Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
File:                     CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json)
Hash identifier:          vV0YMHq+sigY/xfCazkQAdPM8dGmerRFGIXVdbkYZqk=
Subject key identifier:   48:1A:CE:34:00:AC:F2:88:91:7D:C8:A9:99:BD:BE:5F:65:1F:23:00
Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
Certificate issuer:       /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
Certificate serial:       3B228A3FF03D602B89E9C119EB7CCEA664FC84E7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
Manifest number:          C0
Signing time:             Fri 31 Jan 2025 01:52:44 +0000
Manifest this update:     Fri 31 Jan 2025 01:47:44 +0000
Manifest next update:     Sat 01 Feb 2025 03:39:44 +0000
Files and hashes:         1: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=)
                          2: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=)
                          3: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=)
                          4: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=)
                          5: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=)
                          6: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: AVgZI6h09WbozTb3fLfmFgtkOP5k7A37LnNr9iiaXkA=)
                          7: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:22:8a:3f:f0:3d:60:2b:89:e9:c1:19:eb:7c:ce:a6:64:fc:84:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
        Validity
            Not Before: Jan 31 01:47:44 2025 GMT
            Not After : Feb  1 03:39:44 2025 GMT
        Subject: CN=481ACE3400ACF288917DC8A999BDBE5F651F2300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7d:01:58:c3:7f:16:31:a5:57:01:a5:0e:6f:
                    95:8c:dc:3b:f1:f2:75:50:7d:8e:37:2f:6a:3b:d4:
                    2a:d6:d4:42:50:f2:7f:fc:70:35:60:ca:86:ab:07:
                    99:d3:9c:be:31:70:39:7a:64:d9:f9:1c:ed:94:69:
                    91:bf:1b:ea:df:09:a0:a1:bd:bd:57:ee:57:79:98:
                    81:c7:a5:17:5c:34:80:56:49:b8:09:32:4d:e6:e2:
                    a1:52:c5:c5:68:c0:4d:16:27:d3:63:33:90:6b:f1:
                    43:24:34:8a:99:f8:16:37:7f:6f:75:a3:a9:8e:2c:
                    17:86:ee:87:16:29:7a:43:00:fb:4b:76:08:92:09:
                    c7:b1:20:4b:06:93:f4:e0:dc:a0:b9:e2:22:df:a3:
                    40:8a:11:42:46:2f:b2:5d:b3:54:1f:db:86:04:83:
                    14:51:62:bf:19:0a:4c:a4:64:bb:37:bd:e2:59:da:
                    76:69:78:a8:0e:bf:5d:ce:69:3d:97:9e:96:6c:20:
                    ea:4b:5d:56:4b:50:88:2d:bb:e7:d1:10:63:d4:66:
                    9d:83:2d:36:d4:84:46:a0:f8:88:bf:14:7f:e4:de:
                    39:8d:a5:2f:98:ad:40:f8:ca:25:c1:77:f6:3d:75:
                    f3:41:e9:29:a2:4b:13:9b:fd:5c:a5:c8:d3:41:fa:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1A:CE:34:00:AC:F2:88:91:7D:C8:A9:99:BD:BE:5F:65:1F:23:00
            X509v3 Authority Key Identifier:
                keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:f8:74:34:23:fa:00:b5:8c:58:41:28:36:f2:d7:e2:78:
         04:03:69:40:5f:09:f7:bc:08:be:fa:a2:97:cd:a0:92:b8:75:
         59:1a:cd:cc:55:db:97:fe:24:f0:1e:08:2f:2c:5b:42:0c:a7:
         53:07:17:df:06:4f:cd:0d:69:c4:c6:cd:f2:9d:72:a2:9b:55:
         10:fa:d4:8c:a1:e8:00:7a:62:d3:9e:d7:f3:0f:6c:1a:9b:cc:
         09:7c:39:a0:ff:54:2c:4f:e1:da:ad:09:d7:06:75:a2:8b:cd:
         ab:32:99:d5:b4:7e:97:79:74:c4:f2:67:91:6f:9f:65:f6:89:
         51:5e:dd:16:96:ee:d5:f7:96:36:79:8b:5f:10:8e:fb:cb:66:
         5b:c8:10:cc:e9:5b:c1:50:67:c6:11:db:0e:36:c1:ff:04:f4:
         be:09:ad:9c:48:0f:bf:52:da:1f:be:64:3d:1c:0b:13:70:28:
         a0:7b:a8:3d:3d:a1:6e:ba:cc:a7:5b:82:62:c4:b9:a5:65:02:
         c5:3c:e4:4e:28:28:82:10:7c:27:99:7d:e5:6a:01:10:2b:3d:
         e2:d4:42:4e:5f:51:79:d0:f4:c4:b8:9f:eb:1a:32:57:d9:ac:
         8e:d7:8f:24:e0:1e:34:20:d1:fc:b4:d6:09:32:3f:b1:37:ef:
         66:71:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:30 2025 by rpki-client