Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
File:                     637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json)
Hash identifier:          1owtxUHQemNTw5Fubb2QvmWNMYTEhVCSlrS2H8SBjBc=
Subject key identifier:   0E:63:DA:BB:B4:04:3E:64:7D:C2:66:B1:AB:D1:9A:5D:C5:48:18:97
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Certificate issuer:       /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial:       7625D01B0B5503789933668B1024235EC913AD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
Manifest number:          026C
Signing time:             Fri 31 Jan 2025 05:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 04:55:57 +0000
Manifest next update:     Sat 01 Feb 2025 08:14:57 +0000
Files and hashes:         1: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: t2eZOXbWa1wSXQ/lRcYYBLRQZdrsUg6kK3TUWhBYOoo=)
                          2: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: sQzRaIn68UKgeOhWa3EKecj44XiFcDfTSSWOvDZfL50=)
                          3: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: PhaaQ0B2G4/BYaJYdmj2wNhh4+UZzlq/QFz8ZTfUDhY=)
                          4: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: jGCu+6PUFJehV7SD97XGwxO4qcYEtjZiP9+tOlftrfA=)
                          5: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: z+pi+kuC0VazBgiXe+1VsCwKFLA9tclPXEew0KsMV3s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:25:d0:1b:0b:55:03:78:99:33:66:8b:10:24:23:5e:c9:13:ad:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
        Validity
            Not Before: Jan 31 04:55:57 2025 GMT
            Not After : Feb  1 08:14:57 2025 GMT
        Subject: CN=0E63DABBB4043E647DC266B1ABD19A5DC5481897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:54:9e:13:90:ab:23:74:b5:f1:bc:8b:2b:
                    82:8f:41:78:f5:51:65:e5:7e:55:2c:12:ad:a8:64:
                    a2:15:7a:67:86:3f:37:c2:6c:15:b6:2f:7e:d4:b8:
                    a5:7f:eb:ba:2a:15:67:f9:7c:aa:bb:be:ae:44:48:
                    46:41:45:bf:a2:c7:c3:80:d4:92:cf:51:95:5e:db:
                    d2:58:97:87:e8:1d:8f:58:4a:18:a1:73:a6:9b:63:
                    5c:0f:c4:fa:84:88:1d:e2:73:42:ec:ee:3c:2a:e1:
                    62:20:fe:01:8d:df:7a:4a:97:5a:3b:db:b5:a8:78:
                    e2:f9:59:bb:0e:6d:7a:47:76:6e:a6:d7:fb:53:2e:
                    90:f4:14:03:7a:d8:b1:ec:9b:c2:b9:0c:e6:e7:30:
                    ce:81:f5:22:61:76:10:c2:1a:23:f7:e7:77:2e:3a:
                    cc:8b:83:2d:09:ae:8c:b5:d1:87:13:31:40:aa:d9:
                    08:e0:ea:ae:fa:df:8a:9e:e9:59:e9:3d:5a:55:ab:
                    35:57:3d:a9:ab:75:93:4c:4e:0a:fa:bf:c4:47:ea:
                    cf:0a:db:45:8c:6b:b2:94:5c:81:bc:08:c6:24:75:
                    d2:bf:54:19:47:20:bd:8c:51:06:28:f0:4b:02:5d:
                    e2:0f:a1:0b:3e:0a:35:72:60:b5:69:ab:ec:87:4e:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:63:DA:BB:B4:04:3E:64:7D:C2:66:B1:AB:D1:9A:5D:C5:48:18:97
            X509v3 Authority Key Identifier:
                keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:3e:29:41:01:f2:ef:52:23:71:82:81:08:be:3a:ce:a2:
         ff:8b:0e:15:86:56:9f:c8:9a:9b:ca:11:95:f9:b6:6b:71:17:
         02:08:94:15:5f:05:8a:a9:2d:8f:5c:82:68:40:5e:28:48:06:
         c2:de:ff:8b:b7:aa:1a:9e:8c:03:57:ef:fc:2d:8f:a1:71:6e:
         63:83:b2:23:f9:ba:1e:bf:de:14:b4:3f:a4:97:6a:58:82:c5:
         cb:2d:8e:39:a5:54:26:f4:17:75:b4:24:0f:58:64:85:93:e3:
         82:5e:43:15:c1:74:66:92:f9:0a:15:46:5e:63:7b:db:b9:e8:
         63:59:b3:db:8b:e6:4f:cb:b3:ac:7e:56:7d:41:94:e6:01:68:
         f8:ff:91:f2:ce:c7:f9:92:73:b8:ec:49:69:ca:04:63:fc:af:
         7a:92:fc:26:62:9f:8c:e0:7e:f3:51:66:ab:60:fc:9f:6e:78:
         b5:9d:a4:b8:53:2d:1e:09:97:f3:3e:01:8e:c6:8e:d1:89:0e:
         a8:3d:45:d9:55:a5:c4:1e:a2:b9:2e:04:a6:bd:55:38:a6:b4:
         3b:bd:40:78:42:5b:02:ed:92:11:e0:98:23:38:00:f7:95:36:
         a5:f6:20:dd:de:15:6c:96:4e:80:0d:43:29:bd:68:9d:ab:9a:
         30:9a:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:52 2025 by rpki-client