Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft
File:                     1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft (raw, json)
Hash identifier:          LIBcV98Kaoauf230aiwAwR5bwUWZo4bVXrzXAZFxWRQ=
Subject key identifier:   5D:E0:8C:5D:BA:11:C1:64:86:7C:05:91:1E:78:40:2B:24:00:ED:18
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Certificate issuer:       /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial:       10A064FD072FFEEE678E1AB3CD08353C5C68E76B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft
Manifest number:          E0
Signing time:             Fri 31 Jan 2025 07:25:28 +0000
Manifest this update:     Fri 31 Jan 2025 07:20:28 +0000
Manifest next update:     Sat 01 Feb 2025 08:26:28 +0000
Files and hashes:         1: 326130393a353463363a653030303a3a2f33362d3438203d3e20323133393535.roa (hash: l3M6B6Xlvvkk2/KN0m3frkEmvUgqwh1jsuL61CVWdDY=)
                          2: 1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl (hash: 8Hn2yzk5Ltg/5IgIOpw8VQ+43LncS1HFyWKSLnF4s30=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a0:64:fd:07:2f:fe:ee:67:8e:1a:b3:cd:08:35:3c:5c:68:e7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
        Validity
            Not Before: Jan 31 07:20:28 2025 GMT
            Not After : Feb  1 08:26:28 2025 GMT
        Subject: CN=5DE08C5DBA11C164867C05911E78402B2400ED18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ee:36:55:42:94:e6:c6:f7:de:3e:2e:eb:84:
                    b8:fa:d8:82:b6:91:5c:a3:38:1c:b1:c5:5d:95:c4:
                    35:19:58:38:76:b8:e5:69:46:e8:fb:f6:2c:ef:21:
                    ce:23:80:fc:55:49:5a:c9:6e:c2:82:1d:14:6d:f0:
                    5b:c4:07:24:f1:2f:c4:d4:05:69:b8:5e:a2:14:19:
                    65:13:25:c7:03:93:0e:9e:1c:4f:03:5a:29:7b:42:
                    96:4a:3b:fa:7f:4e:24:d3:7f:d0:48:33:e0:89:ad:
                    0e:54:81:f2:a1:55:e8:1e:87:ac:d6:88:83:ab:18:
                    a2:02:6e:3e:07:4d:c9:b2:e6:4e:92:a9:f0:5e:a5:
                    27:a0:b9:6c:19:a7:fd:f4:12:ff:31:d7:62:ce:9b:
                    81:a5:0c:d6:5e:91:51:45:d7:f0:66:09:c0:49:92:
                    54:6d:bd:df:9d:df:c8:60:32:c4:3c:8a:8e:b7:6e:
                    13:cf:50:03:08:c7:09:2b:12:36:db:15:17:91:d9:
                    ab:e3:72:c6:97:f2:60:00:43:e1:07:97:0c:ea:f6:
                    4f:01:63:47:91:e4:f5:fe:98:8c:b6:93:c0:5d:b2:
                    d3:c6:c4:e3:79:85:04:85:cf:c9:a6:8b:34:73:80:
                    1e:2c:6b:35:d2:aa:74:13:7e:02:2d:8d:a9:47:95:
                    71:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E0:8C:5D:BA:11:C1:64:86:7C:05:91:1E:78:40:2B:24:00:ED:18
            X509v3 Authority Key Identifier:
                keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:3e:a3:e7:09:8f:2c:4b:dc:81:08:2e:a3:d9:3e:7e:3f:
         d3:98:1f:cc:47:fa:d5:87:42:ba:7e:9b:30:b8:b3:54:54:72:
         da:38:5c:54:df:69:75:ca:a0:41:16:f5:b8:56:a0:91:64:12:
         8e:d8:de:84:f3:eb:c5:99:41:e2:4f:2e:a5:de:e9:82:e5:54:
         14:ab:e8:a8:59:b1:90:23:bb:de:06:27:a4:6b:47:c3:74:6b:
         8c:c6:b4:20:2f:ab:0a:34:51:07:0d:4d:3c:ed:c6:e4:7d:30:
         ad:c7:9f:10:91:ab:9e:51:a7:af:ca:56:9a:35:d6:59:b9:cd:
         0a:7c:40:f7:b3:51:25:99:5e:61:10:53:de:2c:68:92:1d:b0:
         43:81:23:77:a5:e0:85:c2:9c:5b:52:51:64:09:15:72:e4:dd:
         96:5c:e7:42:ad:35:d2:4c:47:26:d0:f4:e5:83:9a:34:ff:93:
         0c:78:8d:09:76:8d:a2:b2:cd:f3:0e:bf:2b:23:96:8f:c1:7f:
         4d:b6:3a:1e:8d:76:47:ed:65:28:e5:ba:07:0e:c5:42:0f:7b:
         90:0c:3d:14:e5:7e:0e:46:e4:6c:97:7f:8d:20:cb:6a:6d:87:
         c1:0b:20:08:1d:d2:0a:c0:f9:7c:d1:c0:91:08:21:13:ca:e5:
         44:ce:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:32 2025 by rpki-client