Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
File:                     77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft (raw, json)
Hash identifier:          3vyEG4M/dQlbt0klOD9TZ63b667QsAzCH2NpreNqdk4=
Subject key identifier:   74:E9:D7:22:71:96:48:53:72:AC:6D:3B:AE:0F:E5:0A:93:56:97:79
Authority key identifier: 77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2
Certificate issuer:       /CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72
Certificate serial:       2B04ABEEBAA71E5CDABDEAD17B453A700CEC4C4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
Manifest number:          C8
Signing time:             Fri 31 Jan 2025 13:54:55 +0000
Manifest this update:     Fri 31 Jan 2025 13:49:55 +0000
Manifest next update:     Sat 01 Feb 2025 16:18:55 +0000
Files and hashes:         1: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 97vZ9tjE/B2cFID5TaKGht939nhzUnF3N3C8Tt+dRqI=)
                          2: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: oP/+2n5Cjna0fXd3Uue3NmDpz4g1Sc9gKwpKaACd5fA=)
                          3: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Pz8YuajHR3RKHabgAdN5D6D4yfaEKoRCNMV/secsEfc=)
                          4: 77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl (hash: LP/+bWquLA085MuSqSDV0fmNXs9PAHuBjXnJafql0Hs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:04:ab:ee:ba:a7:1e:5c:da:bd:ea:d1:7b:45:3a:70:0c:ec:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72
        Validity
            Not Before: Jan 31 13:49:55 2025 GMT
            Not After : Feb  1 16:18:55 2025 GMT
        Subject: CN=74E9D7227196485372AC6D3BAE0FE50A93569779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:f9:56:8b:47:ca:2e:89:87:f6:b9:98:86:
                    93:6b:3f:44:48:5e:9d:c3:95:51:bd:36:d9:15:03:
                    68:a9:06:a1:3e:1b:fc:54:3a:70:c0:35:a0:51:f8:
                    9f:4f:e3:f3:2b:a5:8b:a5:54:b3:89:61:98:b4:b6:
                    fb:f8:cd:f1:31:1a:a7:8a:19:ff:9a:e2:63:ce:5b:
                    51:f6:0a:06:d8:71:07:da:6b:c7:ed:46:f5:96:11:
                    70:4c:58:c9:44:7a:f8:51:eb:e2:54:8c:6b:a6:da:
                    67:dc:9c:cc:32:c7:d2:55:31:ed:d5:09:0f:fa:ed:
                    79:9d:11:7d:29:d7:b1:ac:68:1b:92:eb:63:36:fb:
                    20:cd:a7:a2:13:80:e4:98:30:e9:41:bd:ae:2f:4d:
                    85:95:1f:14:40:db:5a:51:ad:6e:fc:25:9d:3d:26:
                    d0:a3:4e:44:d6:75:e4:45:04:e1:bc:4b:84:a3:e4:
                    7a:56:58:52:ef:b0:5d:05:c8:9e:73:96:73:1f:0c:
                    43:21:4d:b2:a3:52:1e:5c:2a:75:c3:32:26:cc:2a:
                    c0:7a:fe:35:a8:20:55:99:0a:df:b4:37:2a:eb:e1:
                    54:de:19:b5:40:9c:15:98:78:a0:2f:82:7f:c8:b3:
                    c2:5e:91:fc:a8:2b:bc:2d:77:3d:34:71:31:c0:d4:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E9:D7:22:71:96:48:53:72:AC:6D:3B:AE:0F:E5:0A:93:56:97:79
            X509v3 Authority Key Identifier:
                keyid:77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:55:3b:77:f3:35:c7:80:67:4f:45:f8:49:74:6e:33:22:70:
         66:d4:43:2b:f8:3d:cd:16:dd:b8:15:35:2d:54:29:53:14:43:
         cf:8b:94:42:a4:ba:db:25:12:e5:1d:e4:2f:51:b3:59:80:e2:
         71:c0:ba:63:62:8c:1f:89:30:74:c2:24:ee:73:05:fc:fd:29:
         f2:7b:c1:d0:db:5a:24:a9:45:b1:84:f8:c8:d9:da:da:12:11:
         7e:9c:95:bd:21:2b:35:0d:02:92:7d:f4:bc:93:87:c1:bd:8a:
         90:9d:f5:cd:11:60:46:a7:97:45:df:12:47:c1:aa:f7:d2:f9:
         c6:a5:18:ac:9b:a3:b6:7c:c3:e0:06:8a:39:27:1a:8e:74:27:
         8e:4d:c4:6d:74:14:ee:91:6f:d2:4c:9f:c4:e8:19:3c:92:02:
         9f:66:74:71:71:19:b8:83:36:0c:57:31:08:95:3b:99:56:d0:
         f1:cd:05:f4:b8:23:6e:33:50:60:cd:28:79:0a:7a:67:a1:39:
         e1:64:ca:7b:b5:58:8d:ff:fe:df:df:cc:b1:1f:80:e8:bf:64:
         65:db:2e:bf:61:a3:cb:b4:86:ba:35:31:75:04:0c:e1:45:41:
         74:5c:cc:56:ed:84:39:bb:7b:c4:55:22:33:c2:29:3a:48:fe:
         e4:90:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:05 2025 by rpki-client