Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.mft
File:                     451E20DA90C6D597951FEC29DF3771EAC47643EE.mft (raw, json)
Hash identifier:          8YWG46+hiEr+xQlmeLHcrer17ZMS4FM7GxYC8MMJpJ4=
Subject key identifier:   CD:C1:E4:7C:9C:52:60:8F:3B:9D:E1:F1:D7:D4:D0:9F:02:AF:78:A8
Authority key identifier: 45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE
Certificate issuer:       /CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
Certificate serial:       53ECA725E6ACCD5860DD5E9CE4B8607ED78713E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.mft
Manifest number:          D9
Signing time:             Fri 31 Jan 2025 15:39:58 +0000
Manifest this update:     Fri 31 Jan 2025 15:34:58 +0000
Manifest next update:     Sat 01 Feb 2025 17:42:58 +0000
Files and hashes:         1: 326130613a363034343a376230303a3a2f34382d3438203d3e20323134373638.roa (hash: hopnfP4ixKItSG6CqL2CJ+Q8Oym3vKVP9EFvxnMVTo8=)
                          2: 326130613a363034343a376230303a3a2f34382d3438203d3e20333937373330.roa (hash: O/Rw+p7pMmcos47GNrfLCXGpbO1Uaqdyp+oyvcrREg8=)
                          3: 326130613a363034343a376230323a3a2f34382d3438203d3e20323134373638.roa (hash: CR7rvXsMnSL0QDx0Xxq2kk+jhYk7murgLpP3U4Y9IXk=)
                          4: 326130613a363034343a376230313a3a2f34382d3438203d3e20333937373330.roa (hash: tzizRr5oc9H1FKMi4FUOAHj60bTi1UhVSoSXHiBF8yY=)
                          5: 326130613a363034343a376230313a3a2f34382d3438203d3e20323134373638.roa (hash: iF8Ye8vJ9K2gVh9mmhftlrMH0DGBAd4nVfgnpVtc6hw=)
                          6: 326130613a363034343a376230333a3a2f34382d3438203d3e20323134373638.roa (hash: yPAHiQMuvisKvZgTuxJWVNcL7IJSeHI4LfepvP7q8Ek=)
                          7: 326130613a363034343a376230343a3a2f34382d3438203d3e20323134373638.roa (hash: g7BoMok3CNGZyPeic31bo7AtqKRI5oXJE88WTCNOgTo=)
                          8: 326130613a363034343a376230343a3a2f34382d3438203d3e20333937373330.roa (hash: oFlaNN8zjfzX/t38JcNKBx+QvJ8/nTSN0K9i6iEVoEQ=)
                          9: 451E20DA90C6D597951FEC29DF3771EAC47643EE.crl (hash: UlaOPSk1UQI6trcHTHILwB0N0iSzsqp111F2XXlIpd0=)
                          10: 326130613a363034343a376230333a3a2f34382d3438203d3e20333937373330.roa (hash: NBg9u8mnevOyYLrFiDXf/8nAs1XqUn/zHoeYANtjVTE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ec:a7:25:e6:ac:cd:58:60:dd:5e:9c:e4:b8:60:7e:d7:87:13:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
        Validity
            Not Before: Jan 31 15:34:58 2025 GMT
            Not After : Feb  1 17:42:58 2025 GMT
        Subject: CN=CDC1E47C9C52608F3B9DE1F1D7D4D09F02AF78A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:74:fe:95:45:a2:e3:bb:91:92:bb:e9:bc:
                    a7:e6:df:87:cc:0c:3a:2d:99:79:6f:17:75:b5:2d:
                    9b:23:35:2a:d3:98:93:f6:a7:6f:b9:e1:7f:2f:a7:
                    f7:ed:6c:06:22:ab:a5:06:f8:79:40:12:c4:7f:48:
                    fd:c2:be:2c:de:17:6d:3c:94:c4:a5:52:b9:28:62:
                    b4:65:f3:7f:8c:58:6d:57:6b:f2:f8:d3:b0:e1:20:
                    1b:9e:6c:15:88:fb:cd:e7:82:8c:37:6a:92:97:54:
                    df:f9:1e:8b:f8:2e:e2:d4:5e:8c:f0:a5:65:67:db:
                    f3:b4:6c:70:80:9c:e8:59:3e:9e:60:b5:2c:5b:88:
                    3f:34:9d:e9:5d:69:ef:fd:86:a5:3c:3e:97:db:4a:
                    ee:f8:86:bc:b2:fc:f2:03:7b:fe:7f:22:85:0b:e8:
                    2a:4b:1a:22:ef:a3:11:1d:83:a3:6f:83:07:9e:bd:
                    1a:50:e4:b1:37:5a:78:0e:5b:4c:ce:8d:9f:dd:2e:
                    34:64:bc:91:f7:e5:3e:b8:64:8b:d7:ec:1f:fb:51:
                    f2:02:65:25:9d:7d:28:be:1b:47:f4:a8:7f:62:75:
                    f4:67:6e:24:24:34:5a:ad:92:8c:57:90:a6:ec:d4:
                    7e:0f:33:cb:cd:af:9b:f1:d3:cb:88:9f:52:9a:36:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:E4:7C:9C:52:60:8F:3B:9D:E1:F1:D7:D4:D0:9F:02:AF:78:A8
            X509v3 Authority Key Identifier:
                keyid:45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:a8:2b:e6:fd:d7:53:b1:db:84:a4:8e:ff:28:35:38:bf:
         4e:51:49:b3:58:11:3e:7a:cf:f1:86:13:3a:55:36:f8:72:6c:
         73:7e:bd:c7:90:88:fd:f6:99:26:c3:7e:95:a6:0a:5a:d3:3b:
         35:77:09:5a:df:f1:e8:ef:13:c7:df:90:37:a9:2b:25:f7:7d:
         01:bb:ab:d9:bf:78:ba:89:6d:4d:08:cb:c1:ec:20:c4:30:fe:
         1a:05:c0:e1:2b:e6:15:63:eb:ca:79:93:04:a8:a1:9f:72:96:
         bd:1b:17:f3:ca:f4:22:43:c3:ad:22:e6:37:47:b2:87:e8:ab:
         af:58:35:71:8c:0f:48:d6:fa:62:81:9b:57:b8:33:2f:ac:20:
         ec:c5:71:2d:57:cc:2c:0e:69:a9:4b:08:02:20:8e:ef:14:88:
         9c:a7:82:6a:f8:85:e2:fb:35:fa:71:c8:0d:74:c0:15:cc:d7:
         70:09:9b:cd:9d:e5:bd:b6:31:84:2b:d9:64:e8:9a:7a:53:1b:
         8a:0d:3a:44:db:88:8e:c9:0a:b0:a4:7a:ea:a2:70:40:49:dc:
         a3:5b:be:6e:e3:65:2b:3c:d3:bf:64:34:d4:04:77:18:d3:46:
         d4:eb:51:16:94:eb:11:7f:b7:03:9e:d0:28:e3:60:61:f3:23:
         b7:52:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:35:14 2025 by rpki-client