Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
File:                     5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json)
Hash identifier:          fVKXKUYICHg45q5rbUgKB9El1LcIIXFKKNu68+n5hxs=
Subject key identifier:   66:A7:0C:07:83:BF:12:87:4C:65:34:7A:8B:8C:05:8E:F1:ED:19:81
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Certificate issuer:       /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial:       5308070E87B567707DECBDC3D852C455938A91DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
Manifest number:          70
Signing time:             Fri 31 Jan 2025 01:10:57 +0000
Manifest this update:     Fri 31 Jan 2025 01:05:57 +0000
Manifest next update:     Sat 01 Feb 2025 02:50:57 +0000
Files and hashes:         1: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=)
                          2: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=)
                          3: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=)
                          4: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: deNfzfdMfi7/yeW1PsczbLVyTqp9dDaf5kS3v7cryKA=)
                          5: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:08:07:0e:87:b5:67:70:7d:ec:bd:c3:d8:52:c4:55:93:8a:91:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
        Validity
            Not Before: Jan 31 01:05:57 2025 GMT
            Not After : Feb  1 02:50:57 2025 GMT
        Subject: CN=66A70C0783BF12874C65347A8B8C058EF1ED1981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:e5:4c:56:45:ff:7c:78:c1:d1:d5:08:d0:
                    c2:27:00:71:54:c9:cb:f1:a4:33:de:04:1b:83:a6:
                    2a:c5:73:88:b9:d4:06:dd:b0:04:a8:0e:fd:40:86:
                    63:02:51:4f:90:eb:6f:19:a1:a8:3a:fa:2d:96:ee:
                    6f:36:25:54:9e:db:bd:03:9a:05:95:97:e5:77:f8:
                    b9:38:8f:02:06:7e:4b:37:ec:71:14:37:5b:a7:b6:
                    77:53:ac:e1:13:39:8c:af:dd:52:8b:e5:85:c8:03:
                    5e:e4:ed:7d:a5:02:df:97:46:0a:46:35:19:dd:b9:
                    78:49:40:99:5b:d9:25:8e:6b:31:4d:b8:4c:6f:c2:
                    6a:fe:bb:d9:21:12:fb:71:35:e7:7d:64:25:9f:5e:
                    94:b3:6d:84:d6:f6:4a:c0:df:07:66:f9:68:8b:fe:
                    8e:66:9a:ae:15:6e:3e:bc:ff:d3:13:90:98:0e:a4:
                    49:b1:1b:96:c4:c7:d1:4f:f6:e0:65:76:1c:ff:f6:
                    eb:40:a3:c1:6c:ea:41:ec:cc:ae:9c:1a:73:72:96:
                    70:dd:aa:15:4f:2a:4a:60:6a:35:b0:70:8b:03:26:
                    9c:10:b5:df:66:25:a3:54:24:35:79:43:13:e0:60:
                    11:a1:8e:3d:4c:38:70:d4:ca:67:05:92:dc:b3:49:
                    1d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:0C:07:83:BF:12:87:4C:65:34:7A:8B:8C:05:8E:F1:ED:19:81
            X509v3 Authority Key Identifier:
                keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:94:8b:40:43:5f:ce:7a:d2:49:59:0b:75:09:3f:22:e1:7c:
         17:18:0f:32:d4:c3:ec:a1:20:2f:1c:43:90:13:16:f2:dc:be:
         87:70:29:0c:5c:ae:56:ca:dd:83:d4:fc:a1:0d:94:8d:6c:25:
         59:36:3d:36:d2:67:44:24:4c:85:8d:bd:4a:49:1f:d9:ed:0a:
         06:c8:bb:cf:8a:27:c5:2d:48:d3:d6:fa:ab:15:f3:c2:37:2f:
         e6:c8:f4:58:14:2d:30:7e:ca:2c:53:18:e5:ed:cd:c5:b5:2e:
         3f:43:90:54:15:86:9e:03:41:b0:bc:81:93:d6:12:ab:9e:85:
         ca:e4:02:5a:62:a9:dc:36:6b:57:3a:d6:57:af:a6:0a:8c:bf:
         8e:82:9d:7c:d5:88:e8:08:f8:96:6d:3e:4f:37:dd:51:2d:86:
         91:43:b2:16:0a:e8:04:7c:46:ac:58:c7:58:3b:7e:3f:c0:01:
         f7:a3:ac:32:bc:69:74:35:b8:7d:3a:92:24:62:1f:bb:ca:dc:
         ac:d9:78:a8:6c:cb:ed:0a:7f:a6:64:e2:96:94:2e:b0:75:e5:
         ae:6d:3a:83:69:06:ea:e5:38:24:36:5a:01:53:9c:ce:8a:71:
         66:47:e5:f7:3f:c1:7c:c9:53:48:81:42:a5:89:b4:fd:5a:8a:
         dc:b0:ac:bb
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUwgHDoe1Z3B97L3D2FLEVZOKkdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx
ZTAxNzYwODAeFw0yNTAxMzEwMTA1NTdaFw0yNTAyMDEwMjUwNTdaMDMxMTAvBgNV
BAMTKDY2QTcwQzA3ODNCRjEyODc0QzY1MzQ3QThCOEMwNThFRjFFRDE5ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3+VMVkX/fHjB0dUI0MInAHFU
ycvxpDPeBBuDpirFc4i51AbdsASoDv1AhmMCUU+Q628Zoag6+i2W7m82JVSe270D
mgWVl+V3+Lk4jwIGfks37HEUN1untndTrOETOYyv3VKL5YXIA17k7X2lAt+XRgpG
NRnduXhJQJlb2SWOazFNuExvwmr+u9khEvtxNed9ZCWfXpSzbYTW9krA3wdm+WiL
/o5mmq4Vbj68/9MTkJgOpEmxG5bEx9FP9uBldhz/9utAo8Fs6kHszK6cGnNylnDd
qhVPKkpgajWwcIsDJpwQtd9mJaNUJDV5QxPgYBGhjj1MOHDUymcFktyzSR1hAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUZqcMB4O/EodMZTR6i4wFjvHtGYEwHwYDVR0j
BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj
ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0
QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i
ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5
Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5SLQENfznrSSVkLdQk/
IuF8FxgPMtTD7KEgLxxDkBMW8ty+h3ApDFyuVsrdg9T8oQ2UjWwlWTY9NtJnRCRM
hY29Skkf2e0KBsi7z4onxS1I09b6qxXzwjcv5sj0WBQtMH7KLFMY5e3NxbUuP0OQ
VBWGngNBsLyBk9YSq56FyuQCWmKp3DZrVzrWV6+mCoy/joKdfNWI6Aj4lm0+Tzfd
US2GkUOyFgroBHxGrFjHWDt+P8AB96OsMrxpdDW4fTqSJGIfu8rcrNl4qGzL7Qp/
pmTilpQusHXlrm06g2kG6uU4JDZaAVOczopxZkfl9z/BfMlTSIFCpYm0/VqK3LCs
uw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:59 2025 by rpki-client