Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File:                     B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier:          ZPYQvaYIU2ChPMMk6mbYPODginxVKGMOrCzLlcfRdSk=
Subject key identifier:   34:D6:94:93:DA:BA:0B:CC:62:51:AE:FC:3F:A8:3C:D4:2C:ED:32:50
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       4AE9B087F6A757BE7B4567940BC60B0BDB684942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number:          027F
Signing time:             Fri 31 Jan 2025 15:05:57 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 15:43:57 +0000
Files and hashes:         1: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=)
                          2: 39332e39352e3131322e302f32342d3234203d3e203231383539.roa (hash: 1vjH8mfscIQPc/vTfaSXURucL05I0LJVlR9FbaAY1YM=)
                          3: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=)
                          4: 39332e39352e3131332e302f32342d3234203d3e20323133363231.roa (hash: jPMOnVBJGyWgOv32913K0+cdT1poUcrcfEBeZTHQ2jQ=)
                          5: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=)
                          6: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=)
                          7: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=)
                          8: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 0sRpOXRDJnRq6yUGWW+6p1rSFhe6NFcnVioCwAlFe3U=)
                          9: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: 1SASXyExgQ4b5WPRHANM/0yVmAfZqeVHh1az/LQOJxE=)
                          10: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:b0:87:f6:a7:57:be:7b:45:67:94:0b:c6:0b:0b:db:68:49:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Jan 31 15:00:57 2025 GMT
            Not After : Feb  1 15:43:57 2025 GMT
        Subject: CN=34D69493DABA0BCC6251AEFC3FA83CD42CED3250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:60:82:ea:60:c5:26:e6:c4:5e:5e:d9:bb:
                    fb:20:67:ac:f9:46:d3:04:6d:08:72:05:e2:8f:39:
                    b8:f4:8d:12:b0:36:b1:38:de:5d:87:86:f3:89:44:
                    83:33:cc:cf:41:6f:a3:63:db:9c:ae:5a:a5:e8:75:
                    17:93:83:5e:83:93:ee:dc:de:e3:48:24:4c:93:5f:
                    9d:07:2a:00:22:1e:01:05:b2:80:d1:8d:e3:ae:ce:
                    a7:c5:38:92:69:6f:5e:53:96:e7:e0:7f:e2:ac:c9:
                    cd:37:d4:5e:ea:7d:08:b7:c7:d6:ac:df:2b:a1:62:
                    64:ed:0e:88:01:0b:13:f5:17:03:15:24:ce:4b:32:
                    e9:31:66:d5:a1:19:4f:33:26:b0:4c:ee:77:34:54:
                    32:98:04:14:7a:36:a3:bd:cb:2f:eb:da:8a:99:be:
                    1c:b8:e0:84:02:d8:b7:66:18:d7:06:48:c4:8f:af:
                    54:f9:c2:9a:74:fc:49:13:d8:b7:74:ff:83:5d:59:
                    47:40:b6:df:c7:8e:9d:5c:7e:c9:f5:73:c1:7b:fe:
                    6e:9e:63:fa:6f:22:4f:46:af:3c:51:02:48:79:86:
                    65:dc:c9:50:d9:44:7b:d3:f8:0a:d7:f0:b5:13:fb:
                    ef:51:16:90:d8:e6:cc:25:32:d8:a9:79:7b:01:6a:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:94:93:DA:BA:0B:CC:62:51:AE:FC:3F:A8:3C:D4:2C:ED:32:50
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:06:b2:34:3c:eb:f0:5c:59:72:57:a3:b2:43:da:cc:9d:fc:
         31:07:35:9c:ac:3b:52:40:dc:b6:6b:a9:b0:df:be:e9:be:52:
         8c:5e:87:d7:34:81:c5:e1:35:8f:0e:8c:b6:50:b1:4d:39:48:
         9a:34:e8:f0:c9:e8:c3:66:3f:a5:3c:19:9f:72:2d:e4:67:e2:
         f9:50:7b:20:7f:3a:83:54:6b:0a:10:f1:d1:a2:fc:86:d4:23:
         10:fa:02:69:5e:1d:1d:9c:3c:90:33:42:8d:61:fc:d4:0e:10:
         b0:36:b5:91:1d:57:20:e2:67:26:14:72:46:d3:ea:09:df:ce:
         08:18:04:ef:d1:94:a6:4b:b7:dc:4e:a5:f0:b9:31:7d:04:01:
         74:2f:42:db:56:1c:eb:e5:b2:15:35:e3:ca:41:9a:b9:80:f7:
         11:c8:80:30:a4:01:89:27:e0:59:00:75:99:3b:a7:d0:00:a3:
         81:6c:ec:f7:8b:53:0c:6d:ac:a6:73:8f:d9:25:61:a5:1d:b5:
         4d:e1:68:51:ba:e2:78:f6:1e:80:2a:4e:2e:fd:53:ec:9c:a7:
         5c:7f:28:ba:c7:a5:c2:46:0e:fc:66:45:de:cc:11:04:47:b3:
         60:af:24:6c:a3:f9:fc:14:62:c0:93:c4:b3:cd:49:8d:95:89:
         14:cc:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:58 2025 by rpki-client