Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft
File:                     3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft (raw, json)
Hash identifier:          6t6sFrxp7srBf0Mzq81kZ0FunXMtZUdnTbnYTA2DMHo=
Subject key identifier:   B7:34:77:D1:CD:99:BA:9F:47:F6:87:53:0B:3B:47:47:38:66:C4:11
Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3
Certificate issuer:       /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
Certificate serial:       2F825EDAF376BACB762CDFA098EEB9CEBA23FDB3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft
Manifest number:          47
Signing time:             Fri 31 Jan 2025 00:57:59 +0000
Manifest this update:     Fri 31 Jan 2025 00:52:59 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:59 +0000
Files and hashes:         1: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl (hash: NckI8mGMVYzEA9Uix4bQcgLs+hrLMQ0dFmTXaR6LCYM=)
                          2: 326131343a373538363a3a2f33322d3438203d3e20323132353136.roa (hash: Vw1WsjcBBDgwNV11ZkFV4v0uL62C3aFoVi1BdXoCeFo=)
                          3: 326131343a373538343a346662653a3a2f34382d3438203d3e2036353137.roa (hash: xptTc8UfiLJf//oV4oJOzWfdwqREpi/ly50X2yQ1eVw=)
                          4: 326131343a373538343a343030303a3a2f33362d3438203d3e20323132353136.roa (hash: 680SqDiYoq7HVpXkjaThtDMCA8zZT5AGhLNMwTkLjLA=)
                          5: 326131343a373538343a346666663a3a2f34382d3438203d3e20323135323838.roa (hash: nsYSNBfymkV5hvBNRaiVnDdkfFTTORy7B18OOzknSjI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:82:5e:da:f3:76:ba:cb:76:2c:df:a0:98:ee:b9:ce:ba:23:fd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
        Validity
            Not Before: Jan 31 00:52:59 2025 GMT
            Not After : Feb  1 04:00:59 2025 GMT
        Subject: CN=B73477D1CD99BA9F47F687530B3B47473866C411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:a7:92:6d:2e:46:a5:73:11:5a:b5:3a:29:
                    e4:d0:a0:0d:fd:43:e7:96:a0:90:2f:a3:c0:26:60:
                    29:35:91:e0:6b:e1:fc:8e:63:f3:83:52:13:00:10:
                    94:25:e7:4e:65:03:63:dd:1a:b1:51:8e:eb:1e:84:
                    b8:ff:2f:76:54:fd:25:11:e5:0e:78:a8:c6:ca:20:
                    42:99:0a:bb:97:f1:1e:fd:6f:64:3d:b4:45:43:81:
                    65:83:a7:5b:36:b4:6e:cc:48:ae:e0:a8:97:b8:a3:
                    d4:5d:19:25:ba:3f:09:4d:84:ea:a5:cf:95:b7:46:
                    44:3e:b9:b8:be:4e:13:94:a1:eb:3c:8b:82:69:93:
                    f7:4b:61:9c:40:6f:29:4a:b9:ca:7c:15:f8:37:20:
                    1c:e2:8e:26:6f:fc:62:f5:19:7f:d3:72:7c:8d:e8:
                    80:65:b8:d2:c9:13:de:40:a7:ab:a6:d2:b3:01:5b:
                    87:27:1a:bf:51:52:35:8a:52:10:3b:81:5c:4a:2f:
                    4c:16:90:c4:9d:6f:45:85:11:ff:c7:15:a7:3f:c5:
                    ea:f9:98:74:56:42:f0:48:cb:8f:9b:15:11:fa:ed:
