Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
File:                     847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json)
Hash identifier:          AaN4IkXH97OdmT5zUJ3PmvrADzRDlKsCiibcTHNZQh4=
Subject key identifier:   00:2E:35:AE:53:E8:E0:A9:11:AD:D2:76:4E:95:A7:7F:A1:BE:19:46
Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
Certificate issuer:       /CN=847138B5401830B89B52403C777718BB40B2B6B5
Certificate serial:       49A1DF9C2912E74F68BE33DA964D436620B03646
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
Manifest number:          0533
Signing time:             Thu 03 Jul 2025 03:34:14 +0000
Manifest this update:     Thu 03 Jul 2025 03:29:14 +0000
Manifest next update:     Fri 04 Jul 2025 03:53:14 +0000
Files and hashes:         1: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=)
                          2: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=)
                          3: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=)
                          4: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=)
                          5: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: jcQZHk1e0URNkc1qonW7c2gqehdkrIen0U1Rnj31zBI=)
                          6: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a1:df:9c:29:12:e7:4f:68:be:33:da:96:4d:43:66:20:b0:36:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5
        Validity
            Not Before: Jul  3 03:29:14 2025 GMT
            Not After : Jul  4 03:53:14 2025 GMT
        Subject: CN=002E35AE53E8E0A911ADD2764E95A77FA1BE1946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:34:d4:8a:58:c1:17:92:a2:b6:b7:71:c7:
                    dc:b0:65:84:80:39:7e:69:7a:dd:95:cb:ba:7b:4f:
                    e3:90:3c:28:f0:16:dc:6a:28:cf:54:ab:a1:9e:f2:
                    95:04:2c:ed:c4:69:95:37:2e:9b:41:6c:9f:b6:cc:
                    0f:d0:76:28:fd:22:36:71:be:99:85:a2:f8:3c:dc:
                    3c:42:1c:70:b9:b6:78:52:8b:33:b9:26:37:a9:5a:
                    0e:13:9d:7a:0b:fa:d5:ec:96:eb:35:45:99:ca:92:
                    d0:37:72:0a:64:8b:00:57:77:07:91:7d:10:64:c5:
                    cf:3d:5e:ca:a6:0b:e1:8a:c7:60:8a:02:c2:b0:1f:
                    3a:1f:54:94:f2:29:2c:7d:f1:02:bb:1c:ff:68:db:
                    5a:41:9b:4b:78:9a:1d:47:02:5d:71:83:40:57:97:
                    55:8e:ad:b5:95:1e:01:95:da:75:d7:f6:1c:38:80:
                    8a:bb:49:04:0c:c8:dd:f1:c0:2e:ea:c8:ea:7b:76:
                    e7:a0:3c:c6:61:9c:88:8b:da:1d:76:37:01:d0:26:
                    81:2e:37:1e:05:50:a2:77:11:54:7d:10:77:a3:af:
                    dc:8b:8e:29:46:96:18:64:75:0e:4e:b5:32:24:91:
                    99:fd:81:85:93:cc:cc:77:10:f4:39:9a:dd:d1:5b:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2E:35:AE:53:E8:E0:A9:11:AD:D2:76:4E:95:A7:7F:A1:BE:19:46
            X509v3 Authority Key Identifier:
                keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:26:b6:dd:40:10:bb:ad:95:29:28:91:e4:7f:97:cc:c4:f2:
         8e:98:20:c3:25:55:63:25:a5:53:d7:0e:81:54:f1:fd:36:51:
         6f:61:01:27:4b:67:3e:07:c5:ff:06:be:a1:a9:d9:2e:c7:35:
         3f:be:85:c3:1a:60:40:fe:75:53:a2:f7:40:a0:32:63:46:86:
         b1:42:ca:1b:21:e1:5a:6b:59:c4:a3:c8:4e:54:52:31:45:32:
         ee:95:61:1f:d5:75:46:d4:1b:89:7e:f0:d9:6c:4c:98:d4:33:
         c4:d4:2e:8b:09:47:53:6c:fe:db:41:2a:5f:d8:e3:3f:3f:c1:
         0b:cd:f8:06:ea:81:e1:e9:7b:ec:e6:ef:0f:38:81:c7:c7:47:
         fe:7f:f3:4f:4a:4d:5d:e6:da:8c:d0:62:2f:f4:5c:93:a1:b7:
         07:a6:1d:4d:69:e4:5e:ee:e1:95:b1:3f:ea:32:ef:b5:6e:b2:
         35:69:ca:64:36:8c:02:43:1b:e2:d1:8a:d7:5b:73:2f:ce:0d:
         2c:4f:ca:a2:11:58:df:bc:98:a0:84:07:c8:bb:f7:fa:c3:fb:
         24:a7:86:d0:4a:d6:f1:df:bf:42:82:0d:15:54:74:11:ff:77:
         47:b5:0d:25:0f:5d:40:66:75:5e:b0:2e:d2:57:fd:d0:5e:78:
         80:0f:6f:36
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUSaHfnCkS509ovjPalk1DZiCwNkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0
MEIyQjZCNTAeFw0yNTA3MDMwMzI5MTRaFw0yNTA3MDQwMzUzMTRaMDMxMTAvBgNV
BAMTKDAwMkUzNUFFNTNFOEUwQTkxMUFERDI3NjRFOTVBNzdGQTFCRTE5NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClojTUiljBF5Kitrdxx9ywZYSA
OX5pet2Vy7p7T+OQPCjwFtxqKM9Uq6Ge8pUELO3EaZU3LptBbJ+2zA/Qdij9IjZx
vpmFovg83DxCHHC5tnhSizO5JjepWg4TnXoL+tXslus1RZnKktA3cgpkiwBXdweR
fRBkxc89XsqmC+GKx2CKAsKwHzofVJTyKSx98QK7HP9o21pBm0t4mh1HAl1xg0BX
l1WOrbWVHgGV2nXX9hw4gIq7SQQMyN3xwC7qyOp7duegPMZhnIiL2h12NwHQJoEu
Nx4FUKJ3EVR9EHejr9yLjilGlhhkdQ5OtTIkkZn9gYWTzMx3EPQ5mt3RWxGFAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUAC41rlPo4KkRrdJ2TpWnf6G+GUYwHwYDVR0j
BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy
QjZCNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1
MjQwM0M3Nzc3MThCQjQwQjJCNkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSa23UAQu62VKSiR5H+X
zMTyjpggwyVVYyWlU9cOgVTx/TZRb2EBJ0tnPgfF/wa+oanZLsc1P76FwxpgQP51
U6L3QKAyY0aGsULKGyHhWmtZxKPITlRSMUUy7pVhH9V1RtQbiX7w2WxMmNQzxNQu
iwlHU2z+20EqX9jjPz/BC834BuqB4el77ObvDziBx8dH/n/zT0pNXebajNBiL/Rc
k6G3B6YdTWnkXu7hlbE/6jLvtW6yNWnKZDaMAkMb4tGK11tzL84NLE/KohFY37yY
oIQHyLv3+sP7JKeG0ErW8d+/QoINFVR0Ef93R7UNJQ9dQGZ1XrAu0lf90F54gA9v
Ng==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:20 2025 by rpki-client