Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.mft
File:                     498074B32285FE33C7B5A4A2FBB588257F5871A7.mft (raw, json)
Hash identifier:          6Gd7G2fuq77I7Bf3PoFl2OYzEARJWpt0Ky5K7biXnIw=
Subject key identifier:   C7:5F:08:1E:4B:D5:CE:FF:FE:9E:4D:07:DF:BD:79:2F:5B:72:81:D2
Authority key identifier: 49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
Certificate issuer:       /CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
Certificate serial:       72A8C8BA7EBFBF63F510B1511758D7E55028B654
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.mft
Manifest number:          1F
Signing time:             Sat 04 Nov 2023 19:22:31 +0000
Manifest this update:     Sat 04 Nov 2023 19:17:31 +0000
Manifest next update:     Sun 05 Nov 2023 21:15:31 +0000
Files and hashes:         1: 326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa (hash: p+L0gJ5s4pa18pwYcJBq0zggr5uJmhzAFUc/FFoXFTs=)
                          2: 326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (hash: 93QZ0l0wFpb80cAUFQpDQpP86ImKxALHLF0VshPXl7A=)
                          3: 326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (hash: sXzpA4aHzJzh8mTDksqA/TIHfyACeEoUI9PEqPB1tXc=)
                          4: 326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (hash: 0aRLQCb0rs9vt/UbEKepLyxdxhjfDfdWVPvFhEjkdZE=)
                          5: 326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (hash: KYAGmf3OvUPRL9BXToU2DLgV8kaYbVAmG7RoxTX5Xr4=)
                          6: 326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa (hash: nBKzk+J6Wz15GDGW7LX4vqOLbQJ9jMO2IWjbH/0dgvo=)
                          7: 326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (hash: kYLJ6OLA+67qQXQpHssN4V5FpaAZk6a1AlBu1uCtWl8=)
                          8: 498074B32285FE33C7B5A4A2FBB588257F5871A7.crl (hash: HDexV/bkrc1qI30geIzs7qfeHCxWizPMhYiP7pMO5fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a8:c8:ba:7e:bf:bf:63:f5:10:b1:51:17:58:d7:e5:50:28:b6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
        Validity
            Not Before: Nov  4 19:17:31 2023 GMT
            Not After : Nov  5 21:15:31 2023 GMT
        Subject: CN=C75F081E4BD5CEFFFE9E4D07DFBD792F5B7281D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:c4:8a:5e:cf:09:84:62:bc:4a:d9:cc:4d:
                    46:c1:3c:5f:28:25:ec:6b:01:32:5d:9d:94:44:12:
                    6b:34:b9:e4:12:6f:62:6c:cf:f2:ad:5c:8e:62:e5:
                    cd:d5:20:c3:a8:27:47:43:ee:08:ec:7d:4b:b1:43:
                    d3:9b:ac:2b:b1:78:c2:ee:f7:b9:52:24:d2:7c:ed:
                    7d:6f:4c:3d:f5:4e:f3:e1:af:fa:88:3a:4b:e6:61:
                    7b:b6:3b:8c:24:88:7e:46:67:19:af:0c:7d:ae:ea:
                    fc:5a:3d:19:c7:f8:df:72:e8:11:c6:5f:b4:3d:7c:
                    19:c4:c7:09:d7:ab:15:74:3d:59:71:4d:3b:21:10:
                    bf:ef:a3:a9:7b:71:e9:5d:81:5f:9b:af:07:8e:0b:
                    bd:21:df:51:1b:37:8f:be:c4:c4:a1:9e:de:ba:d2:
                    e7:e4:a7:5e:92:27:bb:c4:6a:53:20:a8:12:2f:9f:
                    06:94:98:aa:34:d4:57:71:26:f7:59:b8:70:a9:a8:
                    39:7c:08:1d:e8:20:0d:7c:13:d5:d4:36:99:40:5c:
                    b4:f0:f4:99:6b:93:78:b7:7b:b6:01:eb:27:c4:e8:
                    8d:73:e4:42:96:f6:5f:42:0a:d9:14:22:7a:a9:0d:
                    7b:90:66:c3:40:4b:31:70:82:3c:96:cf:71:b3:b7:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5F:08:1E:4B:D5:CE:FF:FE:9E:4D:07:DF:BD:79:2F:5B:72:81:D2
            X509v3 Authority Key Identifier:
                keyid:49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:28:40:29:6a:5a:b8:e6:d3:8a:73:64:b8:8f:82:fc:06:fb:
         d0:11:7b:95:06:18:19:34:dd:0f:ff:0f:7f:6a:66:d3:1c:ec:
         aa:d7:9e:ff:96:d0:12:2f:26:9d:ce:40:e0:74:4f:e5:bb:d7:
         88:bd:e3:5c:81:1a:93:1f:eb:65:ba:57:ae:79:c3:17:09:5b:
         d8:4d:4d:77:e2:45:70:3b:b6:a9:6e:1e:ef:4a:53:cf:b4:fb:
         82:73:10:df:29:b8:d8:fc:9d:70:58:a0:8d:d3:0a:d8:45:a6:
         e3:b3:46:bb:bb:b7:d6:69:83:03:e3:ed:81:7d:a3:f9:91:7c:
         0e:a6:14:5f:ca:dc:e5:24:7f:3d:c7:e5:f8:be:11:5b:6f:aa:
         a6:bb:90:23:b1:f8:d7:cb:f7:87:d6:0d:9b:fd:c3:15:1a:92:
         35:5e:cd:16:b3:72:fe:2d:a8:70:a4:45:72:76:d3:37:62:1a:
         60:41:50:09:87:39:f4:3a:8e:f2:47:fd:8b:6a:52:38:f4:ce:
         cb:6c:cd:7d:23:36:d2:62:da:26:b4:46:8a:fa:bd:6e:97:75:
         bf:22:11:8b:36:4d:c7:ba:2d:88:72:b4:75:7f:9a:16:68:b6:
         d6:3b:ca:99:6a:a7:a2:32:40:e9:34:01:a1:e5:d9:04:9b:75:
         b8:a2:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org