Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
File:                     53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json)
Hash identifier:          C4HNXtAuI+tzCM76QtEOa1tgVVl+OCyFtv0/4r9xYjA=
Subject key identifier:   0C:8A:9A:FE:BE:4C:F0:30:B8:BF:54:42:2D:49:BF:3B:E7:55:62:72
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Certificate issuer:       /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial:       2675B28BD933731722EB360531A19388B4936781
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
Manifest number:          02EF
Signing time:             Sun 13 Apr 2025 08:41:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:36:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:47:26 +0000
Files and hashes:         1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: iJpluoF3HoeICJtyNSVX2W7UjOGIKihBFoLXBu2iRVU=)
                          2: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=)
                          3: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=)
                          4: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=)
                          5: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: +XMNZuZjKJ4hW2umQ8dXGy53PfXIg0b3d49foY8Kux8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:75:b2:8b:d9:33:73:17:22:eb:36:05:31:a1:93:88:b4:93:67:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
        Validity
            Not Before: Apr 13 08:36:26 2025 GMT
            Not After : Apr 14 10:47:26 2025 GMT
        Subject: CN=0C8A9AFEBE4CF030B8BF54422D49BF3BE7556272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:26:0b:fd:fc:47:cd:35:b0:90:76:34:46:c8:
                    eb:67:2b:98:d2:e8:b5:33:fa:5a:64:95:2d:91:82:
                    8f:48:51:e2:79:20:e6:e2:42:e5:bb:5d:c6:3c:ce:
                    8e:fb:04:27:fd:1b:8d:da:03:05:01:14:22:2a:81:
                    10:6a:85:ba:9a:2c:bf:6a:75:05:f6:40:34:c5:09:
                    23:de:a1:e3:db:4d:1f:10:8b:94:86:e9:12:c8:3b:
                    ab:61:2d:72:f8:10:21:cf:6e:a7:a0:4a:d0:9e:07:
                    f2:62:30:e5:3f:8e:61:49:8b:6f:19:c2:c9:84:1a:
                    2b:53:c6:1c:63:c6:80:05:d2:42:c3:5b:a4:43:5b:
                    08:0b:4a:97:41:24:44:d2:c1:22:3e:d1:0f:a2:b7:
                    11:00:e6:35:2f:7b:67:4f:db:5d:76:a8:17:f3:73:
                    07:b4:c1:e5:5d:ed:c9:ca:d9:d3:76:d1:c3:47:fb:
                    1e:8d:30:d1:f0:7c:86:a4:2d:7c:fe:25:0e:e3:7f:
                    8f:cd:04:92:13:0d:cc:9f:bd:3a:b6:93:45:28:b6:
                    9e:89:5c:dc:2a:2f:4e:69:31:69:63:42:c3:6c:cf:
                    1f:7b:ae:44:00:c7:af:2c:cf:55:f6:a2:a4:f4:8f:
                    9b:45:38:55:63:ac:7c:4b:ad:53:d0:51:30:8e:9a:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8A:9A:FE:BE:4C:F0:30:B8:BF:54:42:2D:49:BF:3B:E7:55:62:72
            X509v3 Authority Key Identifier:
                keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:27:c3:30:82:18:d1:08:30:5d:23:27:63:8c:95:84:96:c5:
         02:87:cf:d9:40:93:74:be:21:24:80:8a:1d:9a:df:b9:e3:fa:
         12:e8:41:1a:4d:45:73:f2:13:c7:87:3e:2e:00:0f:f1:bf:89:
         63:26:56:5b:93:af:5e:f3:19:de:d0:87:48:e2:3e:fa:cc:bb:
         55:7b:3a:5a:e0:f6:0d:e9:7c:fc:93:a5:d6:9f:e5:b7:43:66:
         de:9b:f2:a8:64:89:c8:97:10:3e:94:cd:b1:6f:3d:63:03:c9:
         97:cf:cd:b9:4d:6d:3c:21:62:d4:11:d9:fa:9d:c8:8e:30:80:
         30:3c:65:91:5b:b4:55:f6:ab:27:f4:42:2b:01:40:bc:e4:33:
         fe:b8:ef:4b:26:f0:ca:46:a0:98:d1:3f:87:5e:ad:c1:9b:a5:
         5b:59:03:5e:ac:54:f0:f4:04:c3:28:08:87:ce:90:08:98:32:
         e8:f7:b0:e5:75:9d:e7:49:15:26:94:e5:1d:9f:b6:ac:4f:76:
         a4:8c:28:aa:dd:e3:8f:d1:7e:3c:04:3c:e0:4e:63:21:1e:93:
         2a:21:6a:b6:6c:ad:ad:f0:5c:9d:23:62:b6:d1:71:39:4c:85:
         0d:81:c1:bd:ce:e6:06:46:59:b2:e5:9b:e7:b6:1a:3f:21:1e:
         e7:78:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----