Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          NBdHuppKvdrHU1GVOfZn5Abi4T5AgCfBiFCyE2t6pJk=
Subject key identifier:   4C:C5:1C:8E:48:51:47:28:BF:0F:C6:01:9F:88:74:6C:57:03:5E:21
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       4FBB407E387DE1F0D6CDC25DF0960E0A52CA91C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          04A2
Signing time:             Fri 31 Jan 2025 10:05:57 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 11:39:57 +0000
Files and hashes:         1: 3231332e3133392e37372e302f32342d3234203d3e203230343733.roa (hash: N9chjMivZUxigtP8CjQSy4/kpn2UB0reoT1DBQ3A20U=)
                          2: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: lKJSkJqFjy6TPDk7oRGHPjAYx2K53051mCG+JZr9O4Y=)
                          3: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: J06WMDxk0vMK8pfigTls8zgcVFUgtvOJyAs44qQdbiE=)
                          4: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: k/dg+vn2LRgJwjRiBw+dTVhqGlwM5OEWHrHzMTRZgGU=)
                          5: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=)
                          6: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=)
                          7: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=)
                          8: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: Ag6bDXTIkeP3S1yYyObakXBVS3meRtUEDwW2GPMInYg=)
                          9: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: yJ63ns+uy5OkuxXphsk4soJDW/P4jNZxDgA1HqxR2Vc=)
                          10: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: FVZySD2qYJGzeA33TZ6k9nKfV57UUqtM3Y9RFiezkdM=)
                          11: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: osiInenMTL8nKf7tFVx8rBMOYt6Vnk1ZBd7DbmGt4LE=)
                          12: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=)
                          13: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: BpwFTe7Yxv8spCXtI6SlrcvqkmRSrqF7TJL8D0ERvYc=)
                          14: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: pcqczpZd3N8rkxbwgnioI5KV9SeSdrdvwmseTG1EX1s=)
                          15: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: Bl1aRRfvhlQw8eeGsoLHX9t51iL6e6Y2fGT+6y05OLk=)
                          16: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: Byq8JepWqrcVEWnX2vthyW2wZas5MvW5yy9NQn72V5M=)
                          17: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=)
                          18: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: p9bl2cITeGqyDsp+qYa6XKu0+IBsfcA9I2MK2L2iu7Q=)
                          19: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=)
                          20: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: h3bOznzQazMxnAj63lKiHhJJlraY2HH+h7VBdxrnanU=)
                          21: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: j8OQh7vKWsTOiVbbdVR2t01Y92KBGO09qcAEOUaSkOY=)
                          22: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=)
                          23: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: of9+QBHzVFeRCikR2/nTKS/SdWnbBqij0UrrT6Ws2zo=)
                          24: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=)
                          25: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=)
                          26: 3231332e3133392e36372e302f32342d3234203d3e203538303631.roa (hash: 3jLf7P3yhu2TZSIau2HMO04k6qsnp0FHPjUx5d6p434=)
