Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          80H+O9g0y4FTwtFuFjYDQdc9SOCpS5k34RNf11ZbwPA=
Subject key identifier:   43:6D:8F:91:2D:DD:FB:FC:0F:32:47:46:67:C3:2B:BF:7D:90:66:DA
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       6148E1C6F9373C21B4A52FFF98980ADD628F7768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          0187
Signing time:             Fri 28 Mar 2025 23:15:47 +0000
Manifest this update:     Fri 28 Mar 2025 23:10:47 +0000
Manifest next update:     Sun 30 Mar 2025 00:43:47 +0000
Files and hashes:         1: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=)
                          2: AS207487.asa (hash: sa+x9Ovn0VFP3PZWY4L934Znux06H1Z/gFrTHays+wc=)
                          3: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: ksuCmVsnvOGlMVByjJruxZLqR0ghe+I/mq0k3PiK1yI=)
                          4: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
                          5: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: zXUufmV0ZgYM4pY99hXXb9hrvjsbvgvghLPZeNn0rqA=)
                          6: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:48:e1:c6:f9:37:3c:21:b4:a5:2f:ff:98:98:0a:dd:62:8f:77:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Mar 28 23:10:47 2025 GMT
            Not After : Mar 30 00:43:47 2025 GMT
        Subject: CN=436D8F912DDDFBFC0F32474667C32BBF7D9066DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:df:e4:d1:c4:65:52:63:4b:39:22:e6:dd:
                    61:a7:0f:15:98:e8:a3:b7:08:87:db:91:45:91:33:
                    cc:ae:43:07:f1:a5:02:45:d4:a1:ab:2a:52:a0:04:
                    db:e9:4e:9a:26:f1:fd:2c:01:38:02:04:60:57:80:
                    5a:33:fa:9b:fc:95:e0:2f:36:dc:68:13:1f:f7:7f:
                    2f:e3:ec:00:0f:ad:f6:1c:66:a9:90:62:bb:32:aa:
                    aa:04:87:1a:16:84:1e:f3:b0:07:76:67:16:20:a3:
                    38:c2:7e:dd:ee:6b:89:86:c4:af:4f:bd:99:84:7c:
                    c5:24:69:f6:3b:69:8f:c0:c0:c4:4c:16:fe:e3:b0:
                    ab:2f:70:e9:02:ca:3d:14:31:36:ee:d3:b7:65:b3:
                    7f:c9:07:27:1c:e8:39:4d:49:bb:42:d6:38:9c:dc:
                    46:aa:9d:ef:c3:07:69:56:2e:52:fc:c0:b9:0a:26:
                    16:0c:ea:f4:1e:8b:b1:9c:c7:a7:f6:38:3a:1d:4f:
                    f3:d1:8d:ff:56:03:5c:49:cc:04:56:b0:e7:39:ef:
                    c5:93:31:62:f4:ba:32:56:6a:a9:72:86:77:ef:ae:
                    53:38:7a:59:ec:6a:22:ea:6a:2a:60:e5:b0:64:1a:
                    ed:1b:ac:b9:db:5d:08:17:59:0f:07:20:86:ff:f9:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:8F:91:2D:DD:FB:FC:0F:32:47:46:67:C3:2B:BF:7D:90:66:DA
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7c:81:c8:e2:1e:0e:15:2e:0f:a0:5d:5f:be:4f:1f:34:c0:
         1b:0a:18:05:46:6d:a9:66:63:0a:6b:c6:14:6c:5d:f0:b2:97:
         95:1c:97:86:79:5c:2c:8e:af:65:a6:d3:24:2b:37:50:7a:55:
         76:d3:80:8b:6c:a5:35:5f:c4:cc:76:94:5a:d4:24:24:1b:0e:
         24:d6:31:45:ef:04:a4:62:95:34:4c:0d:4d:1e:95:1b:f3:dd:
         a5:6c:c6:b3:29:f4:d1:78:2d:d9:22:ee:c7:c5:19:5b:bd:58:
         dc:0b:f4:02:a4:19:d1:33:6f:99:c8:de:ef:63:80:b0:80:f7:
         2e:7c:41:a4:2b:c5:fc:ed:f3:18:d7:30:36:21:44:30:b1:02:
         d6:a9:db:09:4b:83:9c:5f:ab:b4:1e:7f:fa:12:20:ac:e9:56:
         d6:08:ee:9e:5e:45:7d:15:42:0d:54:be:ac:eb:c4:a2:84:48:
         43:a1:80:89:a0:f5:06:3d:bf:90:89:44:98:51:34:87:9d:02:
         29:fd:82:36:5b:e9:bb:39:0b:2a:8d:d7:7d:7e:fe:a8:44:18:
         fc:a5:59:53:63:85:a9:3c:04:6a:8e:f1:2b:e7:96:b9:71:87:
         fc:aa:39:96:4a:30:9f:24:7a:cb:0e:f0:28:af:71:49:bd:f0:
         8f:bd:2b:7a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYUjhxvk3PCG0pS//mJgK3WKPd2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0
Yjg0MTZiYzAeFw0yNTAzMjgyMzEwNDdaFw0yNTAzMzAwMDQzNDdaMDMxMTAvBgNV
BAMTKDQzNkQ4RjkxMkREREZCRkMwRjMyNDc0NjY3QzMyQkJGN0Q5MDY2REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj5d/k0cRlUmNLOSLm3WGnDxWY
6KO3CIfbkUWRM8yuQwfxpQJF1KGrKlKgBNvpTpom8f0sATgCBGBXgFoz+pv8leAv
NtxoEx/3fy/j7AAPrfYcZqmQYrsyqqoEhxoWhB7zsAd2ZxYgozjCft3ua4mGxK9P
vZmEfMUkafY7aY/AwMRMFv7jsKsvcOkCyj0UMTbu07dls3/JBycc6DlNSbtC1jic
3Eaqne/DB2lWLlL8wLkKJhYM6vQei7Gcx6f2ODodT/PRjf9WA1xJzARWsOc578WT
MWL0ujJWaqlyhnfvrlM4elnsaiLqaipg5bBkGu0brLnbXQgXWQ8HIIb/+WYjAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUQ22PkS3d+/wPMkdGZ8Mrv32QZtowHwYDVR0j
BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5
YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1
RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z
NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My
QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnyByOIeDhUuD6BdX75P
HzTAGwoYBUZtqWZjCmvGFGxd8LKXlRyXhnlcLI6vZabTJCs3UHpVdtOAi2ylNV/E
zHaUWtQkJBsOJNYxRe8EpGKVNEwNTR6VG/PdpWzGsyn00Xgt2SLux8UZW71Y3Av0
AqQZ0TNvmcje72OAsID3LnxBpCvF/O3zGNcwNiFEMLEC1qnbCUuDnF+rtB5/+hIg
rOlW1gjunl5FfRVCDVS+rOvEooRIQ6GAiaD1Bj2/kIlEmFE0h50CKf2CNlvpuzkL
Ko3XfX7+qEQY/KVZU2OFqTwEao7xK+eWuXGH/Ko5lkownyR6yw7wKK9xSb3wj70r
eg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:44:02 2025 by rpki-client