Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
File:                     41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json)
Hash identifier:          caBdPMSpeoraJWJq2z3Dd5DvKCxc8tU86AH7syqV4SE=
Subject key identifier:   5F:DF:41:2B:C0:2E:84:7D:13:23:33:E9:F2:D0:21:00:1E:C7:A3:00
Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B
Certificate issuer:       /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B
Certificate serial:       641AFEB0038EB0C32837552DE6F240DA316FC115
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
Manifest number:          016A
Signing time:             Mon 14 Jul 2025 02:07:51 +0000
Manifest this update:     Mon 14 Jul 2025 02:02:51 +0000
Manifest next update:     Tue 15 Jul 2025 04:35:51 +0000
Files and hashes:         1: 326131343a373538353a3a2f33342d3438203d3e20323134343531.roa (hash: yjNthGbbmW0Ge+31mmqVYbuaafw7Gi25y1PPXI63utw=)
                          2: 326131343a373538343a323030303a3a2f34342d3438203d3e20323134343531.roa (hash: TvKEkNYj4nNFZRmfcRKXhCgzG3ePxJK2Myah2LEVKqU=)
                          3: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: UBlAFkY/xx60bUX96jrrs8ckmIkefT80uVSEqQwwAR0=)
                          4: 326131343a373538343a326630303a3a2f34302d3430203d3e20323134343531.roa (hash: BVEufTN1j/5/3JlAtiBF76psjVuWYELIUZLMoB7yQqo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1a:fe:b0:03:8e:b0:c3:28:37:55:2d:e6:f2:40:da:31:6f:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B
        Validity
            Not Before: Jul 14 02:02:51 2025 GMT
            Not After : Jul 15 04:35:51 2025 GMT
        Subject: CN=5FDF412BC02E847D132333E9F2D021001EC7A300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:b2:f4:c8:51:08:89:82:55:85:3d:52:8e:
                    99:7a:de:96:04:0d:38:10:25:45:43:9f:47:d1:c5:
                    0f:c4:9b:8e:1a:73:80:59:ca:c6:b9:a0:f3:68:fd:
                    72:61:23:fa:7e:f1:a1:0c:45:47:59:b9:6b:65:2b:
                    d5:84:78:52:6c:8c:35:c0:0a:c8:0f:8c:32:a5:99:
                    72:11:bd:4e:e0:45:c1:4d:ff:4b:98:00:67:72:15:
                    67:ad:8e:6e:f1:d4:89:e2:b9:eb:6e:df:92:38:17:
                    de:2c:ce:c2:61:9b:96:f8:d9:0b:28:c9:f3:11:f8:
                    1d:ea:4e:f8:f7:e5:64:d0:37:88:15:7f:51:62:e2:
                    8f:ca:af:b5:37:4c:f2:44:2f:75:d1:cb:ad:aa:13:
                    ba:16:7c:74:69:15:24:e8:8f:fe:9b:2e:87:75:29:
                    5d:34:6f:4b:08:d4:7d:69:fa:5b:56:de:5b:a6:f3:
                    a3:84:82:d1:58:78:92:e0:b7:4a:21:74:ff:12:cc:
                    e8:26:31:56:fa:a5:5b:df:b5:66:4b:f0:d5:6f:bf:
                    de:1f:f6:32:3c:94:e6:86:a4:7c:3f:88:fe:49:1f:
                    f4:d1:fb:27:77:e4:2a:1b:98:1d:cd:0b:c4:47:a4:
                    05:9a:e9:82:4b:54:d7:08:b1:c1:c7:9d:39:26:01:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DF:41:2B:C0:2E:84:7D:13:23:33:E9:F2:D0:21:00:1E:C7:A3:00
            X509v3 Authority Key Identifier:
                keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c2:52:95:ed:ed:4a:94:1a:34:a1:ad:05:9e:87:7f:4b:ee:
         4c:69:82:99:3e:fe:48:66:a9:34:5a:85:09:09:71:53:06:b9:
         11:79:c4:86:f3:d5:4f:83:5a:ff:48:c7:8b:b0:f1:23:92:c7:
         12:93:65:02:25:79:47:98:db:63:f0:ce:a7:3e:98:c1:df:93:
         e4:5e:00:16:23:8e:25:f9:e2:57:41:cc:80:54:89:56:68:8f:
         b3:cd:e1:96:d3:3e:4a:af:33:2b:bf:12:a8:b0:14:dd:da:b3:
         80:b6:60:78:c2:9b:13:3a:0e:19:0d:33:77:0f:6f:d1:ee:1a:
         56:6b:5d:9b:07:d1:ea:29:43:7e:fd:f1:d6:45:04:c0:18:cd:
         d7:cc:c8:c3:69:ed:98:fc:d3:e0:a4:a8:1a:9a:47:fd:7f:35:
         64:08:83:03:93:40:3a:a0:f1:95:9a:d7:50:ac:01:c7:b1:d4:
         6c:20:4e:71:a2:dc:9d:75:15:fe:98:59:15:07:1f:a0:e5:57:
         ac:0a:1a:47:f8:b8:96:f1:e8:6c:14:97:e6:26:bc:f7:a8:d6:
         4d:fd:ba:f8:7b:f8:3d:0c:90:a5:cf:47:b5:ba:a5:96:29:ec:
         0c:4b:62:31:ba:5e:bc:11:af:68:3c:a4:2b:b3:a1:cd:34:69:
         a0:43:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:19:14 2025 by rpki-client