkVDOUY5NEJGNTlDMjA0Ri5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84MUUyMTg4NzRDNzE0OUEwRjFCQzU2Q0RC
RUM5Rjk0QkY1OUMyMDRGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzA5ZjcxMDIzLTkwNDktNGVjYi1hOGE1LTdmMDhkOGVhZDY3Ni8xLzgxRTIxODg3
NEM3MTQ5QTBGMUJDNTZDREJFQzlGOTRCRjU5QzIwNEYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnSRUc
zUNv+rIOe9+OwPdzw2o6IQssWlxq0IfWX2Sw32eZxUa35mfvmnoeLSzigHE/xagS
UixqPNgKXqTyX2Xe+fwlvqjFIL6TlWNpNUyUdV33DTlD05mwEAU7L2tizzrm9j/G
QzWJsNkGBV/D/qpno+yy2OU9yqvoIxDReZILWbH6WD2jKK8LMSW3Nl7xl+jjNAEy
SQJs8KZR9BFNVCKaOMP4ZNJr59fQ2sGFS/47nWcjWVUlQoKebfpakadTtdl7+AzK
oW3vxlLh9Pojbcuklqc2k1eDC7r2ujR575wxTRAQHvGO4hCmVBTqGBo2ndlTGmh6
Bcz/ITDLloFsgBNa
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:52 2025 by rpki-client