Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
File:                     F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json)
Hash identifier:          fZo/6rnUp4TW7PeUCH+R7xaccGa0ilpFF3WDJ2sqet4=
Subject key identifier:   FE:69:B5:2B:3B:D0:8D:7C:2A:11:20:B9:59:C9:E3:73:F6:0B:1F:C5
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Certificate issuer:       /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial:       03392E3F7BCF4DCD6FAAA893EDCCFE72DF43F11E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
Manifest number:          045A
Signing time:             Fri 31 Jan 2025 05:27:08 +0000
Manifest this update:     Fri 31 Jan 2025 05:22:08 +0000
Manifest next update:     Sat 01 Feb 2025 06:05:08 +0000
Files and hashes:         1: 326130613a363034303a313165303a3a2f34332d3438203d3e203136353039.roa (hash: 7KM8pV+bRFQ+nSRC7wE98lIHJ6EuNDV7Y4EsUdbo+nk=)
                          2: 326130613a363034303a313165303a3a2f34332d3438203d3e203134363138.roa (hash: BDvnLpOERWIDq8JIXH11OjnaFN1OB1EXqxx5QPZseLQ=)
                          3: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: nI2UD9fDSVIJRfKLsgZhuHiK2TZuca7Zg4we183qe8s=)
                          4: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: V0mvV0hNihc/jKb8hU2/V8roZXN+5IVqU0BoJ9bcQys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:39:2e:3f:7b:cf:4d:cd:6f:aa:a8:93:ed:cc:fe:72:df:43:f1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
        Validity
            Not Before: Jan 31 05:22:08 2025 GMT
            Not After : Feb  1 06:05:08 2025 GMT
        Subject: CN=FE69B52B3BD08D7C2A1120B959C9E373F60B1FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:c0:86:62:0b:e4:9d:b6:04:7d:c9:fc:24:
                    be:f3:ee:cc:a0:b5:1f:2b:d1:88:34:e7:eb:9f:4a:
                    ea:86:0d:f7:ca:c0:c3:de:d8:b0:5e:6a:1a:bd:dc:
                    9f:e6:fc:b1:fa:23:4f:0c:e5:ba:8f:15:7f:5a:77:
                    53:7d:fe:69:d5:a1:03:3f:5a:6f:e1:7c:65:32:d7:
                    1b:a4:9e:2d:74:c7:35:8d:ba:b4:f0:aa:e7:b4:e0:
                    b9:c8:e8:2e:ce:c8:dd:b5:d3:bb:ac:13:93:af:cd:
                    bf:58:18:33:bb:cb:51:cd:78:4d:1d:38:7f:17:9c:
                    ea:a8:d0:f3:16:5b:61:49:cd:86:4c:e7:f6:41:d2:
                    4f:4b:c0:51:41:3b:05:25:24:44:8c:3f:56:9f:7f:
                    3d:ec:b5:21:86:63:e7:60:f3:c1:d8:1d:74:a4:95:
                    99:40:f8:52:7f:67:17:a3:55:c5:c5:d3:79:cc:f1:
                    55:c5:fe:3d:78:aa:20:f1:9b:75:2b:fe:7a:e2:29:
                    25:e8:79:d3:0d:0e:95:fc:ee:be:d3:14:d2:64:13:
                    46:84:1e:53:d3:b3:c7:2d:40:19:85:23:bb:f5:11:
                    c6:a5:5d:1a:e3:01:36:aa:99:33:6b:c6:9a:20:32:
                    d5:76:ee:2c:5d:0f:49:31:60:94:8e:9c:b0:9b:57:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:B5:2B:3B:D0:8D:7C:2A:11:20:B9:59:C9:E3:73:F6:0B:1F:C5
            X509v3 Authority Key Identifier:
                keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8c:04:81:97:57:d6:8f:2b:f4:ee:ad:e3:68:f6:58:5d:73:
         2f:57:cc:08:0e:64:35:77:a6:b6:4a:59:e7:1a:da:4a:83:f0:
         7b:cb:3f:d9:c0:36:bf:4c:2a:47:2a:0c:ea:bb:20:35:a7:77:
         a5:c6:28:a8:3e:08:60:fc:b6:62:f3:f2:53:81:e0:ef:de:d4:
         67:c3:cb:b4:3c:35:d4:47:85:ce:65:f4:54:cf:91:e2:9d:df:
         be:f7:3f:9d:8c:ce:f7:bc:0c:31:a9:10:b1:5e:ce:7c:76:eb:
         27:45:65:5b:2e:d4:ac:9a:59:2b:cb:1a:6b:e5:d2:11:44:a0:
         66:62:66:a1:54:60:c8:a0:b7:d2:fd:0b:9c:dd:c9:01:d8:f8:
         e3:39:66:c9:92:f3:7a:84:9c:da:35:3f:f1:7c:20:0c:62:85:
         04:3c:8d:65:16:cb:28:44:3c:bf:48:f1:3f:01:f6:e2:1b:cf:
         35:fd:b3:9c:b2:be:41:6d:9f:fb:0e:95:e5:84:6c:1a:3b:0f:
         8d:8c:73:97:09:33:ca:8f:7b:fa:39:e0:82:af:8b:20:85:40:
         79:96:46:b8:59:1e:6b:53:83:b2:7f:4d:3c:56:33:8b:e8:e8:
         3c:4a:d0:c2:fd:f8:b2:17:cc:f4:b4:a7:88:5a:cf:10:b9:19:
         1f:0a:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:53:48 2025 by rpki-client