Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
File:                     53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json)
Hash identifier:          DC/r7HGEQXKwRPzzAPHpOLDKAEJLiMNLSRuS6D07yLM=
Subject key identifier:   87:CD:AF:74:28:1B:BC:74:2A:6A:96:51:B2:97:57:CC:57:6A:7C:80
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Certificate issuer:       /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial:       408160226EBCADBAE2821E25EF9A2F3E0BF823F0
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
Manifest number:          0359
Signing time:             Wed 02 Jul 2025 10:29:17 +0000
Manifest this update:     Wed 02 Jul 2025 10:24:17 +0000
Manifest next update:     Thu 03 Jul 2025 12:24:17 +0000
Files and hashes:         1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: iJpluoF3HoeICJtyNSVX2W7UjOGIKihBFoLXBu2iRVU=)
                          2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=)
                          3: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: vsGn4ECaqoaqa+wuam8HWKIHRPtnN2geD91LhRlohMY=)
                          4: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=)
                          5: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:60:22:6e:bc:ad:ba:e2:82:1e:25:ef:9a:2f:3e:0b:f8:23:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
        Validity
            Not Before: Jul  2 10:24:17 2025 GMT
            Not After : Jul  3 12:24:17 2025 GMT
        Subject: CN=87CDAF74281BBC742A6A9651B29757CC576A7C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:0c:33:83:1e:a9:e4:f3:a1:c4:51:4c:5c:
                    5a:f2:88:cb:5c:e8:15:c3:2e:a3:2b:2c:92:83:61:
                    ad:72:0c:81:81:b8:20:1d:f0:a5:42:c2:ef:47:3f:
                    26:ae:b7:69:61:b5:16:82:71:f9:ca:90:15:91:38:
                    91:4e:64:78:dc:79:0c:d4:c9:da:bd:04:5e:55:da:
                    69:c5:3d:a8:5b:04:71:17:1f:63:60:80:27:20:98:
                    d3:a3:b1:f3:fd:a9:70:36:55:b7:88:ef:91:94:d7:
                    f7:be:e9:96:92:3e:2e:9a:32:be:5c:49:cb:ee:2a:
                    d4:68:d4:98:6a:71:ab:78:7a:23:c5:3f:69:a8:84:
                    e9:f1:5f:ff:a3:29:12:1c:bf:92:54:ac:18:b7:71:
                    ee:aa:e2:40:aa:ae:39:a7:c5:9b:41:56:76:f6:cb:
                    07:5e:24:65:7b:67:c8:cd:f8:1c:ea:f3:a5:84:95:
                    2a:c1:9e:a4:98:de:da:34:d7:55:34:cf:25:54:ba:
                    b6:cf:a4:b5:39:75:67:9a:95:73:77:49:4d:47:c9:
                    1a:55:5b:44:a0:b2:d2:24:f6:72:3c:e9:8a:2b:a4:
                    0e:8a:35:b8:3f:15:3d:29:78:bb:3d:d4:f5:4e:bd:
                    c7:1b:92:8a:6d:0d:7b:46:5e:06:ee:5e:bf:59:49:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CD:AF:74:28:1B:BC:74:2A:6A:96:51:B2:97:57:CC:57:6A:7C:80
            X509v3 Authority Key Identifier:
                keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:fa:9b:d0:bb:44:d3:82:c5:0e:da:68:96:f4:9e:5f:48:f8:
         d0:e7:f0:2c:79:21:f3:ec:7f:74:1a:d3:6d:35:a1:eb:51:26:
         7d:2e:9a:f3:c5:04:76:0a:98:e4:db:b1:51:36:d8:e4:a7:6a:
         be:6c:93:5f:39:6e:9f:5c:04:29:c0:91:65:b0:1d:d1:fa:dc:
         25:67:ee:8a:e8:d5:15:10:be:3a:c0:b0:2c:ff:dc:97:4b:8b:
         36:e9:e8:fa:a5:87:20:fc:f9:51:22:ec:d6:51:ec:c3:2c:0a:
         7e:b2:cf:a1:7d:82:68:75:85:a5:6e:d7:5e:cc:0d:62:24:22:
         d1:fd:87:3a:b7:e6:77:dd:4d:15:be:86:7c:54:9b:ae:94:58:
         5d:e0:1b:04:6d:5c:d1:b6:b8:84:5e:9b:66:25:7e:f9:2d:56:
         5d:76:f5:7c:21:ab:7c:cb:15:c7:88:f1:72:ef:db:0d:87:d4:
         25:aa:89:a3:59:1c:19:53:71:c2:9b:2c:10:5b:19:23:4b:a3:
         5d:7a:c7:9a:ba:79:2e:9c:a3:f0:db:2c:e4:eb:e4:cb:d5:00:
         fd:e0:82:21:5d:16:d7:b7:3b:09:22:33:2f:b4:b3:18:fe:2f:
         0f:dd:8f:21:1f:63:c2:e4:75:3d:e2:4e:37:15:c6:a4:9b:51:
         dc:b7:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:42:00 2025 by rpki-client