Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft
File:                     F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft (raw, json)
Hash identifier:          YirKJu+AilTun9TYayArBn0N5KFgox4li/XGQcWJNyc=
Subject key identifier:   B4:0B:FC:74:7F:EC:93:43:92:82:FA:13:B5:7F:63:93:2C:C2:59:83
Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0
Certificate issuer:       /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
Certificate serial:       0F79B660DC424A4A6F0B1FF57CF11449CA7AF9DB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft
Manifest number:          018B
Signing time:             Fri 31 Jan 2025 04:22:20 +0000
Manifest this update:     Fri 31 Jan 2025 04:17:20 +0000
Manifest next update:     Sat 01 Feb 2025 05:59:20 +0000
Files and hashes:         1: F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl (hash: Qbb6B3G9cs9buOJ4LM5Ht1KUYbn394oOWvHl7pevP/c=)
                          2: 326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa (hash: k3np5n3Q94jk1AEUCgIpsYJ425S2HhruwkTMaUrfj9I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:79:b6:60:dc:42:4a:4a:6f:0b:1f:f5:7c:f1:14:49:ca:7a:f9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
        Validity
            Not Before: Jan 31 04:17:20 2025 GMT
            Not After : Feb  1 05:59:20 2025 GMT
        Subject: CN=B40BFC747FEC93439282FA13B57F63932CC25983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:07:39:7e:48:f4:c0:6d:69:75:69:48:f2:
                    d9:1a:bc:0b:2a:d3:79:34:25:47:9f:72:51:de:94:
                    f0:cb:47:b3:56:9a:58:2c:8c:cd:af:ca:a7:e7:41:
                    b5:b7:87:1c:69:13:e1:b0:90:e9:18:46:3c:f4:31:
                    55:69:f5:73:aa:25:65:ee:69:99:42:04:27:93:ad:
                    9d:4e:aa:7b:91:c7:b3:6d:55:e9:bf:1d:96:af:e4:
                    4b:3b:f1:60:b7:52:88:c9:8c:54:10:58:c7:0e:20:
                    d2:3d:e5:88:56:32:3d:ec:9b:d0:2a:21:aa:1a:d6:
                    6a:39:ad:66:9c:cf:a1:6c:b9:5b:fb:9e:1c:66:96:
                    10:ed:cf:8f:88:3e:23:29:f3:d3:87:bf:80:44:dd:
                    20:26:66:ee:d9:de:41:ef:45:f4:5e:d7:05:37:15:
                    b1:9e:b7:0e:3c:b2:0b:cf:2b:6a:81:77:fb:9b:b2:
                    2d:98:02:93:5f:24:db:62:28:95:b5:ea:77:b6:02:
                    0f:49:ff:21:ad:42:98:c8:7a:e9:b5:72:ab:66:47:
                    5a:25:49:d8:41:d6:bf:00:a3:c8:63:cf:82:cf:4d:
                    80:f5:57:0f:33:fa:a3:d8:9c:44:35:7f:82:e8:8c:
                    fc:04:b0:b8:21:03:2f:51:ee:e9:18:c2:05:76:41:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0B:FC:74:7F:EC:93:43:92:82:FA:13:B5:7F:63:93:2C:C2:59:83
            X509v3 Authority Key Identifier:
                keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:1f:86:2c:f1:77:ad:f2:e6:c1:21:22:ab:cb:ff:c3:85:
         3f:d9:92:72:c7:a3:88:15:98:98:a9:40:2f:b7:f7:f5:16:77:
         64:cf:7f:96:34:18:d9:eb:c8:54:e2:41:e4:52:57:59:f8:b1:
         4a:be:4b:a0:3d:ea:38:c5:9d:1e:e6:52:31:bc:52:fd:0e:96:
         a4:d2:a4:13:65:7b:75:f5:ee:f5:3e:f1:6c:67:b9:1c:98:e2:
         6a:e0:24:c9:96:ec:7e:f2:e2:f7:58:69:54:1a:b1:70:bc:17:
         6b:35:8e:a0:2a:ef:34:ab:c0:f5:18:19:27:9e:4e:97:64:4d:
         4b:c7:36:f5:e3:51:2c:57:4d:e9:9f:53:12:36:7b:7f:2d:53:
         3c:b5:6a:de:67:fa:2c:17:ca:2d:5f:aa:c8:47:78:d8:ce:ab:
         33:fe:ad:c2:28:13:9b:a1:90:f2:6e:27:42:91:4b:d2:c9:30:
         a7:31:ba:50:32:93:95:6b:f7:c1:78:1c:44:eb:d7:21:ef:cc:
         83:cf:cb:52:6f:53:53:19:9c:64:ec:98:c4:8e:80:35:86:55:
         60:0a:63:79:47:54:dc:79:f4:92:48:a1:ef:4d:ce:80:43:1c:
         a1:e6:3a:43:82:7d:34:92:6d:f5:96:a9:bd:d8:7a:f3:d4:71:
         33:1a:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:23 2025 by rpki-client