Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
File:                     9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft (raw, json)
Hash identifier:          OtP76J4P0TQAM44GThnskDx94t/2nmb0N3icJoiMv+I=
Subject key identifier:   93:E0:38:AE:95:7C:86:72:99:26:42:69:6E:29:38:03:68:F7:79:02
Authority key identifier: 9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C
Certificate issuer:       /CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C
Certificate serial:       06358AFC0198F128403D7F9CCCBBA5A3D41CD4DB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
Manifest number:          012D
Signing time:             Fri 31 Jan 2025 17:30:49 +0000
Manifest this update:     Fri 31 Jan 2025 17:25:49 +0000
Manifest next update:     Sat 01 Feb 2025 18:55:49 +0000
Files and hashes:         1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: ISxPaIAr0w+jmJbBaEWXIEHSE+CHx0GTfYgpjz88GTc=)
                          2: 9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl (hash: DU1shDUbSKL8hZ4CTBDE17uAI+i7pZd62o6hjtm0LKM=)
                          3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: TlfUIckGRAagg669M3xYDX52RxzXWa4zmUTL/zfVSIE=)
                          4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: sgJS+9fXpP0N1ynvWikQwztRvYYPuX1aHauJ8WKg3M4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:35:8a:fc:01:98:f1:28:40:3d:7f:9c:cc:bb:a5:a3:d4:1c:d4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C
        Validity
            Not Before: Jan 31 17:25:49 2025 GMT
            Not After : Feb  1 18:55:49 2025 GMT
        Subject: CN=93E038AE957C8672992642696E29380368F77902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:86:c3:5a:6d:fd:28:5e:75:d6:d6:c2:8c:
                    9a:d5:0d:27:08:0b:fe:0a:c5:6a:2f:1b:0c:fa:12:
                    64:dc:e5:4e:0b:58:89:c9:f1:a7:e4:03:07:34:d4:
                    4b:2c:d6:b7:9c:b3:aa:a4:67:ae:e8:95:91:3b:60:
                    58:9e:5c:26:da:e6:10:8e:1b:72:82:9f:12:0d:70:
                    70:0a:c4:0e:f5:d9:eb:af:29:1d:61:7b:af:89:2e:
                    81:c2:c6:ca:8e:09:57:f8:4e:8c:11:9b:2d:1e:03:
                    6a:3f:09:3c:38:8e:48:ed:20:b8:c7:fa:d3:4c:5c:
                    7c:44:88:0a:15:7a:c4:0a:ab:1c:10:27:a1:19:6c:
                    a7:1d:c0:7b:72:9e:56:9e:3b:93:90:9a:77:f0:47:
                    8c:4c:f5:7c:bf:d6:b7:a6:08:73:ea:16:80:89:dc:
                    21:4c:ba:2b:6c:02:eb:fb:e8:8c:ed:2b:35:b1:4a:
                    47:c3:15:06:1f:97:27:0e:84:86:b9:e6:81:d6:6d:
                    9a:52:ab:8d:28:13:26:d3:0a:25:dd:2c:ab:a1:c2:
                    ab:3c:d1:38:9d:a8:ec:2a:0b:ae:8c:b5:ee:ca:9b:
                    48:de:93:70:0e:ce:fd:34:fe:58:e4:16:0f:d8:ef:
                    9c:30:eb:5e:90:88:3d:70:a7:95:76:2d:22:b3:89:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E0:38:AE:95:7C:86:72:99:26:42:69:6E:29:38:03:68:F7:79:02
            X509v3 Authority Key Identifier:
                keyid:9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b8:a6:9a:a8:e7:2a:66:2e:10:cc:07:19:6e:6d:ab:64:1d:
         34:a7:cf:05:97:c1:f2:3a:94:98:93:95:49:20:3c:e9:68:f3:
         89:69:41:40:d2:06:37:18:85:9e:7f:5c:70:1b:13:e3:17:d9:
         4f:c3:63:86:3c:4f:18:f0:45:c1:cb:3d:e5:ca:00:99:c7:13:
         ab:be:a7:03:06:83:02:9f:8a:cd:ec:54:e7:48:91:9d:c1:15:
         e9:7d:0b:38:8c:f7:8f:0a:be:cf:bb:38:ad:87:cd:3c:0c:b2:
         42:aa:bd:d3:a7:04:f2:f2:20:6b:de:c1:30:e3:62:e9:b1:f3:
         27:c6:b1:a0:8e:db:52:ce:1a:35:32:7c:82:7b:97:e8:59:69:
         9b:44:01:0c:0b:25:7d:03:56:69:c8:69:3e:a5:9e:af:4c:d0:
         87:56:da:eb:2e:c9:35:e1:fb:02:b9:c8:8e:bf:4f:67:78:d1:
         d0:a4:e6:47:c3:ef:1e:bb:e4:a3:ae:92:53:7a:e9:23:33:f0:
         a8:8c:15:a3:a3:4a:0e:d9:40:9d:8f:71:dd:61:50:21:a2:00:
         a3:81:0d:a4:eb:c9:d1:05:96:8e:2e:28:cb:ce:04:0a:c4:a5:
         e8:25:b7:2b:c7:8f:ef:57:cb:9f:8d:46:f2:bf:13:5a:a8:a4:
         a8:6b:9b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:29:39 2025 by rpki-client