Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          zjq5mC61QaTODBnMEX13ycgERSrWMM8LzFsKHeAMGyE=
Subject key identifier:   4F:2F:DA:7E:90:5B:FC:87:DF:5A:A2:0B:C3:44:73:7E:D1:B3:9D:BB
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       12D21CEB1D3F69CCC69049572A27104C5682375A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          03E4
Signing time:             Fri 31 Jan 2025 08:45:57 +0000
Manifest this update:     Fri 31 Jan 2025 08:40:57 +0000
Manifest next update:     Sat 01 Feb 2025 09:11:57 +0000
Files and hashes:         1: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=)
                          2: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=)
                          3: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: C+rnS1N90XllK5zNsTS7BABvt+F1Eguda6JDHGT4AHg=)
                          4: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=)
                          5: 38312e32372e39362e302f32302d3230203d3e203234383531.roa (hash: XazNaC+hpMVCJhcoP3zL+9MGci5nPbb/SboV8YXiO2c=)
                          6: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=)
                          7: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=)
                          8: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (hash: ZdZRlvPz8E9OObfHOShlKU2uuHjCBKEbQURGTOBsuE8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:1c:eb:1d:3f:69:cc:c6:90:49:57:2a:27:10:4c:56:82:37:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: Jan 31 08:40:57 2025 GMT
            Not After : Feb  1 09:11:57 2025 GMT
        Subject: CN=4F2FDA7E905BFC87DF5AA20BC344737ED1B39DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5b:04:aa:e3:5a:90:ff:0e:d6:81:a8:c7:2b:
                    e6:c7:1e:4a:25:fa:cf:af:ac:b0:50:58:c4:81:94:
                    0d:58:6e:ba:98:d2:27:0b:0a:d3:69:c4:51:69:1d:
                    87:e9:80:2b:b6:2a:42:bf:d4:54:55:43:a1:99:96:
                    76:65:eb:7c:b0:30:66:ed:3a:d6:d1:20:9f:3a:ff:
                    ef:74:f0:27:59:ea:8f:94:3f:e1:71:f8:5d:2a:a9:
                    7d:0a:49:99:b9:35:1c:d9:3e:90:cb:6f:d0:cd:9a:
                    fd:32:31:c6:82:b2:fd:fb:b0:5b:29:ce:bf:93:09:
                    3c:e7:c8:19:aa:2b:c7:20:69:b8:2c:e5:0f:c6:8e:
                    8f:98:33:9e:d9:00:0b:a6:34:be:68:eb:31:dd:61:
                    4c:86:7c:56:0e:39:8a:2c:bf:50:9f:b4:e1:0a:7b:
                    49:2c:28:ee:37:09:a6:32:32:06:37:fc:9c:8c:e4:
                    17:6d:18:e3:af:29:83:c8:a8:43:63:44:15:d6:b1:
                    14:2c:7b:15:18:14:d1:69:7d:4a:c2:02:e9:bd:af:
                    c7:97:cd:83:7b:c7:52:90:b9:1f:63:d5:b3:fe:3d:
                    5b:99:75:08:c9:df:3b:ff:89:96:51:83:aa:6e:34:
                    a6:d8:df:eb:2e:30:75:13:a0:0f:01:1b:84:91:35:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2F:DA:7E:90:5B:FC:87:DF:5A:A2:0B:C3:44:73:7E:D1:B3:9D:BB
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:72:e5:d6:1d:6c:2a:92:14:48:cf:04:e0:e1:e6:16:d4:90:
         89:5c:e7:0f:36:a1:a5:36:5f:d5:60:ce:72:16:75:27:ed:b9:
         6d:cc:62:90:34:fd:35:14:3b:3a:06:4b:f9:70:eb:4e:f1:58:
         70:f8:2e:02:6f:eb:81:58:7c:39:68:27:71:9f:e1:a0:6c:44:
         3b:b9:f6:21:0f:46:c3:9d:33:1a:fa:35:9b:c5:3a:c0:43:47:
         36:45:46:74:2f:e5:ef:0c:5d:c9:14:26:f2:7b:62:a2:9b:02:
         61:9b:0a:1b:f8:a4:35:7b:81:ca:5d:83:b1:c9:c8:7b:ce:d7:
         61:ca:71:fe:d0:25:e4:d3:46:57:45:e6:11:ba:8a:80:32:f9:
         d9:a2:90:27:4d:7f:ba:66:d0:e2:cf:8c:c9:b1:70:b6:e2:9b:
         5f:71:00:1c:f7:45:69:ef:72:c3:f9:55:97:0c:c9:64:fb:6f:
         11:62:a9:be:d8:e5:52:b9:1e:07:f6:b1:44:c2:68:77:af:0b:
         16:86:17:09:da:7a:a9:30:44:09:28:8c:2e:3f:6e:b8:6b:e6:
         fd:47:b8:48:05:59:36:d8:25:1f:fa:f8:f8:54:42:9d:63:b0:
         da:d0:c5:ce:9c:c6:a8:cb:58:20:a4:3c:8c:5a:1c:33:d1:6d:
         02:69:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:13:53 2025 by rpki-client