Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File:                     B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier:          vmr5jyVzgjhwWcu9uVwSmNAVa1PCNwscpzKQUdfH7HM=
Subject key identifier:   A9:1B:4F:26:7D:8B:DD:E8:E5:EE:A0:37:56:14:63:78:96:61:59:1E
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       7A4D75F4C8081610AF47E942474BA702BDB4D075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number:          02CA
Signing time:             Sat 29 Mar 2025 07:59:01 +0000
Manifest this update:     Sat 29 Mar 2025 07:54:01 +0000
Manifest next update:     Sun 30 Mar 2025 09:15:01 +0000
Files and hashes:         1: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=)
                          2: 39332e39352e3131332e302f32342d3234203d3e20323133363231.roa (hash: jPMOnVBJGyWgOv32913K0+cdT1poUcrcfEBeZTHQ2jQ=)
                          3: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: MF/szlJtg3jR946D7Iy8tt2rHbx2IcEkKMT7PmewPLE=)
                          4: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=)
                          5: 39332e39352e3131322e302f32342d3234203d3e203231383539.roa (hash: 1vjH8mfscIQPc/vTfaSXURucL05I0LJVlR9FbaAY1YM=)
                          6: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=)
                          7: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=)
                          8: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=)
                          9: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=)
                          10: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: r4JVF44s+6JmIBPIA8JCZAOotEjRk2mxxzw1PCR9Alc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4d:75:f4:c8:08:16:10:af:47:e9:42:47:4b:a7:02:bd:b4:d0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Mar 29 07:54:01 2025 GMT
            Not After : Mar 30 09:15:01 2025 GMT
        Subject: CN=A91B4F267D8BDDE8E5EEA037561463789661591E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:62:1f:e3:3a:44:cd:8f:58:39:19:2d:64:
                    ec:22:3c:8c:32:f6:8b:de:8d:d1:4a:fb:74:90:4a:
                    e1:35:46:5b:bd:cf:54:d0:35:b0:b1:63:e2:c5:08:
                    b6:36:26:37:bd:7d:7b:55:e0:25:8d:df:20:14:f7:
                    73:dd:87:27:66:28:6c:bb:7f:88:61:03:5c:2a:ef:
                    08:7f:4a:ad:3d:6e:59:b1:1a:03:9e:51:9b:25:08:
                    ea:f0:82:ce:de:e1:e0:c4:d7:e9:1d:d7:9a:6e:0f:
                    fe:e4:20:64:23:ea:d6:e5:e8:af:f7:b8:b4:c5:a6:
                    c8:42:7a:5a:ae:54:d0:ea:37:52:41:d0:a0:f8:b8:
                    b6:50:41:3c:46:84:85:a5:b0:bd:50:8d:84:bf:f6:
                    64:e4:08:98:81:e3:89:72:1a:90:83:db:3e:b5:49:
                    56:46:5c:22:51:fc:8c:78:e3:37:23:60:7b:fc:79:
                    dc:d6:82:ed:9b:38:77:8d:c2:08:b4:37:d3:37:5f:
                    0b:2a:14:e5:78:52:05:b7:f9:26:5f:52:81:2f:f0:
                    22:a1:ee:d9:d6:8a:a7:45:db:0f:c3:30:59:6e:da:
                    2f:cd:05:68:fa:0d:80:cc:75:fe:9d:ba:c6:5d:f2:
                    a6:a0:7c:bc:ac:23:07:d6:ef:f7:92:61:10:7a:07:
                    07:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:4F:26:7D:8B:DD:E8:E5:EE:A0:37:56:14:63:78:96:61:59:1E
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:21:9e:b2:9a:46:27:e7:98:1c:d1:42:1c:e4:95:7d:80:
         fc:c4:ef:fd:06:65:87:25:e6:ce:25:75:6d:20:02:49:27:a3:
         79:7b:7a:3f:7e:14:e7:09:f1:6e:28:d8:48:e7:e4:37:1f:ed:
         be:54:f7:ec:96:20:50:c7:cd:03:d9:28:42:7f:4c:34:8a:1e:
         c9:04:b7:d4:a4:0f:0a:79:25:a8:af:53:89:1f:34:df:b6:ce:
         81:ba:c7:c6:31:8c:a4:9d:80:87:42:4b:92:59:01:80:b8:46:
         4b:1c:fe:a1:d4:2b:0b:97:a0:b4:f0:c9:86:a2:57:19:74:01:
         88:6c:99:e6:05:06:ae:57:55:73:f4:de:26:14:8e:b0:e9:e1:
         5d:a8:59:c6:a2:5f:26:a7:b3:d5:a8:ff:6e:58:f8:4e:4e:92:
         da:71:de:09:ff:41:ba:9c:28:74:ef:68:7d:3e:1c:b8:bb:1f:
         5d:62:fa:0b:0b:44:c4:c5:b5:8e:fe:98:8e:a3:2d:0c:c4:d1:
         dd:2b:c1:b1:e7:7c:c6:04:06:a4:90:de:ee:d2:15:35:c7:28:
         f7:0d:e5:e0:a8:50:ab:88:74:90:a4:d8:3e:af:df:22:92:9c:
         34:b4:8b:c9:37:42:e6:76:ba:7f:70:d8:e4:06:cc:e0:37:a1:
         78:87:9c:0e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUek119MgIFhCvR+lCR0unAr200HUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNTAzMjkwNzU0MDFaFw0yNTAzMzAwOTE1MDFaMDMxMTAvBgNV
BAMTKEE5MUI0RjI2N0Q4QkRERThFNUVFQTAzNzU2MTQ2Mzc4OTY2MTU5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClemIf4zpEzY9YORktZOwiPIwy
9ovejdFK+3SQSuE1Rlu9z1TQNbCxY+LFCLY2Jje9fXtV4CWN3yAU93PdhydmKGy7
f4hhA1wq7wh/Sq09blmxGgOeUZslCOrwgs7e4eDE1+kd15puD/7kIGQj6tbl6K/3
uLTFpshCelquVNDqN1JB0KD4uLZQQTxGhIWlsL1QjYS/9mTkCJiB44lyGpCD2z61
SVZGXCJR/Ix44zcjYHv8edzWgu2bOHeNwgi0N9M3XwsqFOV4UgW3+SZfUoEv8CKh
7tnWiqdF2w/DMFlu2i/NBWj6DYDMdf6dusZd8qagfLysIwfW7/eSYRB6BwcVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqRtPJn2L3ejl7qA3VhRjeJZhWR4wHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k
YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC
NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0whnrKaRifnmBzRQhzk
lX2A/MTv/QZlhyXmziV1bSACSSejeXt6P34U5wnxbijYSOfkNx/tvlT37JYgUMfN
A9koQn9MNIoeyQS31KQPCnklqK9TiR8037bOgbrHxjGMpJ2Ah0JLklkBgLhGSxz+
odQrC5egtPDJhqJXGXQBiGyZ5gUGrldVc/TeJhSOsOnhXahZxqJfJqez1aj/blj4
Tk6S2nHeCf9BupwodO9ofT4cuLsfXWL6CwtExMW1jv6YjqMtDMTR3SvBsed8xgQG
pJDe7tIVNcco9w3l4KhQq4h0kKTYPq/fIpKcNLSLyTdC5na6f3DY5AbM4DeheIec
Dg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:18 2025 by rpki-client