Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft
File:                     DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft (raw, json)
Hash identifier:          yCnwl/G8OttciEcLVdrJut4moFgsT9wq2Hc3eZkRGBA=
Subject key identifier:   79:94:21:DC:95:68:CD:87:C8:96:CF:3F:18:C4:2E:17:6D:03:82:F0
Authority key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E
Certificate issuer:       /CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
Certificate serial:       5F48075F44D0016DA5EDA13F4F9634D7705EB4A3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft
Manifest number:          60
Signing time:             Fri 23 May 2025 20:57:08 +0000
Manifest this update:     Fri 23 May 2025 20:52:08 +0000
Manifest next update:     Sun 25 May 2025 00:55:08 +0000
Files and hashes:         1: 326130613a363034343a626330313a3a2f34382d3634203d3e20313939373633.roa (hash: 3n+4yNulEMaksO5/ZQTRg4MIPlOtdwvsGLaK42kyDMc=)
                          2: DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl (hash: qL+5y+7/UtJzX7sRRDY+wbmuH2YFTivOQsfPLVTKUM8=)
                          3: 326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (hash: 7YCpwymksWPwg5ziGzmWS9FgFbgvTAl7aySk1Jpj/x4=)
                          4: 326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa (hash: +IKgatT0MAF+XD26nbEZt1idCJku+a+Xz8E5Y73mOYI=)
                          5: 326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa (hash: CPlC+BfZslaPUARPkpEP18cibo2RhLx5pOJz5HUKmqA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:48:07:5f:44:d0:01:6d:a5:ed:a1:3f:4f:96:34:d7:70:5e:b4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
        Validity
            Not Before: May 23 20:52:08 2025 GMT
            Not After : May 25 00:55:08 2025 GMT
        Subject: CN=799421DC9568CD87C896CF3F18C42E176D0382F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:27:60:9c:1b:09:a2:26:2a:19:7d:7a:8e:
                    eb:cb:ae:a3:74:cf:66:cc:a0:90:d8:13:3c:75:c2:
                    16:28:eb:d3:8c:bf:56:ef:4f:c3:9d:5a:e9:90:19:
                    54:a4:a0:3b:15:ff:e2:0f:cb:93:08:94:13:87:78:
                    06:56:61:9b:25:8d:86:4f:2a:66:53:9e:d8:c1:87:
                    67:59:38:c2:c6:1d:a5:16:d9:61:3a:75:c3:55:6c:
                    4e:4b:dc:0e:16:83:6e:36:d5:b7:b4:e2:14:05:67:
                    66:3f:7b:e2:52:62:99:3c:43:4b:9a:cf:1e:7f:ad:
                    12:f0:ef:10:c7:79:4d:79:0f:ad:fa:e3:cd:55:a5:
                    44:28:70:1b:4e:f9:d6:5a:dc:60:24:2b:e4:8d:22:
                    9d:db:64:f0:0d:b4:bc:14:47:3b:c0:dd:14:91:f1:
                    1b:7d:5b:21:d7:bb:60:cd:4d:cb:38:cb:6c:53:18:
                    91:c2:98:c4:05:f5:d8:ec:85:06:db:88:ed:6f:dc:
                    51:df:8f:c0:31:68:89:26:4a:4e:fb:0e:1a:fd:6f:
                    d5:1b:a1:dc:60:b3:70:43:47:58:7b:fd:76:7d:bd:
                    93:f3:3d:c2:c5:15:2b:30:b9:3f:f4:bf:12:2e:77:
                    cd:16:05:21:3b:0c:60:b7:d3:af:fd:3e:e6:85:a7:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:21:DC:95:68:CD:87:C8:96:CF:3F:18:C4:2E:17:6D:03:82:F0
            X509v3 Authority Key Identifier:
                keyid:DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8d:54:9b:28:d0:d4:58:88:92:16:42:d1:42:c5:35:a7:0f:
         c8:59:30:1d:e5:59:b1:9c:b9:8f:e2:09:aa:a0:37:16:b1:92:
         02:56:fd:9e:34:85:96:9d:61:52:28:77:33:21:70:73:8f:ca:
         e0:b4:1c:30:26:0e:9d:13:e7:da:7a:93:72:d8:b7:d3:a9:8c:
         1d:01:99:1b:a0:07:c0:29:29:83:fd:01:ce:92:b3:21:ad:88:
         64:cc:24:fd:8b:e6:35:51:45:0e:bf:fa:04:e3:8c:07:8b:40:
         6e:95:60:4c:92:db:09:40:4b:45:a2:63:d6:4e:2e:3a:eb:fb:
         97:2e:56:2b:07:23:ee:1f:96:ca:04:bb:95:a5:f9:38:9c:bc:
         4a:c5:5f:f5:ab:14:59:ba:a1:42:a4:ba:05:6c:db:1b:e9:87:
         e2:11:a9:6b:52:a1:d6:dc:32:ee:4e:5d:d4:c9:15:76:2d:0a:
         82:9c:8d:76:d2:bc:6c:5f:56:40:53:05:07:a2:71:61:da:04:
         12:f1:ad:1f:07:f7:78:ed:c4:7e:60:7e:95:0d:3c:d0:55:b5:
         69:82:56:20:33:9c:3e:93:79:e4:10:ba:81:ed:52:2d:23:00:
         9c:bb:da:41:7e:d1:20:8a:32:5a:64:70:34:95:00:f0:18:8a:
         32:8e:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:21:05 2025 by rpki-client