Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File:                     1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier:          gAvdDu8p3cF0Sl+1Lx8Pha+dhGw3fzeqbhAkXYC8/gQ=
Subject key identifier:   6E:0E:A2:FF:94:75:CD:9A:5F:8D:76:5B:E5:E2:F6:28:E8:33:55:C6
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer:       /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial:       0F587C73FD47491C22111C0F536E41C423223EA5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number:          11
Signing time:             Sat 29 Mar 2025 00:48:31 +0000
Manifest this update:     Sat 29 Mar 2025 00:43:31 +0000
Manifest next update:     Sun 30 Mar 2025 01:02:31 +0000
Files and hashes:         1: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=)
                          2: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: nCwW61zDX3YOYQpBouPxK6+R7SYldDorGo//ygIIhCU=)
                          3: AS396064.asa (hash: joSjuSKQaj12n3swx0eOmnKBVqL2nj2ygqpqZJFSCqE=)
                          4: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=)
                          5: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=)
                          6: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:58:7c:73:fd:47:49:1c:22:11:1c:0f:53:6e:41:c4:23:22:3e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
        Validity
            Not Before: Mar 29 00:43:31 2025 GMT
            Not After : Mar 30 01:02:31 2025 GMT
        Subject: CN=6E0EA2FF9475CD9A5F8D765BE5E2F628E83355C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:f8:62:0a:b5:a4:fb:e0:18:a1:11:2b:24:
                    bd:cf:0f:df:2f:f2:2d:08:e4:85:0c:4c:7c:0a:6a:
                    ca:b8:97:9e:61:b3:0a:64:6c:66:6f:1e:bc:f7:51:
                    34:64:3b:dc:6c:20:d6:c8:52:01:6b:80:97:47:71:
                    3f:fe:d5:89:3a:42:b6:c7:b1:58:02:d9:7a:ba:f9:
                    dd:c9:fa:72:fa:08:27:b1:ca:94:a1:5e:ac:19:c4:
                    90:d6:e7:4c:0f:e8:d5:61:78:88:83:35:1b:74:89:
                    89:ad:61:30:ce:91:61:1f:88:64:47:ce:06:17:6d:
                    f1:30:3b:04:55:44:81:bc:40:6a:35:11:cd:08:87:
                    8f:f5:c1:cc:e4:ea:4f:cf:ba:b1:9e:61:6c:f7:cc:
                    ba:1d:cd:9c:93:a1:da:ec:9a:00:33:33:6e:01:85:
                    c7:42:e4:8c:46:65:54:26:85:f1:63:42:5d:d2:c1:
                    7e:4e:43:fd:77:44:ea:17:3c:18:5e:3b:7d:f6:77:
                    bf:19:5f:cf:eb:1f:28:27:0d:f7:1c:4a:cc:a2:91:
                    68:29:fb:df:81:85:c5:0e:de:8b:4c:98:5d:1a:65:
                    23:86:f9:be:7a:93:b6:a3:83:1a:67:76:77:ae:34:
                    1d:88:9f:25:5e:00:e2:ed:a1:73:d1:29:1c:fe:e8:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:A2:FF:94:75:CD:9A:5F:8D:76:5B:E5:E2:F6:28:E8:33:55:C6
            X509v3 Authority Key Identifier:
                keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:26:c7:a7:ac:65:d5:bc:bb:aa:7c:d0:0e:af:1c:e5:e6:36:
         e7:fb:97:e1:36:c1:3a:73:63:55:b0:c5:a7:14:d0:0e:d3:71:
         20:48:16:e1:4e:ed:c9:2d:ab:e3:34:fe:23:39:58:ec:2b:a9:
         57:5b:d9:9e:f2:8d:22:b5:66:a4:ce:57:17:58:ca:a0:8d:50:
         69:6e:6a:fb:9d:64:c1:e5:05:71:86:42:50:ef:50:b7:16:c3:
         16:8c:47:d6:e5:b8:ce:2b:a9:6e:55:65:c3:82:bc:4f:73:a0:
         dc:97:71:30:52:02:5c:2a:67:07:14:bd:3f:fd:64:cd:cc:b4:
         cc:09:d6:07:31:68:29:f1:7b:f1:2a:db:19:3f:8d:ae:c2:66:
         e8:4d:47:71:ca:fd:f3:80:60:f2:96:55:ff:fd:c1:6b:f4:f6:
         0d:20:9d:d7:b8:c5:99:72:22:9a:07:5a:70:e7:ef:d1:45:4f:
         14:aa:a2:dc:ae:9e:6d:c3:ca:0b:19:ef:d3:10:5f:dd:44:12:
         38:37:1d:78:da:ae:35:bd:4d:e0:21:05:3d:d9:f1:17:28:86:
         4e:14:80:12:40:7c:cb:53:c0:58:5e:fb:19:c2:28:54:09:76:
         0c:19:07:00:2a:23:6f:b5:51:94:0b:6b:82:6d:42:2c:dd:a4:
         03:92:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 06:01:25 2025 by rpki-client