Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
File:                     8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json)
Hash identifier:          O7tZoIr//3NH33Cthni/oCiAJReFFWg5YU+Moc5Et3g=
Subject key identifier:   0E:B9:36:64:11:05:63:84:CB:F8:AE:20:98:51:80:6C:65:7C:54:D4
Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
Certificate issuer:       /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Certificate serial:       09CC793D55DA801911A9A923656113E0C5D36E7B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
Manifest number:          020D
Signing time:             Fri 31 Jan 2025 12:34:00 +0000
Manifest this update:     Fri 31 Jan 2025 12:29:00 +0000
Manifest next update:     Sat 01 Feb 2025 15:12:00 +0000
Files and hashes:         1: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: QS9YhGbx2QdTZr0FOiGLJ0yNlH0cfZxG9pG8UsLWZYk=)
                          2: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: WZdnhsf1tbcSVNSrkJIR05RIfLe917aOhwfRnEAl4rg=)
                          3: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: yY/lRzl5gnRHqPDCI9XTmjkP/VSTS3sUgvtQRFCF6ig=)
                          4: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: lWYjZQ5Ld8qxedFHjd1SYJ3EjXIlTQ1TnJV4koI7Bc0=)
                          5: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: IJr5CBZ4iO0h6IlIR+qADhOt/NMtQJ1etkNPbekFk9g=)
                          6: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=)
                          7: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: amyqCToWlkncShbPoQ2pFwGosgXS9k+x9sD0wwW0zJ8=)
                          8: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=)
                          9: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cc:79:3d:55:da:80:19:11:a9:a9:23:65:61:13:e0:c5:d3:6e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
        Validity
            Not Before: Jan 31 12:29:00 2025 GMT
            Not After : Feb  1 15:12:00 2025 GMT
        Subject: CN=0EB9366411056384CBF8AE209851806C657C54D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:45:09:7a:4b:22:e3:2d:8e:fe:0c:67:56:
                    f3:8e:97:c5:07:f2:e2:7e:65:59:75:e9:29:72:11:
                    b4:e4:10:cf:8d:19:c8:01:8f:d3:46:5b:73:1b:ef:
                    a7:61:38:d7:55:74:1a:75:0f:06:1b:4f:5c:80:47:
                    69:32:f3:52:c1:a5:96:da:c2:14:d6:58:77:71:68:
                    4b:43:5b:40:98:f0:71:75:27:22:e7:ca:84:ee:92:
                    2c:01:17:96:65:5e:c3:e2:c2:53:0a:0a:01:50:5c:
                    42:a2:76:24:87:0b:15:3b:dd:53:e0:f9:c7:33:73:
                    1c:23:66:dc:d1:a4:36:f8:a9:b8:61:09:b5:65:ae:
                    c8:be:c2:4f:cc:55:90:04:49:85:dc:ef:f4:74:6d:
                    9f:f2:c6:89:fc:6b:c6:a5:35:43:83:78:43:45:52:
                    fc:b1:9f:fa:98:8d:ab:33:ce:1a:c6:18:08:42:81:
                    e2:6c:b1:1c:6f:68:67:17:39:2a:0a:d4:71:65:14:
                    8d:39:ec:72:a7:ac:49:8c:f8:f9:5c:38:07:1a:4c:
                    a3:b0:8d:31:b9:04:34:4f:90:80:42:83:d1:55:e6:
                    11:ed:e0:a3:7d:d3:2a:52:e3:eb:09:cb:0a:af:7f:
                    b0:92:e2:a5:72:1f:30:53:7f:1f:1d:16:c4:a3:c9:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B9:36:64:11:05:63:84:CB:F8:AE:20:98:51:80:6C:65:7C:54:D4
            X509v3 Authority Key Identifier:
                keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f5:60:9a:ec:9b:60:46:58:81:f8:06:b7:ac:63:bf:5e:39:
         16:e5:eb:6c:9b:9a:33:d8:37:ae:81:c8:07:36:88:78:8d:e6:
         52:7e:96:f0:0a:41:05:34:5d:0d:15:a3:29:ac:9f:06:e0:82:
         91:fa:a1:51:6b:8d:ce:51:01:0c:a5:0b:6f:aa:de:62:8b:30:
         ff:a1:f3:ce:7c:2b:c6:bb:c6:15:79:56:7c:39:66:3c:0e:e1:
         4c:ef:6d:23:a3:5e:7b:b8:d3:47:06:4f:af:39:64:e4:eb:ee:
         ca:69:a1:83:0e:3d:70:8a:c0:91:0a:92:fc:64:ae:bb:2b:75:
         0d:98:29:aa:91:78:78:a3:45:4a:1b:fc:41:a3:ef:8a:af:2c:
         52:51:54:51:38:4c:4e:95:34:5a:b0:4f:8e:8a:f3:d6:35:1f:
         da:e6:1e:00:20:48:3c:ad:83:3b:0a:f3:6f:14:9e:6f:cf:bf:
         37:ba:30:2b:4c:b8:6c:1b:b8:e9:fa:f2:82:7c:99:d5:1e:cf:
         88:74:09:36:97:93:fc:8b:97:76:9e:f8:0d:cc:d4:63:97:e9:
         ae:5d:88:27:22:26:27:e0:ba:87:84:53:64:d9:a7:99:d7:61:
         76:50:f9:36:34:48:c7:35:5d:12:7a:8f:88:38:76:66:fe:65:
         a3:13:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:13:34 2025 by rpki-client