Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File:                     A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier:          LNZeN+KVJIcHRNaBi3Fsij+FwVADozKZ7m3fURNRImg=
Subject key identifier:   44:DC:11:2E:23:46:18:4C:01:B4:9B:E6:04:FE:4B:3D:77:5C:93:E1
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer:       /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial:       7F0DC1D763421489E55685C7B334BF215289647D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number:          0141
Signing time:             Fri 31 Jan 2025 09:41:58 +0000
Manifest this update:     Fri 31 Jan 2025 09:36:58 +0000
Manifest next update:     Sat 01 Feb 2025 10:46:58 +0000
Files and hashes:         1: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: KFn9WdvuXZqN8qHQEq155lH4XfWV3U3t3rO+sW/3ok4=)
                          2: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 69Xsi44laAcnxP50J1kp3cC9fZOYKoWYPgQjGZJBXKc=)
                          3: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: +u1GgR4ItR9W4eiEMw3maPQx96v0QxpGp/K8rZa1bfY=)
                          4: 326131343a373538313a393030343a3a2f34382d3438203d3e20323135333634.roa (hash: bPdjs19tk/MpRbgarmAN0uEcDcdl6i6wd4cN5TGGv2M=)
                          5: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: Vempd3ps8UPnFvtx6+Ga9r0Fz/m4sP8yDO51fnwduTg=)
                          6: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: /qvikyZ1jwoQhEkEJgEO8D+K9YIohf2J0C8X3+ZK7FI=)
                          7: 326131343a373538313a393030353a3a2f34382d3438203d3e20323135333634.roa (hash: bu/h9XK3WsAHjx8MPP7pwiGIOlMrY2wNZz76Bs6Xv/0=)
                          8: 326131343a373538313a393330303a3a2f34302d3438203d3e20323135333634.roa (hash: z6xFfxTzAOT/hYwAJ2DQkeBnVgxJoH9HtbYNG39WwF0=)
                          9: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: sZoFlo30szpdBXXDNxv/qeimvP1t4xOTRreSAHr6ICI=)
                          10: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: n13ozOgN/szcSy8ou42QXiXUX+yXlpqcLn3ozZcZDlw=)
                          11: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: 2yQ0bEhC7Gkr/ukKqOai4xHLU4JxFvk3/3RqPzbvcuw=)
                          12: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: 3jz7qBAt/x3hx0KhMiyloYsGBxxi20xg/aBSp+sZaDE=)
                          13: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: 92vCLzxUkC0A+QO3tY7K98mZLDwvzT8NNa/AXo3xL2c=)
                          14: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: 4fHLejJ946NktWTU2sxiTGZMT9qoCr17W/uS0Esd5lw=)
                          15: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: abPKPZr1WbPPFAA4OnjFEi0/3aO9abAcwCp0LqclAy8=)
                          16: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: RAw4xHnz744j8Drchm7/2YRwAZJQJ11XhSimRLX8qA4=)
                          17: 326131343a373538313a393030333a3a2f34382d3438203d3e20323135333634.roa (hash: O7KHuvy5uCnvxtuEtptl5XS9K7cGpgWCapcE+WwOlm8=)
                          18: 326131343a373538313a393261303a3a2f34382d3438203d3e20323135333634.roa (hash: 52dW85fH8WieO38THcEAcWvAx0hfdz1p014Uu9iYIzA=)
                          19: 326131343a373538313a393030323a3a2f34382d3438203d3e20323135333634.roa (hash: 61rYwCOleF1BuzHEObR00fnNIJsmh5ZYipqqGCDX5+4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0d:c1:d7:63:42:14:89:e5:56:85:c7:b3:34:bf:21:52:89:64:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
        Validity
            Not Before: Jan 31 09:36:58 2025 GMT
            Not After : Feb  1 10:46:58 2025 GMT
        Subject: CN=44DC112E2346184C01B49BE604FE4B3D775C93E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:65:6c:f9:be:97:57:06:d6:72:14:67:5a:
                    40:fc:1d:7b:40:b2:f9:42:f5:30:20:42:34:7e:5a:
                    30:f4:26:59:5c:40:a2:b4:50:47:54:f5:7b:aa:12:
                    e0:93:3f:63:5a:ee:70:00:72:e4:58:8f:a4:65:42:
                    80:c7:0d:7b:05:eb:69:b5:23:08:d9:36:39:b6:db:
                    ac:5c:9b:0f:8f:f7:e4:27:00:75:27:04:3a:f6:37:
                    6e:7f:06:d0:0e:7c:44:7d:ee:99:7d:a6:f5:82:a6:
                    df:ae:21:b5:c3:ea:74:e6:2c:5c:e7:60:87:c5:f6:
                    f7:32:29:84:00:57:b2:02:81:48:e6:b2:9e:c7:56:
                    0d:f4:49:4a:d1:72:d1:bc:a0:c3:a5:2d:45:b4:0d:
                    9e:11:d8:12:f2:48:f0:4a:8e:2b:74:6f:bd:62:fa:
                    24:6e:8f:67:e9:aa:96:15:bd:f5:5e:fd:7a:bc:f8:
                    a8:da:dc:80:c1:ab:94:ef:93:6b:39:07:52:f5:23:
                    f9:f2:47:00:5c:d7:44:8d:15:1f:78:60:9b:ce:1a:
                    7a:1b:a7:69:b1:02:cd:09:f8:e5:37:27:a9:61:fa:
                    d6:e4:e4:c2:e7:c0:9f:ce:d3:13:87:64:a3:53:19:
                    21:d3:b2:6d:db:d8:35:0c:78:65:3b:d0:ae:af:f3:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:11:2E:23:46:18:4C:01:B4:9B:E6:04:FE:4B:3D:77:5C:93:E1
            X509v3 Authority Key Identifier:
                keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a4:35:21:fb:18:0e:e6:b9:f3:a3:68:6e:d1:5e:04:4d:db:
         bf:ee:cb:22:0a:36:1b:73:ea:d3:8a:9a:86:21:82:6c:02:56:
         25:01:86:cc:d3:7f:1e:99:c9:39:51:75:3c:e7:c8:8c:f8:5c:
         3b:b1:fc:a6:ad:8e:4a:64:e2:ab:5a:1c:8d:13:d6:24:2a:b4:
         50:39:31:b3:f2:4d:7e:15:de:38:be:d2:8c:5c:7d:84:7c:e6:
         94:4c:fc:8f:c4:cc:5e:25:c7:05:bd:6d:48:fc:d6:f2:98:41:
         34:32:b3:f4:1d:bc:2a:db:64:bc:fc:e9:65:bc:0d:ea:ef:3b:
         5c:31:12:a0:90:e1:7a:a4:87:ff:d5:7f:f6:25:b3:8a:e7:28:
         51:a6:95:42:26:01:63:0a:49:5b:df:ac:a8:0f:1a:ba:ac:93:
         d3:32:43:61:db:7e:b9:04:c8:e0:ff:5f:7a:fb:69:08:9c:92:
         36:3f:fd:76:eb:c6:ed:c1:9c:9f:5a:39:62:de:bb:2b:a9:ce:
         29:d5:bd:7d:2b:5d:0b:04:fa:90:25:70:fe:90:ad:01:ef:76:
         12:9c:b2:01:5f:7e:d1:da:a0:57:4c:48:09:ad:51:1a:b8:76:
         a3:91:3e:3d:99:16:21:c1:5c:27:a0:fc:22:78:69:ce:59:38:
         94:f6:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:11 2025 by rpki-client