Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
File:                     B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json)
Hash identifier:          fwuf6EM9Pt5G9R1g4XCib31XsYAy0psDXGcfsbQB1qU=
Subject key identifier:   8B:D8:88:FC:19:E7:4D:C4:78:10:31:5A:CB:C9:91:44:78:77:64:AE
Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
Certificate issuer:       /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
Certificate serial:       778A61BB497ED350699F11B89E7C74E76677FE38
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
Manifest number:          0330
Signing time:             Fri 31 Jan 2025 09:31:30 +0000
Manifest this update:     Fri 31 Jan 2025 09:26:30 +0000
Manifest next update:     Sat 01 Feb 2025 10:25:30 +0000
Files and hashes:         1: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=)
                          2: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: a5mCp+/ogcptIgrDXY0rS6nHoGBY7ESpQhyqkuDShws=)
                          3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8a:61:bb:49:7e:d3:50:69:9f:11:b8:9e:7c:74:e7:66:77:fe:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
        Validity
            Not Before: Jan 31 09:26:30 2025 GMT
            Not After : Feb  1 10:25:30 2025 GMT
        Subject: CN=8BD888FC19E74DC47810315ACBC99144787764AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:73:4b:3c:b4:64:df:73:86:2c:4a:44:0d:
                    af:67:1c:1a:f9:01:bb:3b:b7:9b:a4:fc:94:6f:40:
                    c8:79:97:c7:0e:34:33:1f:12:4e:e5:9d:a4:90:2d:
                    93:49:ca:96:75:82:ce:81:62:96:6d:74:d9:00:0f:
                    ad:b0:49:b6:57:56:cd:c4:97:8a:e0:81:52:bd:a0:
                    94:4a:91:b1:f4:21:ea:2c:66:d4:17:fa:b8:b2:47:
                    eb:ba:59:42:cd:48:85:9d:59:31:89:95:b7:a8:d9:
                    87:0f:e3:e8:ec:9e:30:6e:4d:47:6f:2f:17:e6:0a:
                    e9:4d:65:13:c7:4e:c1:4a:1c:a9:65:b5:3c:a5:13:
                    bf:6e:a5:ce:f2:f6:de:b2:b3:03:f8:1d:30:7d:8a:
                    f9:5c:fc:8c:4c:b2:02:7e:72:d4:fa:58:e6:d9:39:
                    15:b8:95:29:c5:3c:f1:b8:9e:23:ac:65:86:d1:53:
                    f2:27:a6:6e:51:1b:31:82:61:db:df:bf:52:46:ca:
                    fa:b7:e6:51:d7:68:7d:b8:c2:36:7f:f2:66:3d:32:
                    ae:b8:47:63:26:e3:36:e6:6e:d9:28:a5:8f:1d:53:
                    bc:d2:b6:4e:70:cc:56:e3:91:34:0d:b4:b1:c1:76:
                    68:63:a2:8e:e3:d9:0d:96:9d:a3:18:ba:2e:1f:40:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D8:88:FC:19:E7:4D:C4:78:10:31:5A:CB:C9:91:44:78:77:64:AE
            X509v3 Authority Key Identifier:
                keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8d:d6:86:9a:3b:b4:17:37:d1:e6:7c:a9:f0:57:c9:ef:b0:
         57:2a:f0:98:db:2f:5e:09:b1:a5:e6:e3:dd:7a:80:af:d3:f6:
         03:f6:9e:0b:7c:6a:00:2b:5e:fe:66:46:17:b5:fa:ba:e7:91:
         77:be:85:1a:1f:8e:8a:00:b4:d4:ea:d4:3b:8c:f6:f6:cb:8a:
         c7:cd:1c:b2:74:c4:0c:e1:62:44:83:a9:5b:59:69:f7:f2:9a:
         d0:ce:e2:e9:f6:43:d3:1d:8a:0a:e1:a3:c6:83:57:9e:d4:22:
         a4:07:88:11:d9:58:81:99:50:d0:09:b0:4e:84:40:6a:67:18:
         b7:32:64:16:32:d4:5f:fb:81:5e:84:fb:8e:7a:cd:a4:b8:31:
         06:69:43:35:45:25:83:4d:b8:21:29:2f:bb:e8:f2:14:25:fa:
         a2:c4:de:7a:26:2d:51:83:9f:1e:a0:21:c7:cd:4d:b9:c3:df:
         b1:31:81:3a:53:b9:ca:e2:ae:ac:70:51:63:44:5c:6b:5f:b8:
         ec:45:93:f2:07:b2:50:62:18:75:33:9f:c0:ae:e8:f4:e5:ba:
         ee:ed:42:51:2c:b8:2e:c8:a6:ef:64:6a:66:60:56:12:fa:73:
         9f:7d:30:67:69:5d:87:f9:49:38:77:00:4b:13:01:39:b2:01:
         1e:38:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:03 2025 by rpki-client