Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft
File:                     5525312E5618E22B2B49F909064A0B8CBCA2022E.mft (raw, json)
Hash identifier:          UD3ZpPsiENtbn13rmKYGeKneid2QbNA4m7kd4G9pcDE=
Subject key identifier:   89:D3:02:55:EE:21:4F:B7:BC:9E:19:39:3B:BC:14:38:A6:F3:A4:9D
Authority key identifier: 55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E
Certificate issuer:       /CN=5525312E5618E22B2B49F909064A0B8CBCA2022E
Certificate serial:       312AAC2E7B7B452E23BB01A01890F2252C247EDF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft
Manifest number:          42
Signing time:             Sat 29 Mar 2025 05:26:51 +0000
Manifest this update:     Sat 29 Mar 2025 05:21:51 +0000
Manifest next update:     Sun 30 Mar 2025 06:10:51 +0000
Files and hashes:         1: 326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa (hash: qkbQOCJ0PlesBWvopdoDJCVvu5pk0A8D98qBSxBUcYg=)
                          2: 5525312E5618E22B2B49F909064A0B8CBCA2022E.crl (hash: MsUfUyUd1G0LvjSGGrf7eRZYjhS3vgY8LMVxP/YSFb0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2a:ac:2e:7b:7b:45:2e:23:bb:01:a0:18:90:f2:25:2c:24:7e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5525312E5618E22B2B49F909064A0B8CBCA2022E
        Validity
            Not Before: Mar 29 05:21:51 2025 GMT
            Not After : Mar 30 06:10:51 2025 GMT
        Subject: CN=89D30255EE214FB7BC9E19393BBC1438A6F3A49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:86:99:fb:2f:0c:94:8d:b8:f2:6b:2c:36:
                    76:34:73:b2:5a:af:a2:3a:dc:9a:d8:26:f3:35:cf:
                    38:f9:7c:53:97:86:f3:1c:e8:5e:82:b8:d1:9a:2d:
                    40:90:df:24:c7:d7:92:de:b6:ee:03:38:86:0e:4b:
                    85:c9:c4:20:b2:1b:1e:e2:61:f2:21:47:24:9e:6e:
                    f7:26:c0:f7:dd:13:11:a0:fc:7d:1c:d5:16:13:b2:
                    56:da:4d:c9:c3:bc:7e:24:8c:0f:65:b2:79:d8:07:
                    68:9a:90:85:24:e6:07:e1:1c:38:18:55:c9:fb:5e:
                    87:ac:3c:c7:8a:ac:a5:12:71:8e:34:f7:85:2f:1b:
                    a2:c7:57:fd:82:a9:3a:63:4e:5f:6c:b6:c5:18:9e:
                    cd:24:30:05:4a:b8:5e:77:c0:ae:2a:bc:8d:fd:0b:
                    de:42:3d:79:b9:4e:ad:6f:a9:58:b4:94:45:b9:4f:
                    81:74:a6:5a:e8:ca:33:a1:ae:2a:6d:54:93:32:e7:
                    22:71:15:13:14:ff:ad:35:29:36:51:86:4e:2a:9d:
                    cb:33:2f:b0:e3:0e:2a:3c:3c:c0:38:d6:ed:7b:e6:
                    f7:1f:dc:ba:fc:8d:70:b1:bf:18:41:19:72:ab:7f:
                    0b:0c:cb:84:d6:d3:da:3f:da:81:fd:d4:90:46:8a:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D3:02:55:EE:21:4F:B7:BC:9E:19:39:3B:BC:14:38:A6:F3:A4:9D
            X509v3 Authority Key Identifier:
                keyid:55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:09:77:e1:67:2a:48:52:39:7f:4b:dd:03:9c:76:a2:0f:
         45:f3:02:ad:4f:4a:45:22:95:1f:fa:1f:7b:22:ca:e5:d6:94:
         bf:dc:29:6f:a3:c1:b3:ea:5e:b6:af:db:e0:c1:a8:46:f9:e2:
         c2:7a:4e:6a:61:26:14:57:4c:ca:8e:44:11:87:73:bd:ef:1e:
         d7:7d:01:8a:a4:ca:5f:c4:8a:91:6d:83:82:cd:0c:de:d5:63:
         d3:16:bf:fc:07:0f:0c:ed:ea:fa:55:a8:f8:6d:60:7f:90:e8:
         f0:14:6d:49:49:60:bc:0f:39:7c:64:75:c5:c8:c1:db:60:f8:
         04:42:65:43:2a:18:d3:59:8f:19:db:5a:dc:dc:0d:25:7a:47:
         1e:38:cf:a8:dd:1c:4d:d6:12:21:f7:51:63:0a:a4:b8:32:de:
         34:1c:4a:7a:69:b2:c5:72:3c:52:7f:37:30:17:36:68:3c:57:
         01:78:5e:d0:3f:6e:02:00:cf:d8:11:da:5d:71:ea:c3:86:da:
         af:54:5a:e8:7c:d1:5e:31:6a:25:9c:5d:98:f5:06:6a:d3:01:
         75:7d:ce:b5:76:f3:c1:d3:d1:af:b6:98:73:8c:2b:10:3a:fb:
         81:6c:fa:fb:5d:71:d6:07:48:14:26:56:e1:0a:c5:c4:75:e8:
         7a:28:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:28:37 2025 by rpki-client