Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft
File:                     93B0296C31787780FE8413318FD0D27083834CC5.mft (raw, json)
Hash identifier:          8I0pvoRBcj0LKV3GdHK1zU0QhjCwMP2uADnp6ozuZi0=
Subject key identifier:   F8:71:F4:61:B3:44:97:10:3F:3F:EB:DC:71:C2:65:A5:81:B4:4B:07
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Certificate issuer:       /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial:       55D6FC998FB93757329316C735F043E2E512F1EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft
Manifest number:          0256
Signing time:             Fri 31 Jan 2025 18:28:11 +0000
Manifest this update:     Fri 31 Jan 2025 18:23:11 +0000
Manifest next update:     Sat 01 Feb 2025 20:21:11 +0000
Files and hashes:         1: 32332e3134352e35362e302f32342d3234203d3e203135333533.roa (hash: le6R2n9zHspjeXtFi8NXNldH3kCyfdMS3ed2L09X9SE=)
                          2: 3137302e33392e34392e302f32342d3234203d3e203135333533.roa (hash: +pOk9FLb96yLGZG6xOzIDQZYz6GcVl/Xpk/DY00J0go=)
                          3: 5344A7147C3BDF128B91CB0E4B659E3DA3046121.cer (hash: Vp4SuNr+p7tp8xNyjLiGHn7itiUYDy27QKJMavnq6iA=)
                          4: 93B0296C31787780FE8413318FD0D27083834CC5.crl (hash: xYLhwV3x8JollFtLJTF8ufgumISfkFcywnusxpon8Ac=)
                          5: 32332e3134352e35372e302f32342d3234203d3e203630393030.roa (hash: 0mO6BltkxAyypnqXqNxbMgtEmDyDN+jtpg3w1vv/E7U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d6:fc:99:8f:b9:37:57:32:93:16:c7:35:f0:43:e2:e5:12:f1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
        Validity
            Not Before: Jan 31 18:23:11 2025 GMT
            Not After : Feb  1 20:21:11 2025 GMT
        Subject: CN=F871F461B34497103F3FEBDC71C265A581B44B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:24:0e:b9:00:df:4b:15:2b:fe:13:84:53:
                    33:1d:ee:5a:05:ba:63:e6:d2:a2:2b:4f:27:8c:f4:
                    65:dc:50:ed:c7:0f:ce:66:ea:ce:86:5e:14:30:1e:
                    8d:28:82:4c:30:5e:11:98:5d:4b:99:8d:fa:9a:e2:
                    75:cc:5a:5d:f6:5b:60:b8:b4:51:91:0d:0e:fa:af:
                    12:b6:7b:88:99:24:84:7e:ac:33:ba:8b:96:ef:7b:
                    bf:f3:db:07:71:21:4f:e4:ac:b6:23:d7:47:de:c3:
                    e6:99:fe:ba:04:e7:e6:b2:99:70:0c:9d:1b:ca:86:
                    6d:33:8d:df:3c:86:e3:9d:cc:90:0b:3f:db:55:5d:
                    5a:04:1b:87:f4:f1:1f:f0:f7:00:2a:99:d0:f3:2a:
                    84:b8:a2:1b:54:bf:95:b7:27:fb:ed:0d:df:c7:2c:
                    9e:be:ec:8a:44:dc:b8:b8:92:70:02:f8:49:0d:cc:
                    61:8b:be:af:61:6d:3f:d7:c9:2f:3b:37:3b:df:2c:
                    90:0e:b3:25:b4:5a:83:0b:92:84:6f:64:e4:1e:22:
                    3d:d1:e6:5f:5a:95:c5:1e:70:04:5b:9d:57:9d:f0:
                    9e:1e:76:bc:62:b6:64:f8:b3:2d:5b:11:ab:18:e4:
