Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
File:                     22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft (raw, json)
Hash identifier:          GdOk363tMfzmiFpppZ+FscsbbigM8iGRXAm+0zS0c+Q=
Subject key identifier:   F6:66:84:6F:04:42:1C:7B:E9:0A:75:E3:71:46:DE:CD:31:4C:25:12
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       5E736A1C7E5A1D33B86D7C9DBB875B016FE91AFA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
Manifest number:          0142
Signing time:             Sat 29 Mar 2025 03:25:49 +0000
Manifest this update:     Sat 29 Mar 2025 03:20:49 +0000
Manifest next update:     Sun 30 Mar 2025 06:54:49 +0000
Files and hashes:         1: 323630323a663766663a363a3a2f34382d3438203d3e203133383532.roa (hash: +T8BewC/9QE5cGeVfbOn7ZKdKKQGSMU41mYlT4HG40U=)
                          2: 323630323a663766663a3a2f34372d3437203d3e203133383532.roa (hash: LDkqFvPL3o/efEjqIiW+FxteB100HkeM92v9RegGzqE=)
                          3: 32332e3139302e32342e302f32342d3234203d3e203133383532.roa (hash: N9miqn/XeWnI2x4q978KfgI3giSsB9quYTNg+REDQRU=)
                          4: 323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa (hash: jdkeCFq6jZpmJyE5tazsE5RQRmAWRpqXKhXFnEyweqE=)
                          5: 323630323a663766663a37303a3a2f34342d3434203d3e20323135373531.roa (hash: FMLKXgJBfG1dAAJKXhFrC8iIerl7nyzyT/6MRRFKEt0=)
                          6: 323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa (hash: qVVSiSIdf3JARqfKMypInRkZ0SJ7s9R+RmB0x0L/zRQ=)
                          7: 323630323a663766663a33303a3a2f34342d3434203d3e203133383532.roa (hash: XRpSV8mM/ikvrI3omBv7quv/dtlqd32U3vh8DXt5/ow=)
                          8: AS13852.asa (hash: 0kMGq2jANQBO8ytDLtkuzsBRwasLFQXbJoStqg2UGqI=)
                          9: 323630323a663766663a623a3a2f34382d3438203d3e203133383532.roa (hash: P0e96u9n2kfllVLKLgVE+UNoj2PaZ6HDSPCTePHnYNE=)
                          10: 22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl (hash: RTTno36m3XUOZ2Rx1/UjJtJOUbhY91RtfnK4+DFWfOA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:73:6a:1c:7e:5a:1d:33:b8:6d:7c:9d:bb:87:5b:01:6f:e9:1a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Mar 29 03:20:49 2025 GMT
            Not After : Mar 30 06:54:49 2025 GMT
        Subject: CN=F666846F04421C7BE90A75E37146DECD314C2512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:cd:30:07:dd:27:49:ad:31:f3:26:5d:ea:
                    e8:75:7a:2c:16:b5:24:c2:f9:3d:a0:e6:19:7a:42:
                    0c:e1:9e:ba:59:76:90:e2:91:5e:0a:c7:be:ae:94:
                    ca:c0:e3:8a:21:12:10:94:50:7c:4d:70:c0:c0:c3:
                    5f:a9:54:28:5d:fb:18:76:05:a4:d8:9c:a5:40:2b:
                    97:2b:b7:20:26:2c:d5:50:f0:a6:3c:7c:6b:98:8b:
                    8d:a1:b9:d0:b6:cf:7c:34:38:86:b7:de:fd:33:a9:
                    c8:3d:4f:78:2f:72:3c:b6:08:5a:b0:db:1d:86:3c:
                    db:cb:2f:34:dd:ac:ca:35:ef:54:ab:1d:00:4d:10:
                    6d:f0:bc:2c:12:14:19:bc:e9:d1:60:5f:04:01:61:
                    ad:e9:43:8e:41:dc:7c:2d:02:94:5c:13:4a:a2:e7:
                    a8:5c:af:a5:59:b1:4e:9a:13:a0:5e:2a:c0:6c:d5:
                    49:6e:82:7f:6f:63:60:83:b7:7f:60:d9:6e:b7:d5:
