Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
File:                     F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json)
Hash identifier:          RnjPFTQi+aDYGWOeRBPjjgd8NOkNgm3ew9ZI6ASWG3s=
Subject key identifier:   E6:9F:B0:E4:04:A3:D6:8C:53:FC:9D:3A:9C:E5:09:FF:5D:9A:41:78
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Certificate issuer:       /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial:       427537B0D177DCD2F59A96407118D06A88BFF532
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
Manifest number:          04AE
Signing time:             Fri 28 Mar 2025 21:23:35 +0000
Manifest this update:     Fri 28 Mar 2025 21:18:35 +0000
Manifest next update:     Sat 29 Mar 2025 23:02:35 +0000
Files and hashes:         1: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s=)
                          2: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc=)
                          3: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: psst1dsuXP8y8tOOVaHOQmHmRNWIQ7/VuCQTrPfX3sc=)
                          4: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: V0mvV0hNihc/jKb8hU2/V8roZXN+5IVqU0BoJ9bcQys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:75:37:b0:d1:77:dc:d2:f5:9a:96:40:71:18:d0:6a:88:bf:f5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
        Validity
            Not Before: Mar 28 21:18:35 2025 GMT
            Not After : Mar 29 23:02:35 2025 GMT
        Subject: CN=E69FB0E404A3D68C53FC9D3A9CE509FF5D9A4178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:dd:60:cf:bb:e1:c9:a1:cc:25:14:b5:49:
                    22:7f:77:a4:b4:a8:23:d9:b2:5d:7e:f8:7a:4f:e8:
                    87:f4:ea:97:26:e0:83:91:09:f5:5f:77:c5:1c:66:
                    7c:35:a8:01:2a:46:f4:4a:a3:13:fc:08:b5:b3:71:
                    ec:0a:f1:98:d0:d5:66:33:b9:d7:67:fc:b9:45:9c:
                    28:f0:82:fb:16:65:86:a6:7b:57:13:24:64:6a:bb:
                    13:1c:94:88:4c:8e:b5:2d:d2:ed:6c:f8:ac:61:c7:
                    5b:81:cb:84:0b:dd:42:ad:37:15:ad:55:9d:42:84:
                    4e:eb:15:c5:08:79:c0:57:24:ff:e2:22:25:ed:b8:
                    07:b9:63:11:54:ba:4d:26:6c:a1:57:a7:91:ec:e0:
                    42:59:11:46:d8:b8:8e:c2:d1:77:2b:0c:aa:56:d6:
                    75:ac:b7:3c:0c:1b:0b:e7:f6:ac:f1:6f:2e:a7:ce:
                    4b:6f:34:a8:bf:69:c5:bd:61:5b:d2:c3:0b:8c:e6:
                    ad:59:89:40:ee:6d:47:d3:cd:c5:76:20:7e:0e:c2:
                    d1:34:37:37:59:98:7b:b1:48:38:4b:74:0b:96:ef:
                    c5:67:5e:3a:a8:8f:c7:8b:14:5d:2a:7c:97:1d:90:
                    40:3d:5f:89:52:db:1b:78:46:9c:7f:e9:50:a4:f0:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9F:B0:E4:04:A3:D6:8C:53:FC:9D:3A:9C:E5:09:FF:5D:9A:41:78
            X509v3 Authority Key Identifier:
                keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:52:00:7f:9c:4e:83:f2:51:a0:50:e1:99:ab:a7:1a:72:c5:
         8d:e6:e8:aa:f7:ef:12:17:66:43:83:be:93:2c:a9:1e:f0:d6:
         91:f7:92:c6:f6:43:c5:0a:29:ac:da:eb:cf:d5:0f:e1:3d:15:
         ad:3c:dc:20:14:7e:27:2b:e0:17:16:5d:09:62:c1:9d:d4:72:
         98:f1:82:dd:f4:a1:bf:99:9f:90:a7:9c:2e:86:a6:f5:87:8a:
         72:81:4f:c9:eb:6f:40:30:b0:7c:77:c0:61:8e:e2:27:e2:0b:
         67:53:50:bc:48:1b:a6:76:36:2b:a2:25:30:91:3d:65:37:76:
         c7:74:79:ea:35:bb:a3:17:3c:a5:1e:a1:a9:25:db:83:ed:bc:
         aa:07:e9:48:c5:41:67:51:fd:8a:6a:8a:35:c9:fd:ae:1e:68:
         f0:08:48:28:a0:16:f2:94:14:dd:f5:70:d7:b2:7e:d9:ab:9c:
         ef:f3:49:02:67:61:4d:23:72:55:b2:b4:90:0c:7a:dd:15:68:
         44:ba:17:56:d1:a1:19:60:ba:fc:a4:08:6c:b4:31:21:3a:4e:
         7f:10:f6:95:cf:7a:dc:e6:21:b3:e2:73:b1:8b:50:43:3a:f7:
         c6:a4:29:ca:f6:5e:e1:8f:db:f7:9f:f9:51:ee:85:7c:d7:82:
         0a:43:bd:03
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUQnU3sNF33NL1mpZAcRjQaoi/9TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw
MTFBQzEyMjAeFw0yNTAzMjgyMTE4MzVaFw0yNTAzMjkyMzAyMzVaMDMxMTAvBgNV
BAMTKEU2OUZCMEU0MDRBM0Q2OEM1M0ZDOUQzQTlDRTUwOUZGNUQ5QTQxNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5et1gz7vhyaHMJRS1SSJ/d6S0
qCPZsl1++HpP6If06pcm4IORCfVfd8UcZnw1qAEqRvRKoxP8CLWzcewK8ZjQ1WYz
uddn/LlFnCjwgvsWZYame1cTJGRquxMclIhMjrUt0u1s+Kxhx1uBy4QL3UKtNxWt
VZ1ChE7rFcUIecBXJP/iIiXtuAe5YxFUuk0mbKFXp5Hs4EJZEUbYuI7C0XcrDKpW
1nWstzwMGwvn9qzxby6nzktvNKi/acW9YVvSwwuM5q1ZiUDubUfTzcV2IH4OwtE0
NzdZmHuxSDhLdAuW78VnXjqoj8eLFF0qfJcdkEA9X4lS2xt4Rpx/6VCk8IW3AgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU5p+w5ASj1oxT/J06nOUJ/12aQXgwHwYDVR0j
BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2
RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRl
LzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBABFSAH+cToPyUaBQ4ZmrpxpyxY3m6Kr37xIXZkODvpMsqR7w1pH3ksb2
Q8UKKaza68/VD+E9Fa083CAUficr4BcWXQliwZ3Ucpjxgt30ob+Zn5CnnC6GpvWH
inKBT8nrb0AwsHx3wGGO4ifiC2dTULxIG6Z2NiuiJTCRPWU3dsd0eeo1u6MXPKUe
oakl24PtvKoH6UjFQWdR/YpqijXJ/a4eaPAISCigFvKUFN31cNeyftmrnO/zSQJn
YU0jclWytJAMet0VaES6F1bRoRlguvykCGy0MSE6Tn8Q9pXPetzmIbPic7GLUEM6
98akKcr2XuGP2/ef+VHuhXzXggpDvQM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:34 2025 by rpki-client