Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
File:                     34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft (raw, json)
Hash identifier:          fD8kVwXYEE1mMiTGRw0E97aSsI2YSxVnR0O0mt4QUgM=
Subject key identifier:   95:A2:2A:FD:3D:61:8F:C5:D2:65:46:FE:00:4A:4C:3C:7C:B3:91:4E
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Certificate issuer:       /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial:       05CD8829056683371ADD00F8A8E004432CA38CF9
Authority info access:    rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
Manifest number:          0184
Signing time:             Sat 06 Jan 2024 12:17:06 +0000
Manifest this update:     Sat 06 Jan 2024 12:12:06 +0000
Manifest next update:     Sun 07 Jan 2024 13:35:06 +0000
Files and hashes:         1: 326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa (hash: sToTGeZMi0VWX8evfppncp9+CfZ8w2nh10Kuc2Gf/Rc=)
                          2: 34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl (hash: qQjKfhSh1UynCc1MoCj2SE9gC5OEr4OITtWNiKEMNCM=)
                          3: 326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa (hash: MrTu7FoatlgPGiKv5BWBxwZ6bvxxg/WNjb3IKxqjgGQ=)
                          4: 326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa (hash: JzNbxiRPW9kNVbt7zJuB+37rSf+ffTn4NEPxozK0Z2U=)
                          5: 326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa (hash: z4su1sebH3eo4gLEgUhTUftwavShwCW0gv0ZtNZ/nOM=)
                          6: 326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa (hash: ZYTFbcOTzuX+EUGqCZvPumEaL43Z1dXUJkPl1U0MvYU=)
                          7: 326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa (hash: K6QoNilfoWfE1aXS19ArlmaD68BmoWkr7n0ab3VITWI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cd:88:29:05:66:83:37:1a:dd:00:f8:a8:e0:04:43:2c:a3:8c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
        Validity
            Not Before: Jan  6 12:12:06 2024 GMT
            Not After : Jan  7 13:35:06 2024 GMT
        Subject: CN=95A22AFD3D618FC5D26546FE004A4C3C7CB3914E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:2e:c6:a2:f6:2e:9f:cc:47:c5:61:99:f5:
                    00:87:85:a5:b9:6e:4e:a1:05:d7:30:b1:27:41:2c:
                    32:13:cf:35:06:fa:50:ae:0a:73:a0:07:e4:01:fd:
                    e1:f5:0f:a6:7b:15:c3:db:89:85:dd:b9:b1:ff:a3:
                    0e:b2:76:fd:8e:f4:1c:37:c5:56:5c:71:b0:60:61:
                    c9:18:43:6f:dd:72:5c:6e:d2:0a:c4:ca:5c:3c:1b:
                    6f:e8:0a:27:5c:b2:32:02:70:d3:ac:7a:bc:d0:0b:
                    53:7f:55:51:65:e2:23:1d:5c:ed:d0:2e:7f:f1:d6:
                    50:a4:f9:40:ee:39:a1:87:92:d7:3d:a2:9b:00:d0:
                    7e:4f:b4:f1:c8:b3:b6:8d:6e:73:2e:cb:ef:74:2f:
                    49:64:7d:26:21:62:c0:37:2b:ef:d1:dd:19:88:1d:
                    c6:6f:49:1b:99:9c:8d:4e:90:6d:2d:16:34:50:a9:
                    fb:84:54:c2:0a:92:68:2a:b7:e9:ae:78:0e:fe:78:
                    8b:45:e8:ba:b9:84:92:7c:7b:71:a7:8d:16:c8:0f:
                    6e:53:c8:f5:2e:b3:50:23:16:a3:da:20:88:d0:01:
                    8b:42:d6:49:e8:53:1f:b6:af:bc:9f:64:92:6e:90:
                    7e:ea:d5:c2:11:64:bd:7b:4d:c2:a9:ae:df:a7:76:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:2A:FD:3D:61:8F:C5:D2:65:46:FE:00:4A:4C:3C:7C:B3:91:4E
            X509v3 Authority Key Identifier:
                keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:3f:53:1b:37:58:b4:b0:f3:d7:87:a1:de:2c:85:d8:f4:
         3c:a4:46:eb:ec:d9:06:17:fa:e9:60:ad:fd:00:69:6b:15:76:
         ef:2a:d3:cf:ca:ce:82:94:81:00:bd:69:5e:8e:b7:96:fc:62:
         10:da:ea:0a:3b:cb:54:06:fb:1d:7d:38:15:6b:25:5f:39:43:
         e8:00:75:78:7a:00:8c:61:4a:9d:e7:e0:a1:2b:8f:ee:a4:20:
         66:fb:3f:d2:23:56:0e:c2:8d:e7:5e:82:7d:0a:9f:3b:8f:e1:
         16:a5:cd:b7:53:84:77:32:fb:93:85:75:a1:2f:12:d9:44:4a:
         1c:4d:60:ca:f9:55:e1:3a:98:b0:33:cc:67:1f:2a:ef:88:35:
         82:b7:35:45:17:ff:32:2a:ad:9f:ff:0d:b1:e0:03:7e:00:af:
         b2:ea:d3:47:5f:cf:32:38:9e:e7:1b:44:33:d5:93:68:4c:58:
         81:ea:1d:d7:4e:46:4c:ed:b2:9d:a2:ad:c0:9b:c0:61:8d:69:
         de:79:85:97:a5:ce:48:f5:21:05:03:52:74:d0:8f:eb:29:91:
         95:b4:7d:f4:6e:be:ce:69:ad:3a:5b:7b:dc:cb:e0:74:5e:74:
         dc:23:dc:a3:7a:d3:a0:7c:d1:1f:89:0c:0a:c3:3e:2a:08:e5:
         ec:ea:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 26 03:59:54 2025 by rpki-client