Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
File:                     8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json)
Hash identifier:          L991YMS9Vf6KWR+7GlfWgjC8HSWGbYcJGNN9P5Yqb90=
Subject key identifier:   6F:E5:F4:54:64:23:3D:98:36:F1:2D:08:7F:E4:6F:65:38:72:AA:3D
Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
Certificate issuer:       /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Certificate serial:       759B0C1253300499E98F8B7B6FEEB00489C9EF9B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
Manifest number:          02D9
Signing time:             Thu 03 Jul 2025 02:22:34 +0000
Manifest this update:     Thu 03 Jul 2025 02:17:34 +0000
Manifest next update:     Fri 04 Jul 2025 04:18:34 +0000
Files and hashes:         1: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=)
                          2: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: lWYjZQ5Ld8qxedFHjd1SYJ3EjXIlTQ1TnJV4koI7Bc0=)
                          3: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: amyqCToWlkncShbPoQ2pFwGosgXS9k+x9sD0wwW0zJ8=)
                          4: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: hjiMPeAFoOKQDboCfUKIfsn4leqndM6IYKZuHeUYFHY=)
                          5: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=)
                          6: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: yY/lRzl5gnRHqPDCI9XTmjkP/VSTS3sUgvtQRFCF6ig=)
                          7: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: IJr5CBZ4iO0h6IlIR+qADhOt/NMtQJ1etkNPbekFk9g=)
                          8: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: WZdnhsf1tbcSVNSrkJIR05RIfLe917aOhwfRnEAl4rg=)
                          9: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9b:0c:12:53:30:04:99:e9:8f:8b:7b:6f:ee:b0:04:89:c9:ef:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
        Validity
            Not Before: Jul  3 02:17:34 2025 GMT
            Not After : Jul  4 04:18:34 2025 GMT
        Subject: CN=6FE5F45464233D9836F12D087FE46F653872AA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:25:34:52:a7:d3:38:62:64:f5:ef:36:11:
                    08:d8:1f:50:59:4f:b4:7d:cc:03:b5:bb:8f:60:43:
                    a4:72:bf:70:26:53:7e:24:43:96:78:20:dd:a2:88:
                    33:53:2b:e5:2b:56:ff:4a:c0:af:f1:d5:9d:3b:c8:
                    ff:45:98:25:c1:59:87:c2:38:c1:01:e7:a4:53:93:
                    e9:90:9c:41:23:2e:65:e6:de:d5:03:3d:41:44:1d:
                    d1:02:c4:0b:0e:95:9c:1f:43:9d:6c:de:52:93:c0:
                    a6:da:e3:99:b2:07:f2:a7:06:c4:4d:89:0f:9d:61:
                    dd:68:af:d7:4b:ba:0b:8d:fc:6d:32:a3:61:49:49:
                    a2:72:83:22:ab:1c:a9:9a:f1:e7:13:41:fc:11:09:
                    44:da:74:d4:f7:df:fd:28:d5:32:45:59:ce:c1:43:
                    bc:08:73:28:bb:01:e9:28:7c:c8:f4:4f:83:8d:ef:
                    16:73:72:31:c6:8b:00:fc:f9:2c:5e:f8:d0:c5:32:
                    87:70:09:3d:5d:f2:a3:fe:cf:7d:d9:9b:83:81:ab:
                    31:3d:45:2a:54:08:19:0e:07:c3:49:07:5a:4e:75:
                    da:2f:aa:db:38:2d:70:50:55:97:38:9c:95:7c:6d:
                    98:08:1a:07:06:2e:dd:76:fc:e6:da:9c:04:ff:e3:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E5:F4:54:64:23:3D:98:36:F1:2D:08:7F:E4:6F:65:38:72:AA:3D
            X509v3 Authority Key Identifier:
                keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:13:a2:5f:a1:72:6c:77:38:8d:77:b2:9d:02:e3:4a:c0:88:
         46:63:19:3f:86:a9:73:f1:09:15:88:ca:0e:38:f6:3f:55:3d:
         d7:a0:d9:bc:11:c1:4a:39:10:ec:28:bf:30:24:a5:56:e4:d1:
         0f:23:c5:3d:0a:4b:52:61:90:11:7d:de:6e:84:c3:e1:76:87:
         b6:27:79:a3:5f:1b:86:58:42:fc:b8:b5:71:0f:1f:9e:3b:f4:
         2f:40:5c:7c:d9:7a:f0:75:82:c7:fd:08:de:c9:e3:1d:42:08:
         d3:27:ac:88:19:5c:5b:d0:ff:01:62:c5:f1:75:25:5b:82:20:
         b8:8e:44:0f:6b:3c:6e:2a:d6:a7:7b:a3:c9:b7:c7:87:e7:cb:
         73:e5:09:ca:17:b2:03:59:74:85:af:e4:63:ee:ae:18:c7:fa:
         94:6a:65:90:47:ab:45:a7:fc:f0:a8:08:bf:53:66:3e:2e:1a:
         39:a3:86:ba:e3:1a:56:63:00:b9:09:1f:0f:52:50:f8:57:25:
         e3:99:87:f6:2a:4b:c7:3f:98:6a:ac:a6:d0:af:cb:a5:d9:30:
         a2:85:84:a6:23:31:df:cb:1c:4c:5b:7c:3e:e3:4d:b0:6b:5e:
         22:64:a4:2a:17:ce:7d:65:8e:9e:ab:8c:8d:e3:bb:f5:75:75:
         be:44:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:58 2025 by rpki-client