Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
File:                     309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft (raw, json)
Hash identifier:          hecm3lP4Mh0lbxoMIYcMi5nU5NsJfgwv+JpOb6/jsH8=
Subject key identifier:   21:7D:20:43:88:44:E5:25:DE:0F:56:47:6D:92:EC:02:37:80:65:52
Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76
Certificate issuer:       /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
Certificate serial:       77F7BC4CB3C0DDD889061459B15B358ABCD17D10
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
Manifest number:          C0
Signing time:             Fri 31 Jan 2025 04:47:44 +0000
Manifest this update:     Fri 31 Jan 2025 04:42:44 +0000
Manifest next update:     Sat 01 Feb 2025 06:22:44 +0000
Files and hashes:         1: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=)
                          2: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: cwd5LxUfGqT7a9/Pajk8lfNPUrL3p3IC+JEphw9tMJU=)
                          3: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: w5dnEiDx5goNVTXWdKgSFg9sD6RUplNurP3xamwPNaQ=)
                          4: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=)
                          5: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4=)
                          6: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: Iz/fbYS1/cy8A5fLPahpzYYMJ+9YAFFxOvqGD55PuMM=)
                          7: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: Nnbe/4zszjgo0YB55Fou4Wds93r5DpKEFbS0MZw1LSo=)
                          8: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=)
                          9: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: dOsy+R+Pu+oAZfnInfj1QRHz0MdLjsjFwXGn7V3VRV4=)
                          10: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: 92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=)
                          11: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: vmCZ6eOm5tS7bNiPnlTdd4xzZjSjYpY8TXILOA0OmSc=)
                          12: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl (hash: 5MglNZb53EEfiJbMFrxgzt1PGs+Ppx+MvVv4iECeHaY=)
                          13: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: MYzoD8wbCOxI3VM/BdbUpxOg1cHoSa/pKdV7AMYn73k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f7:bc:4c:b3:c0:dd:d8:89:06:14:59:b1:5b:35:8a:bc:d1:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
        Validity
            Not Before: Jan 31 04:42:44 2025 GMT
            Not After : Feb  1 06:22:44 2025 GMT
        Subject: CN=217D20438844E525DE0F56476D92EC0237806552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:eb:00:2d:62:5d:b9:31:ee:56:c3:52:d5:
                    ca:a8:57:95:0d:b2:55:a0:86:db:24:54:4f:c8:39:
                    d8:09:01:08:2f:3a:31:b4:60:57:9a:5b:8f:c7:0c:
                    05:3c:5c:83:46:6c:cc:31:03:32:24:d7:cc:92:83:
                    bd:56:6e:f3:d4:e4:d6:6b:f4:e2:bb:8f:08:41:a4:
                    7f:70:44:23:30:a9:12:ac:d2:e5:67:63:98:f3:7d:
                    de:6b:d5:85:a2:c0:aa:7f:fc:ee:37:3d:0f:ca:9a:
                    2f:a6:7a:1a:fe:e6:cc:a3:0c:76:2c:e3:79:5c:35:
                    93:26:8c:ac:15:b2:5f:fa:37:1d:5e:f1:d5:84:7e:
                    c3:ec:d9:c6:75:9d:00:d3:45:86:b9:46:e9:3b:4a:
                    72:78:e4:e7:03:b6:ed:04:d4:15:81:98:d9:2e:bf:
                    e2:df:ac:f8:d4:71:f9:79:43:7a:95:c1:cc:c4:d3:
                    62:d2:55:13:02:16:b1:21:13:4d:45:6d:ce:e9:d0:
                    72:fa:87:d5:b5:df:f1:a4:c2:78:99:ee:d8:9d:48:
                    7a:93:f1:b8:2e:c2:6d:06:cc:0b:a0:dc:68:ac:13:
                    83:8f:d9:cb:4d:df:64:c4:b3:c4:2e:11:4f:cc:a4:
                    47:15:35:2f:08:bc:68:32:d6:49:6a:9f:0f:09:7d:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7D:20:43:88:44:E5:25:DE:0F:56:47:6D:92:EC:02:37:80:65:52
            X509v3 Authority Key Identifier:
                keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ce:16:0c:26:02:ca:9e:9c:24:1b:f2:cb:e3:9d:ce:a7:8a:
         68:42:79:1e:6b:6a:5b:a5:10:2a:e1:af:54:05:53:6a:2c:87:
         90:f3:fc:a8:02:b8:86:53:82:f5:0f:e3:81:eb:86:94:43:d8:
         32:4d:e8:7a:09:f6:cc:3e:1f:61:f7:5e:d0:6e:f7:e8:27:20:
         08:c1:f8:33:85:28:64:f8:de:05:9f:e8:cc:35:f6:41:9a:70:
         ed:b9:03:89:9e:f0:0d:b9:3a:65:ee:95:50:81:9f:cd:a5:f6:
         3a:ca:09:f0:84:6f:74:c9:a0:d4:3f:36:db:00:a1:3c:8f:e4:
         9f:e5:e4:18:6a:c4:03:06:03:2f:4d:f5:c6:5f:87:96:89:7d:
         b1:87:8d:8c:78:cb:3f:76:9e:d5:ba:33:a8:ce:30:bc:c1:7e:
         95:9d:71:51:f6:2e:57:46:3e:14:33:15:41:49:54:b5:1f:fb:
         ee:66:cb:db:76:1b:45:23:b7:23:e7:ea:7d:6d:ad:9f:a9:d0:
         dc:23:ec:17:23:9f:3e:8a:c5:38:a0:1b:01:d2:2d:a1:f1:3b:
         2b:ce:ba:8c:c6:aa:b3:04:20:47:92:3a:89:56:a3:7c:98:c1:
         a2:69:8d:dd:3f:fb:98:f9:33:b5:0a:19:ea:c2:a1:6c:b1:56:
         a3:22:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:29 2025 by rpki-client