                    47:6e:83:74:de:6d:42:a0:3e:1c:59:08:af:f1:3e:
                    34:fe:a7:07:87:ec:8c:c1:65:2b:da:2a:63:cb:02:
                    e3:6a:62:7a:15:50:13:d3:20:7d:b9:52:4a:9c:16:
                    ab:ab:3e:e7:bd:49:7e:7e:1a:3b:c7:bc:9c:86:59:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:66:84:6F:04:42:1C:7B:E9:0A:75:E3:71:46:DE:CD:31:4C:25:12
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:31:e9:d7:c5:2e:b8:e9:ac:7b:b7:f3:36:49:16:34:b1:
         6a:bd:11:ac:42:21:81:11:47:7d:d5:45:af:fa:3b:7e:e1:9c:
         d9:26:7b:f3:2e:5f:8e:06:1f:a8:15:28:7a:e8:2d:f0:a7:62:
         b7:10:c6:7e:ca:33:ff:e5:1c:47:33:14:69:d3:af:0f:a8:84:
         62:4d:91:18:9f:5d:02:7f:d7:59:63:96:74:4c:ac:df:80:3e:
         c4:2e:af:ee:ba:bd:68:5c:77:0e:db:9b:0f:7b:dd:b7:b7:c5:
         1b:8b:87:f5:8d:a9:a8:d4:34:00:f6:11:8c:2b:75:35:67:3f:
         bd:6e:59:f9:09:a8:55:74:8b:ce:4c:d0:07:ad:f5:6b:18:7a:
         ad:62:29:d9:27:03:4e:7c:e0:82:38:0d:21:a8:39:7c:98:75:
         98:6c:30:bb:95:fb:70:c3:4f:61:39:6b:89:84:0f:eb:1e:f7:
         09:1e:dc:d6:00:48:56:1b:49:9a:3d:21:8d:21:e3:07:46:04:
         ed:2b:59:37:b1:ec:8d:ff:53:93:66:91:c6:d0:15:00:99:b2:
         fa:02:2d:ee:1c:5b:97:4b:24:59:3d:5e:f7:56:7e:71:50:00:
         2e:12:00:d4:8c:b0:c0:11:bc:b7:55:89:64:ba:ed:64:aa:09:
         4b:1f:3f:6d
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUXnNqHH5aHTO4bXydu4dbAW/pGvowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdl
NjU2NGMxMDJlZTc5OTZjZTgwHhcNMjUwMzI5MDMyMDQ5WhcNMjUwMzMwMDY1NDQ5
WjAzMTEwLwYDVQQDEyhGNjY2ODQ2RjA0NDIxQzdCRTkwQTc1RTM3MTQ2REVDRDMx
NEMyNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKfNMAfdJ0mt
MfMmXerodXosFrUkwvk9oOYZekIM4Z66WXaQ4pFeCse+rpTKwOOKIRIQlFB8TXDA
wMNfqVQoXfsYdgWk2JylQCuXK7cgJizVUPCmPHxrmIuNobnQts98NDiGt979M6nI
PU94L3I8tghasNsdhjzbyy803azKNe9Uqx0ATRBt8LwsEhQZvOnRYF8EAWGt6UOO
Qdx8LQKUXBNKoueoXK+lWbFOmhOgXirAbNVJboJ/b2Ngg7d/YNlut9VHboN03m1C
oD4cWQiv8T40/qcHh+yMwWUr2ipjywLjamJ6FVAT0yB9uVJKnBarqz7nvUl+fho7
x7ychlnAywIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFPZmhG8EQhx76Qp143FG3s0x
TCUSMB8GA1UdIwQYMBaAFCLsJ7yZl1ND5vJfWkbG5nwoLZbdMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0
LWNjODBkY2EwOTNlNi8zLzIyRUMyN0JDOTk5NzUzNDNFNkYyNUY1QTQ2QzZFNjdD
MjgyRDk2REQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt
NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZTgzZmJmMi1iNjRiLTRjNTUtYmEyOC1j
YTg0YWQwYWY1YWIvZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdlNjU2
NGMxMDJlZTc5OTZjZTguY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
MGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5M2U2LzMvMjJFQzI3QkM5
OTk3NTM0M0U2RjI1RjVBNDZDNkU2N0MyODJEOTZERC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHKqMenX
xS646ax7t/M2SRY0sWq9EaxCIYERR33VRa/6O37hnNkme/MuX44GH6gVKHroLfCn
YrcQxn7KM//lHEczFGnTrw+ohGJNkRifXQJ/11ljlnRMrN+APsQur+66vWhcdw7b
mw973be3xRuLh/WNqajUNAD2EYwrdTVnP71uWfkJqFV0i85M0Aet9WsYeq1iKdkn
A0584II4DSGoOXyYdZhsMLuV+3DDT2E5a4mED+se9wke3NYASFYbSZo9IY0h4wdG
BO0rWTex7I3/U5NmkcbQFQCZsvoCLe4cW5dLJFk9XvdWfnFQAC4SANSMsMARvLdV
iWS67WSqCUsfP20=
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:15:01 2025 by rpki-client