Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft
File:                     5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft (raw, json)
Hash identifier:          yM/kMkp9Y2sYkHU7dmF8jk1DY3MXjEeT7HL/hajGcWA=
Subject key identifier:   E9:47:3B:68:20:68:99:40:10:D4:4D:24:23:72:E3:0E:1F:39:45:FF
Authority key identifier: 5C:76:E6:4D:72:F3:F9:5E:46:8F:23:BE:C4:5D:C2:F2:FF:76:93:8B
Certificate issuer:       /CN=5C76E64D72F3F95E468F23BEC45DC2F2FF76938B
Certificate serial:       4B7652902574BAEC5489163D3DEDF8E1642859EE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft
Manifest number:          1A
Signing time:             Wed 02 Jul 2025 16:00:32 +0000
Manifest this update:     Wed 02 Jul 2025 15:55:32 +0000
Manifest next update:     Thu 03 Jul 2025 18:07:32 +0000
Files and hashes:         1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: e0ZUE2ihMqIcVzaW4KaZGqefPbQ9GLKeZeIru7vw7OQ=)
                          2: 5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.crl (hash: Md37P7ZbReswi9uA0NtIUqZbL3j4y1NUUl4enynT9bM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:76:52:90:25:74:ba:ec:54:89:16:3d:3d:ed:f8:e1:64:28:59:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C76E64D72F3F95E468F23BEC45DC2F2FF76938B
        Validity
            Not Before: Jul  2 15:55:32 2025 GMT
            Not After : Jul  3 18:07:32 2025 GMT
        Subject: CN=E9473B682068994010D44D242372E30E1F3945FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:2d:64:c4:ff:13:4f:f3:19:e6:1a:e9:5d:
                    1b:07:27:bc:cd:6a:88:8c:11:68:15:be:71:55:97:
                    b3:dd:8e:c2:cb:b2:77:3f:cc:57:7b:65:09:eb:b6:
                    d2:98:eb:19:b9:73:c0:73:86:5b:10:aa:8a:a7:e4:
                    48:08:f5:2c:f7:77:be:28:0a:c0:ce:54:e8:80:01:
                    a4:a5:b7:9c:03:2e:41:2e:8b:c5:09:3c:03:5e:c0:
                    48:47:d1:ee:7e:b3:f5:82:93:ff:ff:bd:75:bf:36:
                    cd:a7:6e:94:2b:1a:11:9b:11:aa:01:79:3d:79:6a:
                    1b:c1:d2:4d:97:33:96:87:0e:b0:f6:c8:65:dd:b6:
                    27:13:79:9e:47:c9:f8:94:d9:7f:ea:df:53:43:be:
                    2c:4d:3c:14:ce:b6:f5:7f:cd:ad:ef:d1:b3:5f:1a:
                    10:d6:7d:2b:f3:32:f5:22:2f:03:df:77:53:32:00:
                    9f:3a:50:fc:2e:74:19:f9:1a:17:81:5c:5a:35:b6:
                    14:c5:4b:cf:3d:dd:76:ae:f7:89:5c:c7:c8:21:27:
                    56:ca:03:7f:97:11:41:45:2b:df:c1:f8:76:08:b1:
                    f3:cf:04:c0:46:6a:d5:7c:76:96:3f:68:a4:2c:e6:
                    a5:78:5a:ef:a0:87:e8:b7:44:a9:6f:df:f9:12:bb:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:47:3B:68:20:68:99:40:10:D4:4D:24:23:72:E3:0E:1F:39:45:FF
            X509v3 Authority Key Identifier:
                keyid:5C:76:E6:4D:72:F3:F9:5E:46:8F:23:BE:C4:5D:C2:F2:FF:76:93:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:48:f2:0e:7a:fd:ed:66:24:89:c5:ab:c5:22:4f:f7:f1:93:
         a3:b0:b5:cb:2a:e2:07:51:2a:05:d4:bd:d1:32:4c:f7:fc:a2:
         de:d2:89:75:c6:99:c9:73:d6:aa:e6:56:e4:ac:4f:83:90:3b:
         d7:5e:b8:0e:ed:8e:f4:7e:b4:c0:02:7a:37:30:5f:3c:d8:dd:
         2b:41:af:43:dd:c9:0f:28:f3:84:ec:ef:99:40:f6:09:25:0c:
         9e:23:8b:a8:1d:1b:f3:88:c2:d3:7a:9c:e0:16:67:8d:4d:63:
         db:4f:d4:90:55:ff:c2:d8:37:f5:91:40:91:ac:9c:23:9c:e6:
         23:83:86:37:ff:77:fa:88:4c:b7:c2:e9:7c:d4:08:63:0c:51:
         a4:61:66:d4:23:b6:f7:2f:dd:c0:84:e4:4d:a9:74:44:46:ef:
         35:a7:e9:0a:a5:b9:d0:87:49:ca:f1:86:5e:b4:07:d5:3d:65:
         db:76:bf:f6:b8:ef:78:33:e2:bf:97:11:40:76:4c:53:29:c7:
         8f:db:2b:6a:b6:2e:71:5f:06:a6:e5:64:7c:30:76:01:c2:dc:
         86:17:6c:e5:c4:95:cf:59:99:41:f7:0d:ed:7b:54:fc:03:56:
         a2:18:a4:2c:9f:d1:65:57:f9:5d:f5:3f:f3:c9:e8:89:d4:ce:
         17:29:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:58 2025 by rpki-client