Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft
File:                     D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft (raw, json)
Hash identifier:          QWAQXDgoBEzQBc7eIgxQhIY1HSY+xqrar1owF8HsjzQ=
Subject key identifier:   DE:C5:BB:C2:83:46:FD:13:F2:74:C4:FA:D4:E9:C3:86:14:E8:24:7B
Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB
Certificate issuer:       /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB
Certificate serial:       62198EBAA1CE95E979DCA26D45F863AD5DD78F4C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft
Manifest number:          74
Signing time:             Fri 31 Jan 2025 12:27:03 +0000
Manifest this update:     Fri 31 Jan 2025 12:22:03 +0000
Manifest next update:     Sat 01 Feb 2025 15:51:03 +0000
Files and hashes:         1: 326130363a313238373a323a3a2f34382d3438203d3e203236303036.roa (hash: xMjHyR2jjzGKsZBr54akxLyksZAzhwNtCuo7fa289pA=)
                          2: 326130363a313238373a333a3a2f34382d3438203d3e203236303036.roa (hash: w5l+CabII55oIdXWCx1z3Pe4YPAruD0IwV5kDPe/Izw=)
                          3: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl (hash: 4bmwm0ol91Ra+b0v9TwJDVu3dwkKYeJYrFSRLQEPk9Y=)
                          4: 326130363a313238373a313a3a2f34382d3438203d3e203236303036.roa (hash: RRFtJdru0BMWcPpyQm75lctxeDIcv7Yna91EEvrVE94=)
                          5: 326130363a313238373a613030303a3a2f33362d3336203d3e2030.roa (hash: FjsYrEo0wEgNS89VaZKiwt5EudZo4T5v9dS11TtDpgA=)
                          6: 326130363a313238373a343a3a2f34382d3438203d3e203236303036.roa (hash: Ctd56m2rWeHWuAb0S/ld3PRKI+krAr55ECb4mHWz0ec=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:19:8e:ba:a1:ce:95:e9:79:dc:a2:6d:45:f8:63:ad:5d:d7:8f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB
        Validity
            Not Before: Jan 31 12:22:03 2025 GMT
            Not After : Feb  1 15:51:03 2025 GMT
        Subject: CN=DEC5BBC28346FD13F274C4FAD4E9C38614E8247B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6d:5e:44:ac:5a:73:e1:b2:fc:10:67:74:29:
                    d0:0f:0e:33:67:ab:59:99:29:56:e4:25:07:7f:0f:
                    c7:10:f5:74:e8:e1:a6:12:49:52:91:d9:97:29:be:
                    1c:f8:81:68:e9:b6:77:64:c9:7c:a3:a4:b9:bd:d4:
                    ff:b4:34:74:ef:d4:4d:33:12:2d:82:49:13:e6:7a:
                    22:0d:4a:6c:22:9f:a3:17:d0:db:0e:d9:f1:5c:cd:
                    76:ab:ac:0c:ad:b7:ce:27:b6:64:a0:8e:7a:78:1f:
                    5f:6c:76:03:90:7c:7b:99:75:1e:8f:25:4a:ad:85:
                    62:1c:0f:80:81:b4:8f:9d:6e:4b:05:cc:39:0b:7f:
                    3e:a0:f0:90:aa:63:90:c9:34:d8:68:b5:95:18:67:
                    1c:cd:f1:50:dd:3a:59:27:14:df:13:e6:01:7b:8a:
                    6a:d7:7a:9f:c3:9e:9d:b1:66:5c:05:63:f7:2f:f5:
                    6c:bb:6c:26:df:1e:91:32:59:c0:46:4b:c7:0f:b9:
                    f4:81:85:8a:01:b4:64:c0:50:2b:63:d5:fb:0f:de:
                    10:32:85:63:1c:75:f8:28:bf:bc:9b:62:78:b0:4a:
                    0e:79:9d:4f:0a:2a:e9:cb:58:d2:e4:f4:9f:f5:34:
                    21:e0:a7:af:e5:6d:89:bf:ce:96:1d:37:bb:90:8f:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C5:BB:C2:83:46:FD:13:F2:74:C4:FA:D4:E9:C3:86:14:E8:24:7B
            X509v3 Authority Key Identifier:
                keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1d:6b:e1:bc:d2:90:07:e5:ee:ef:54:a3:8a:03:53:5b:6a:
         98:28:b9:f8:3b:3c:0b:2a:71:31:f1:d5:59:98:58:7b:26:36:
         34:62:f4:af:28:fe:5e:69:1e:2b:6f:1c:6d:d7:ab:d4:02:45:
         e5:e0:f3:78:7a:79:4a:77:7c:15:48:ce:06:ff:e0:90:da:8e:
         3e:eb:1f:94:94:27:6a:97:a8:67:0a:70:68:83:d7:99:50:f6:
         7f:31:3d:5b:84:a9:c2:22:39:77:a1:9a:c0:d6:5a:31:ad:c1:
         a8:4e:b1:f6:ed:b6:80:d6:6c:db:0a:28:55:71:02:4c:b9:55:
         6f:bb:74:10:9b:ab:90:75:c2:bf:14:77:2b:01:93:98:d2:4d:
         58:59:bd:4b:21:f8:80:5d:5e:a2:b3:24:b6:22:43:ca:de:23:
         71:71:aa:41:07:c6:8a:d4:07:35:37:5b:17:13:76:de:bc:de:
         48:fc:a6:d0:97:3c:ec:b5:16:da:a2:19:49:aa:aa:58:0e:6e:
         6b:69:b9:1d:ee:20:0a:c1:23:b7:bc:d4:08:0c:c9:68:c3:7a:
         6a:ef:74:c1:b4:ab:3f:f4:df:33:06:8f:1a:54:2c:51:40:e7:
         56:5b:1a:35:6d:30:e2:6c:f4:2d:15:bf:9f:2c:8d:32:5c:72:
         ce:26:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:14:31 2025 by rpki-client