Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft
File:                     1EC805E37C5B53351C6A182763530A50D9308C7E.mft (raw, json)
Hash identifier:          BeBam9a8mhmV5NuNYo9bkPxaSPoPacOjeiQj5Vxv1uw=
Subject key identifier:   14:A2:FD:A4:9C:49:B3:11:C7:0F:8C:4F:65:C2:C6:38:09:AC:7E:92
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Certificate issuer:       /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial:       22DB7DF3C951CD373642C6F3FAD810B1B7ACC6E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft
Manifest number:          04E1
Signing time:             Thu 06 Feb 2025 01:49:32 +0000
Manifest this update:     Thu 06 Feb 2025 01:44:32 +0000
Manifest next update:     Fri 07 Feb 2025 04:22:32 +0000
Files and hashes:         1: 1EC805E37C5B53351C6A182763530A50D9308C7E.crl (hash: RtI6GePe7uuQmVlTQ845VQqeQmoa6L/O8CwBFgCkBYk=)
                          2: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: zAIz/6PrKY+PT044DrbJcMj6yEBb5+L5X0JVIU/xOe0=)
                          3: AS47272.asa (hash: 7hnvKyRy7aTFsWQLILFhWEQEdrN/F4GJi21L2XD7fKQ=)
                          4: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: dl0PTSDr5J0KB1na5PGRTf1dNkrbYDvNEMiS80IVTbk=)
                          5: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: u7gkg0ioA1jBNqlBEo5W2D4JPvOjIz41yHhpEkdqJZM=)
                          6: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: qsZmRVCIb9xrptyGq4LMD66U0ZsMiSdaKtlFWDj+fOk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:db:7d:f3:c9:51:cd:37:36:42:c6:f3:fa:d8:10:b1:b7:ac:c6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
        Validity
            Not Before: Feb  6 01:44:32 2025 GMT
            Not After : Feb  7 04:22:32 2025 GMT
        Subject: CN=14A2FDA49C49B311C70F8C4F65C2C63809AC7E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:e9:d4:7d:10:90:cd:19:45:5b:4b:5d:5b:
                    65:85:d8:db:65:73:fa:ea:36:43:c6:ff:66:e5:60:
                    3b:60:da:4a:0a:fb:66:c4:5d:cf:d8:99:e6:cd:90:
                    ff:36:73:64:8e:83:fd:38:ab:8a:a8:b2:1b:2f:d6:
                    cb:dc:40:c4:3e:63:15:2b:80:39:ea:57:9d:b3:c1:
                    7c:55:66:b3:f5:78:16:31:98:6a:bc:a6:a0:77:b3:
                    f3:39:62:1e:f1:85:98:31:a9:6c:5b:76:11:62:96:
                    78:bb:02:69:54:4c:9b:a7:12:08:ce:50:dc:49:fe:
                    0e:e0:21:c6:23:da:79:48:0d:a4:03:10:37:f7:84:
                    c3:20:5a:99:84:cd:88:7a:c5:f6:18:fb:a3:90:d8:
                    30:71:fa:59:b1:d0:b6:48:69:e8:30:ec:7a:59:55:
                    d5:1b:9c:00:f8:87:43:41:b5:15:18:ef:8c:02:8d:
                    f1:db:46:12:6b:30:1e:47:66:2e:3f:ea:5c:6b:6e:
                    cf:71:01:04:9c:ef:99:cc:66:ac:1b:6c:b0:42:39:
                    31:22:db:e5:af:2a:21:11:be:68:bf:c0:5b:aa:43:
                    74:db:79:19:58:ed:48:a5:02:fa:e6:3f:61:e7:63:
                    22:52:f6:1f:7a:72:21:27:67:fa:6e:b9:ab:34:d5:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A2:FD:A4:9C:49:B3:11:C7:0F:8C:4F:65:C2:C6:38:09:AC:7E:92
            X509v3 Authority Key Identifier:
                keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b3:22:e2:d2:90:f1:10:e3:36:55:cb:d7:80:f5:fb:1b:4e:
         b3:1f:1b:eb:65:4a:17:6f:e5:b3:b2:cf:0d:45:2e:cc:1c:c4:
         ed:28:c9:ba:e2:73:06:1f:d8:3c:a7:b7:e1:ca:8d:6c:b9:e6:
         3b:4a:81:ce:22:81:ff:7e:53:0c:4c:7a:29:44:05:73:0c:8e:
         64:31:fa:34:f7:88:62:25:0e:f5:c4:19:a4:64:2a:aa:15:42:
         98:f6:85:ad:da:e3:1d:5b:7b:7b:de:a3:04:36:f2:d9:22:88:
         fc:ab:c7:a3:01:ad:82:c8:cb:71:77:29:78:61:d2:8d:72:b7:
         cf:24:0d:4b:26:c4:78:d1:d5:e4:52:e2:12:78:25:cf:46:13:
         03:f3:70:fe:59:af:63:60:b1:00:10:dc:6b:19:7f:e4:86:48:
         d2:96:8b:c9:4c:28:fc:de:d4:61:e4:90:46:9d:ca:26:ce:45:
         1b:da:67:90:b3:06:94:18:c9:0e:6e:60:1e:1c:d7:99:79:11:
         83:28:82:a9:af:c3:70:eb:ce:0c:f4:d1:3b:0d:f7:ad:d7:fe:
         7f:41:42:d0:4d:19:df:ab:fd:06:fa:2f:05:4b:02:42:80:5b:
         ea:a1:ac:20:37:f7:87:94:4a:f5:36:49:58:a5:1b:5e:d7:c7:
         39:06:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:44 2025 by rpki-client