                    1a:e0:02:35:0e:40:14:22:52:36:ae:72:6d:25:8a:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:71:F4:61:B3:44:97:10:3F:3F:EB:DC:71:C2:65:A5:81:B4:4B:07
            X509v3 Authority Key Identifier:
                keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:67:3e:65:5f:90:46:be:81:8b:ef:09:40:c4:e8:5a:f5:
         89:29:a7:74:5d:01:1e:cd:86:49:e0:ce:79:37:89:f1:b0:a5:
         57:e1:0d:b2:a3:fc:18:35:3f:6c:75:8b:2f:14:cc:5e:8e:6f:
         aa:a9:13:3c:3f:d4:34:ff:8d:eb:3e:49:8a:dc:6a:55:95:6a:
         48:76:af:fb:6f:d8:69:0b:e0:a6:e8:ca:3b:d5:fb:e4:2f:d2:
         23:d0:73:99:70:ad:21:7c:c2:9a:5e:b7:e6:c1:c8:61:ba:21:
         c4:21:ae:03:34:0a:b3:5f:dc:bb:25:a6:72:c2:27:ce:45:d9:
         1c:29:22:14:19:c2:3c:19:80:eb:65:ee:80:ec:96:bd:20:10:
         d2:36:5a:01:06:36:f3:e9:3b:49:29:1e:7f:15:c7:a8:0c:0c:
         74:ad:4b:37:1a:67:ba:73:27:b5:51:96:7e:0b:22:05:8f:f4:
         f5:86:48:44:11:4e:6a:87:cd:aa:61:2d:eb:00:9a:cf:6d:03:
         de:f7:09:04:98:16:bf:9d:5d:13:f2:44:f8:40:05:c2:fe:f4:
         a3:6d:3d:90:dd:f4:df:1f:cb:fc:57:5c:99:b1:58:79:ff:1b:
         42:08:42:3a:e4:9b:2a:84:3b:d9:dc:a0:5e:a3:ed:e9:37:0d:
         a3:f9:79:e4
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUVdb8mY+5N1cykxbHNfBD4uUS8e8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4
Zjc5NGRmMzJiZmU5ZWQwNzEwHhcNMjUwMTMxMTgyMzExWhcNMjUwMjAxMjAyMTEx
WjAzMTEwLwYDVQQDEyhGODcxRjQ2MUIzNDQ5NzEwM0YzRkVCREM3MUMyNjVBNTgx
QjQ0QjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25kkDrkA30sV
K/4ThFMzHe5aBbpj5tKiK08njPRl3FDtxw/OZurOhl4UMB6NKIJMMF4RmF1LmY36
muJ1zFpd9ltguLRRkQ0O+q8StnuImSSEfqwzuouW73u/89sHcSFP5Ky2I9dH3sPm
mf66BOfmsplwDJ0byoZtM43fPIbjncyQCz/bVV1aBBuH9PEf8PcAKpnQ8yqEuKIb
VL+Vtyf77Q3fxyyevuyKRNy4uJJwAvhJDcxhi76vYW0/18kvOzc73yyQDrMltFqD
C5KEb2TkHiI90eZfWpXFHnAEW51XnfCeHna8YrZk+LMtWxGrGOQa4AI1DkAUIlI2
rnJtJYpRIQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFPhx9GGzRJcQPz/r3HHCZaWB
tEsHMB8GA1UdIwQYMBaAFJOwKWwxeHeA/oQTMY/Q0nCDg0zFMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC84LzkzQjAyOTZDMzE3ODc3ODBGRTg0MTMzMThGRDBEMjcw
ODM4MzRDQzUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1j
ZTcwNDVmZmQyM2EvMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4Zjc5
NGRmMzJiZmU5ZWQwNzEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzgvOTNCMDI5NkMz
MTc4Nzc4MEZFODQxMzMxOEZEMEQyNzA4MzgzNENDNS5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALJ/Zz5l
X5BGvoGL7wlAxOha9Ykpp3RdAR7Nhkngznk3ifGwpVfhDbKj/Bg1P2x1iy8UzF6O
b6qpEzw/1DT/jes+SYrcalWVakh2r/tv2GkL4KboyjvV++Qv0iPQc5lwrSF8wppe
t+bByGG6IcQhrgM0CrNf3LslpnLCJ85F2RwpIhQZwjwZgOtl7oDslr0gENI2WgEG
NvPpO0kpHn8Vx6gMDHStSzcaZ7pzJ7VRln4LIgWP9PWGSEQRTmqHzaphLesAms9t
A973CQSYFr+dXRPyRPhABcL+9KNtPZDd9N8fy/xXXJmxWHn/G0IIQjrkmyqEO9nc
oF6j7ek3DaP5eeQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:11 2025 by rpki-client