                          27: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: xgaIqdtwavjhzG1jXVp6EFDMpjflmhfZfviz1IzDLuw=)
                          28: 3231332e3133392e36352e302f32342d3234203d3e203538303631.roa (hash: 4CxK/2nsy4IlLMM6spVwFLEFITyK9i3ABeG638HSk98=)
                          29: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: cv7c938TG1TrAJ4WxpMEnrJuipZuwdL8o32jtRflF/0=)
                          30: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: qcqTb3VE7m+UGKYwU3pX6Cz4rtaboRvLfOlujiKOavY=)
                          31: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: SYDNtbUftTvIAY1nHMVswIaI7CgNSFMYjysKDb9SdV4=)
                          32: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: CDL0jvyMQodplKp33qHE8utNJuEvgr8dJgi4XDSuhbM=)
                          33: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=)
                          34: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: 6Jy9wWlUlUHCaXgvzl/QdTAZFj96twj6nqzC95T3heA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:bb:40:7e:38:7d:e1:f0:d6:cd:c2:5d:f0:96:0e:0a:52:ca:91:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jan 31 10:00:57 2025 GMT
            Not After : Feb  1 11:39:57 2025 GMT
        Subject: CN=4CC51C8E48514728BF0FC6019F88746C57035E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c3:33:a2:c0:81:d4:24:94:58:97:41:42:98:
                    86:81:62:99:4c:53:59:96:52:f0:d0:01:34:0d:e6:
                    0d:97:27:e1:60:2c:47:d0:53:92:17:12:63:5d:67:
                    3c:b6:6e:94:e5:16:d5:9c:d2:dd:e3:f2:56:73:fe:
                    71:72:90:57:30:34:a7:cc:e5:1e:8b:57:e9:8d:be:
                    34:fc:0d:30:b6:6a:55:01:e6:d6:a2:e8:bd:0c:c8:
                    c1:61:be:26:05:a9:f5:0d:f7:44:14:a8:0c:9c:1a:
                    a2:b1:df:14:ed:73:52:38:62:81:99:9b:08:c1:24:
                    4a:1c:19:b5:c3:e5:7f:46:8d:b9:38:1a:57:c5:7d:
                    c4:33:a8:3c:c1:96:56:13:96:73:b7:41:8d:e6:e6:
                    60:68:51:2f:38:71:49:0e:38:1f:44:3e:81:af:de:
                    ac:71:80:34:00:26:01:35:7f:fc:4b:15:5f:4e:8a:
                    b7:97:e6:fd:54:47:76:74:06:29:40:c0:70:2a:97:
                    1c:ea:96:86:62:15:02:17:be:b8:7f:c6:11:06:6e:
                    f3:39:d1:c9:85:c4:a7:a3:e3:62:59:28:7b:e7:28:
                    3a:b3:03:20:c1:be:f4:b4:e3:1b:a4:f5:bd:6e:54:
                    3f:00:be:14:4f:25:74:1f:74:bf:7c:da:31:2d:fa:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:1C:8E:48:51:47:28:BF:0F:C6:01:9F:88:74:6C:57:03:5E:21
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:ce:c1:6e:ab:10:54:d1:17:87:18:43:72:9e:f0:dc:26:
         d2:ee:6e:6a:1f:28:6b:6e:9e:3c:95:97:7a:09:26:4e:8a:78:
         19:73:1f:d5:8f:d1:b8:22:27:19:55:63:82:c1:a0:15:e6:08:
         62:75:1b:a8:e9:4b:b1:4b:70:b3:a9:f6:ff:23:c5:94:a7:d9:
         97:15:50:ca:a3:5a:7a:cf:46:7c:24:c4:a8:1b:f4:63:e1:25:
         04:82:92:33:1b:35:8d:79:fe:cb:18:c9:b1:31:47:14:54:15:
         d5:5d:5d:1c:82:1e:89:25:6e:f9:0d:ab:5a:42:4a:ce:38:71:
         8d:6f:b8:a3:13:ce:5c:7a:27:4a:2a:7f:d0:9d:71:e8:4c:d1:
         54:fa:50:0f:6a:9c:dd:02:36:7d:51:92:4d:92:bf:73:01:82:
         5c:d4:d2:c0:e2:a0:10:fd:0d:0d:06:84:e3:45:f8:21:56:58:
         9e:80:37:83:59:a4:8b:63:64:d2:2c:29:d5:e2:5b:94:0b:a7:
         7f:7b:15:f3:f8:87:29:b8:75:6c:6e:16:6f:3d:3c:be:d2:bf:
         88:d1:6c:ab:76:79:04:ed:af:5f:1c:d3:47:8e:a9:9e:8b:17:
         d8:ef:f5:69:dc:41:00:43:4f:23:de:87:43:b4:55:1d:30:18:
         62:f3:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:38 2025 by rpki-client