Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
File:                     F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft (raw, json)
Hash identifier:          BvDStoVd6orVgj734jqbzlNViGUFOJX0pCij98q79sU=
Subject key identifier:   01:B3:59:70:53:34:AA:7F:17:C2:DC:B0:B6:E2:2C:0D:C6:14:7D:B3
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Certificate issuer:       /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial:       0D74DD82929135D11868417C7C8FDB13D86AEF22
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
Manifest number:          04D2
Signing time:             Fri 31 Jan 2025 05:29:27 +0000
Manifest this update:     Fri 31 Jan 2025 05:24:27 +0000
Manifest next update:     Sat 01 Feb 2025 06:47:27 +0000
Files and hashes:         1: 326130353a646663313a393161303a3a2f34382d3438203d3e20323030323436.roa (hash: Fqfb2rBJMD6Q69G0R/3ria7ckhlk5qxOnkkuYg56aXo=)
                          2: 326130353a646663313a393137343a3a2f34382d3438203d3e203537343833.roa (hash: v9dmjrzFnV5b2A6xdAui+Q4gF3ELLt9FJDdHXMck0Pw=)
                          3: 326130353a646663313a393139343a3a2f34382d3438203d3e20323135333836.roa (hash: awyK23REAgC5OF3FSXK6T6lPv/Y9OPv1M2gCMFucc/g=)
                          4: 326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa (hash: KNGSB+cQzjns5f9eTaOdtd1wrmRLgRW49MUBloto0aU=)
                          5: 326130353a646663313a393137303a3a2f34382d3438203d3e203531323534.roa (hash: 0EAZ2NFbwuGWl6CNH5AGsOtZjzsc6LwCa4kExjYyEJo=)
                          6: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer (hash: JrP9Yj9+GylzB9vk0aiJi9Dd+braOBZrvEH4EsNnbUc=)
                          7: 326130353a646663313a393138633a3a2f34382d3438203d3e20323135323830.roa (hash: SR7XrQx3p3SosQYaDLORUu1Ba3qDV69RZH6Q+bd7ckQ=)
                          8: F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl (hash: d6tlRsW2ScXNYXgG/IpGfu/4VwJXDH946WZc2FXr0J4=)
                          9: 326130353a646663313a393161663a3a2f34382d3438203d3e20323033363836.roa (hash: YQo0TjcPu+Em3BVoDjLJhW1AEQJ1FP5qfZ9t5gA0Dqs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:dd:82:92:91:35:d1:18:68:41:7c:7c:8f:db:13:d8:6a:ef:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
        Validity
            Not Before: Jan 31 05:24:27 2025 GMT
            Not After : Feb  1 06:47:27 2025 GMT
        Subject: CN=01B359705334AA7F17C2DCB0B6E22C0DC6147DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:eb:37:23:c4:fb:55:9e:7b:66:2a:88:26:e0:
                    86:38:cc:4b:0e:ef:66:7f:9c:79:8a:5a:e3:50:33:
                    30:88:93:db:c2:76:3f:61:e1:8b:3c:fa:f1:d5:18:
                    1d:11:26:28:40:2f:74:07:3d:ea:3e:5d:65:21:58:
                    a0:4d:fd:15:de:49:63:02:22:11:22:58:e8:08:9e:
                    12:6e:89:21:57:22:0a:0d:3c:ba:50:2d:8c:70:35:
                    56:1e:91:03:e0:28:c1:f0:31:9a:61:71:54:13:bb:
                    72:3c:95:e5:c8:f7:bd:5b:7d:d1:52:c7:28:eb:c6:
                    e8:55:93:3d:d8:ac:02:60:7a:25:42:f7:dc:7f:17:
                    5c:78:56:c4:9a:40:2b:60:9d:f2:02:89:59:85:25:
                    1f:4f:97:80:a5:00:64:8d:31:77:b5:5b:bd:ba:4c:
                    5e:b2:cf:21:44:f7:f7:f9:96:52:dc:fc:51:35:6e:
                    8e:bf:a6:1a:0a:a0:10:3b:6b:ae:da:31:52:1a:ec:
                    f0:9d:22:e3:fd:0b:d4:93:cd:7f:d9:5c:d0:9f:c4:
                    d0:ff:50:61:92:68:b0:ac:5c:e6:18:70:21:bf:e6:
                    90:8f:dc:02:02:f9:84:8f:f7:8f:4e:ae:36:67:46:
                    d9:00:3b:37:2d:a7:e1:14:a8:a2:ad:59:2f:0a:3b:
                    55:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B3:59:70:53:34:AA:7F:17:C2:DC:B0:B6:E2:2C:0D:C6:14:7D:B3
            X509v3 Authority Key Identifier:
                keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e5:1e:a5:f0:0e:d8:dc:46:4e:11:56:f5:b9:b6:d0:47:85:
         1d:71:ad:a4:41:01:b5:04:35:5a:75:9c:10:44:ce:77:7b:d3:
         55:2d:02:2a:70:de:b5:b5:67:8c:18:4c:bd:96:ef:83:13:17:
         7f:dc:ea:d3:38:0b:2c:4e:d2:6e:97:35:f6:f0:d5:8d:14:1e:
         d1:ce:5d:b3:72:16:bf:72:6c:23:2d:c9:71:a8:1d:e7:54:c0:
         02:f0:c4:dd:ec:c0:5b:08:41:4a:f1:f5:b2:39:a9:da:d4:c1:
         f9:3d:c2:66:64:b1:8b:10:ac:34:fb:87:c1:7e:e2:f3:28:18:
         dd:71:7f:16:78:9b:1c:5d:b8:08:d0:2d:0c:b8:ec:e6:d0:2c:
         5d:57:03:65:5f:d5:70:8f:c1:89:6b:7a:86:1f:97:1f:ad:e2:
         7e:70:6e:52:b8:b2:90:af:9b:49:f9:f5:0d:43:0e:47:56:76:
         e5:0d:3b:fa:11:56:a5:4b:a1:ec:bc:1b:f8:b6:07:1a:74:8a:
         a1:39:61:f0:b3:4f:95:e9:88:c2:fe:e3:27:71:94:2b:b5:6f:
         d7:ab:cc:4f:1f:21:a1:93:9c:e7:3c:d2:56:df:b1:3b:2e:84:
         d5:43:ce:80:19:21:ce:e6:88:c8:18:d9:e4:ac:bf:62:a1:ed:
         59:25:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:42 2025 by rpki-client