Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
File:                     F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json)
Hash identifier:          fpB4obN8ONugf2Ws+mshn2oV0pLw55HaRcT2FVZ8BH8=
Subject key identifier:   77:84:C5:56:CB:9C:AE:F1:51:75:A5:25:89:3B:9D:64:0F:EB:8B:A9
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Certificate issuer:       /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial:       1927C7FE4ECCC2FA59ADDCF4D336CBC1705592C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
Manifest number:          0116
Signing time:             Fri 31 Jan 2025 14:20:13 +0000
Manifest this update:     Fri 31 Jan 2025 14:15:13 +0000
Manifest next update:     Sat 01 Feb 2025 17:29:13 +0000
Files and hashes:         1: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: 7H9TXOPmRSCpSLvpUH5h0kneMvmA5e0Xb9ByogPe2KE=)
                          2: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 2yKfO2WqsfZLWhFp8Vgn43JsqJJGZp0JL5E1MzApx8g=)
                          3: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: eJSksT4tbDIQ9nxZDstLl/kGIUJo4Eck2iH/dVXoJzg=)
                          4: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 8/2mbGbaC4ennlzI7y1e8hUNr9fsr7Pr+/K69/OYKQg=)
                          5: 326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa (hash: 5gKZW/GJ6szyeA660SSSZ04c5MFxaWdT28EUODZAZVs=)
                          6: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: xmc3BnnZ+Jk0YCLMgR3itH+0mS4SpqsKqNOuY+CfTxA=)
                          7: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: +JU+ydXmMjIBHlt1kVXfkJBGqdmH1ATfk8PRfe8t4Rc=)
                          8: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: jXKKUMSDIyTb4ezvVpRo3NFIUpia25d8OkLWehTc52I=)
                          9: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: Nz2k0o2IS41o55idTp4HvK3uNxIMYgMNKvrr57G+kIE=)
                          10: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: W33AY8n66YBiKFAdMlU1PcWz7qog9dVaO6LUtxa3ULA=)
                          11: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: Fa+HJyGeN4OUII4mISEevZUyzThis5w7MVhgz+1adr4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:27:c7:fe:4e:cc:c2:fa:59:ad:dc:f4:d3:36:cb:c1:70:55:92:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
        Validity
            Not Before: Jan 31 14:15:13 2025 GMT
            Not After : Feb  1 17:29:13 2025 GMT
        Subject: CN=7784C556CB9CAEF15175A525893B9D640FEB8BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:0a:91:80:6a:a2:db:90:b5:64:72:b8:6b:
                    81:e5:64:9a:5d:93:bb:e6:46:18:21:7e:d8:36:75:
                    fe:dc:0b:e1:e5:ea:cd:50:ab:b9:59:2f:6e:05:47:
                    b7:2d:c5:7b:63:2a:11:20:db:a0:8d:7c:a8:f8:e7:
                    63:e8:a5:c4:9b:66:b2:ae:d2:67:fd:39:7e:e2:9c:
                    f2:97:24:22:02:98:00:ac:cc:ab:72:c9:36:dd:6e:
                    dc:72:0a:d0:60:5b:7f:e0:a1:fd:2e:36:fe:60:3b:
                    45:62:dd:0f:b7:5e:1e:a9:85:72:a9:96:b3:ce:4d:
                    10:15:e9:0d:b8:65:06:7b:59:e7:cf:e5:13:cd:9f:
                    bd:ad:ae:24:27:36:19:9f:09:b2:3c:7c:ae:be:32:
                    1f:ea:3b:ac:bd:1f:b1:c2:a9:20:71:ad:60:31:a1:
                    f7:d5:c3:99:28:21:c9:bd:f6:4b:79:29:c8:79:37:
                    f7:e7:aa:34:14:d6:b1:c7:e1:7f:61:7e:65:7e:9e:
                    dc:b7:47:52:9a:83:2f:48:16:ba:e4:5b:e8:ee:93:
                    eb:50:fa:89:48:df:ca:35:07:af:91:84:e7:71:d0:
                    1e:26:f6:96:43:e5:53:75:ce:6c:3d:cc:9d:74:e2:
                    24:3f:7d:e8:31:7d:aa:5d:8e:15:b4:3d:04:7a:17:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:C5:56:CB:9C:AE:F1:51:75:A5:25:89:3B:9D:64:0F:EB:8B:A9
            X509v3 Authority Key Identifier:
                keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:66:34:1a:f6:21:b2:e1:88:6b:7e:e8:e1:11:78:02:b9:24:
         38:f2:86:7b:e2:52:18:11:ea:83:00:04:bf:05:66:5a:da:fe:
         65:7a:28:75:b2:f2:5e:58:8d:88:06:05:fa:2d:7d:3e:88:b8:
         a2:18:0d:02:87:92:cd:c1:ba:73:40:f6:84:e6:58:84:f8:e1:
         fd:f6:02:4c:9c:a0:e8:c6:43:82:e3:10:6b:26:b2:3c:0d:ac:
         59:d5:e2:63:f9:69:a2:68:4e:57:d8:27:8f:94:b2:97:4d:f2:
         ac:07:84:a4:48:0c:8e:89:45:65:15:fb:5e:9d:8a:3a:c9:32:
         38:f4:e4:d8:ae:78:b3:40:3f:27:16:87:b9:ff:3d:7c:e3:fa:
         32:fc:86:81:2e:67:48:3d:80:9f:a6:4d:77:9a:48:c0:54:27:
         09:52:4e:a2:12:65:d1:2b:d7:02:29:58:2d:23:dd:c6:e8:09:
         89:27:78:94:5b:60:f6:46:0d:01:ca:0a:5c:16:3e:4c:b5:33:
         a8:ea:f8:92:1e:da:9a:ee:c3:ec:ae:02:d6:4c:0c:45:2c:07:
         67:be:02:a7:54:20:f9:0a:31:c5:27:fb:d3:c8:37:c2:e6:dd:
         02:bb:a9:4d:04:b1:82:7a:b2:da:58:c4:3c:0a:c8:7c:9c:80:
         a8:9d:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:58 2025 by rpki-client