                    10:89:45:49:e8:c1:03:48:c9:4a:6b:c2:b3:74:65:
                    64:8a:23:4b:2f:a6:57:4c:c2:50:dd:f9:a7:81:ad:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:34:77:D1:CD:99:BA:9F:47:F6:87:53:0B:3B:47:47:38:66:C4:11
            X509v3 Authority Key Identifier:
                keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:a3:de:95:99:47:b7:49:b4:40:be:3e:7e:8a:d1:e5:c9:
         da:ab:a4:8f:36:96:06:ff:c6:2a:50:37:35:f4:60:27:34:85:
         48:1a:85:89:b7:85:43:fe:e9:1e:cf:30:df:44:fe:ca:a9:08:
         0c:d3:88:22:7e:27:68:37:90:84:1a:a7:11:35:e0:2e:68:dd:
         5f:2b:05:c4:9a:cc:26:39:07:2d:a9:75:e1:e9:ac:11:c0:cd:
         7e:71:4e:ef:99:65:18:97:02:a4:7d:73:34:db:8e:cf:37:b0:
         6a:a6:2d:49:d8:0a:ba:f6:a8:48:7c:57:c3:07:d0:30:d9:b7:
         31:3a:7e:6b:59:be:da:a1:43:7c:7e:44:cf:6e:6e:5e:1d:3a:
         3d:96:8f:78:d0:a9:bb:b2:d7:86:37:ea:b8:ea:ac:bd:c0:13:
         89:39:cf:a4:97:22:e6:8f:2b:24:30:a1:5f:3f:9d:85:9b:db:
         6e:f6:66:f9:68:85:2e:2e:77:85:26:a7:11:59:9c:b0:bc:0d:
         c2:b2:09:80:ed:85:04:3f:5c:35:4f:34:d9:53:65:3b:38:5e:
         94:0b:60:8b:7f:af:a8:8b:76:21:6d:ca:87:b4:5f:fc:85:c0:
         df:37:1c:58:fd:b5:71:0c:1a:dd:77:7a:77:19:a7:5c:9a:45:
         5d:e4:84:42
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUL4Je2vN2ust2LN+gmO65zroj/bMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4
MkExMjJFMzAeFw0yNTAxMzEwMDUyNTlaFw0yNTAyMDEwNDAwNTlaMDMxMTAvBgNV
BAMTKEI3MzQ3N0QxQ0Q5OUJBOUY0N0Y2ODc1MzBCM0I0NzQ3Mzg2NkM0MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc56eSbS5GpXMRWrU6KeTQoA39
Q+eWoJAvo8AmYCk1keBr4fyOY/ODUhMAEJQl505lA2PdGrFRjusehLj/L3ZU/SUR
5Q54qMbKIEKZCruX8R79b2Q9tEVDgWWDp1s2tG7MSK7gqJe4o9RdGSW6PwlNhOql
z5W3RkQ+ubi+ThOUoes8i4Jpk/dLYZxAbylKucp8Ffg3IBzijiZv/GL1GX/TcnyN
6IBluNLJE95Ap6um0rMBW4cnGr9RUjWKUhA7gVxKL0wWkMSdb0WFEf/HFac/xer5
mHRWQvBIy4+bFRH67RCJRUnowQNIyUprwrN0ZWSKI0svpldMwlDd+aeBrWuDAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUtzR30c2Zup9H9odTCztHRzhmxBEwHwYDVR0j
BBgwFoAUOjvhTQho455D4ntYVnbfW4KhIuMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk
NDdhLzEvM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4MkExMjJFMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zQTNCRTE0RDA4NjhFMzlFNDNFMjdCNTg1
Njc2REY1QjgyQTEyMkUzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8xLzNBM0JFMTRE
MDg2OEUzOUU0M0UyN0I1ODU2NzZERjVCODJBMTIyRTMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAP9aPe
lZlHt0m0QL4+forR5cnaq6SPNpYG/8YqUDc19GAnNIVIGoWJt4VD/ukezzDfRP7K
qQgM04gifidoN5CEGqcRNeAuaN1fKwXEmswmOQctqXXh6awRwM1+cU7vmWUYlwKk
fXM0247PN7Bqpi1J2Aq69qhIfFfDB9Aw2bcxOn5rWb7aoUN8fkTPbm5eHTo9lo94
0Km7steGN+q46qy9wBOJOc+klyLmjyskMKFfP52Fm9tu9mb5aIUuLneFJqcRWZyw
vA3CsgmA7YUEP1w1TzTZU2U7OF6UC2CLf6+oi3YhbcqHtF/8hcDfNxxY/bVxDBrd
d3p3GadcmkVd5IRC
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:03 2025 by rpki-client