Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft
File:                     5525312E5618E22B2B49F909064A0B8CBCA2022E.mft (raw, json)
Hash identifier:          5NkML2yMhV70EkaeJAYeVuhT6N2o4B5o11mGbeRGetk=
Subject key identifier:   59:E6:67:8C:CB:C9:C4:31:29:D1:67:38:5A:37:F4:96:1B:F7:F3:E2
Authority key identifier: 55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E
Certificate issuer:       /CN=5525312E5618E22B2B49F909064A0B8CBCA2022E
Certificate serial:       22C49FD172C899560041D50B7A4792B82DB5F518
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft
Manifest number:          5C
Signing time:             Fri 11 Apr 2025 11:01:58 +0000
Manifest this update:     Fri 11 Apr 2025 10:56:58 +0000
Manifest next update:     Sat 12 Apr 2025 13:19:58 +0000
Files and hashes:         1: 326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa (hash: qkbQOCJ0PlesBWvopdoDJCVvu5pk0A8D98qBSxBUcYg=)
                          2: 5525312E5618E22B2B49F909064A0B8CBCA2022E.crl (hash: VsyXxx992T4VGxOiglLlsE3m4rEnL0qQXlU3xwbCcK8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c4:9f:d1:72:c8:99:56:00:41:d5:0b:7a:47:92:b8:2d:b5:f5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5525312E5618E22B2B49F909064A0B8CBCA2022E
        Validity
            Not Before: Apr 11 10:56:58 2025 GMT
            Not After : Apr 12 13:19:58 2025 GMT
        Subject: CN=59E6678CCBC9C43129D167385A37F4961BF7F3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:cf:70:fa:4f:07:df:a7:01:ba:ba:d0:e8:
                    b2:c3:c7:6e:2b:c6:02:1d:33:40:64:4e:8f:86:80:
                    f9:ab:1f:be:e3:bd:70:3d:17:16:6c:9a:dc:19:44:
                    eb:bf:a6:73:9c:43:fc:e8:75:9a:fb:da:25:e6:69:
                    99:97:f9:e4:1c:ea:52:46:5e:2d:38:40:5e:38:6d:
                    43:6d:35:0f:86:5b:bf:19:40:99:94:bb:cb:4a:1d:
                    1d:4c:a8:90:a5:9f:2c:bd:2f:da:1b:b2:c2:d3:b0:
                    db:ff:c1:31:38:fa:5a:0f:45:55:ca:f0:b5:82:24:
                    8d:d2:a1:b3:98:e9:a8:1c:10:80:e5:8b:20:3a:00:
                    c1:8b:31:12:f5:b2:b0:70:1a:80:0a:14:9b:8f:93:
                    c0:10:d1:4a:1c:f0:48:2c:ad:ff:3a:6b:dd:59:0c:
                    59:65:3c:2a:95:be:9e:95:33:8e:ba:24:5d:aa:83:
                    b1:39:e5:ec:4b:05:ec:4d:d6:4b:46:34:b9:a4:ea:
                    58:cc:64:53:a2:2d:f7:48:2c:94:f5:ef:78:ec:84:
                    14:f8:23:79:e2:58:ce:64:a4:1a:2c:27:f3:f3:76:
                    b7:04:91:9b:e1:02:4f:19:9c:29:c4:aa:5a:7a:21:
                    fb:23:14:66:10:63:e3:ee:19:b8:5f:78:dd:34:cc:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:67:8C:CB:C9:C4:31:29:D1:67:38:5A:37:F4:96:1B:F7:F3:E2
            X509v3 Authority Key Identifier:
                keyid:55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0e:09:20:58:4b:fd:42:5f:77:8b:67:95:cc:ee:61:4a:88:
         e4:1f:d7:e5:73:75:81:5c:d9:68:de:68:6f:2f:bd:38:8b:5c:
         d4:55:27:4e:ea:c2:0d:9c:da:b4:24:3e:48:a4:6b:1e:88:18:
         86:6c:30:d7:96:e9:56:ef:44:a0:eb:52:0e:c1:c2:00:df:a5:
         61:a6:0e:62:eb:4c:5b:b3:64:77:de:09:19:54:e4:29:56:fa:
         13:59:22:6f:ab:3b:86:4d:78:7e:4a:53:39:53:42:8e:fc:80:
         f4:58:6f:2d:ce:99:96:c4:ed:1c:59:02:8b:78:22:f0:d6:5f:
         64:48:5f:57:bd:ad:e5:d6:db:0a:31:fe:cb:cb:d7:e7:14:6b:
         74:f8:e9:6d:19:ee:65:67:c9:cc:97:77:0e:ba:a4:56:a7:c2:
         c7:7a:ed:36:18:c3:b5:58:e8:b9:2b:36:d6:c6:5d:9d:2f:09:
         d0:39:ce:16:f6:0e:a7:de:c4:5d:1b:aa:d5:59:e8:27:65:ed:
         20:25:1c:21:f0:d6:68:33:13:df:15:9d:2c:26:08:4f:cc:c8:
         d5:84:5d:52:a5:1c:de:f7:dc:39:b3:1f:09:2d:4d:bc:04:d2:
         6c:ba:20:fa:f4:96:68:41:23:4c:c4:87:cb:59:6a:e4:7f:6d:
         0a:57:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:13:50 2025 by rpki-client