Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft
File:                     1EC805E37C5B53351C6A182763530A50D9308C7E.mft (raw, json)
Hash identifier:          BJEAmiDzwiO7JGDkGCCPeyp9gLE/NPHmiu4Me1lzqzE=
Subject key identifier:   45:87:8A:9F:E3:D6:EA:74:40:56:29:C0:B6:6E:C5:ED:15:FC:80:D3
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Certificate issuer:       /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial:       38562709396B0B7718E7908745AC1223F306F7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft
Manifest number:          04C3
Signing time:             Thu 23 Jan 2025 07:29:24 +0000
Manifest this update:     Thu 23 Jan 2025 07:24:24 +0000
Manifest next update:     Fri 24 Jan 2025 08:48:24 +0000
Files and hashes:         1: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: u7gkg0ioA1jBNqlBEo5W2D4JPvOjIz41yHhpEkdqJZM=)
                          2: AS47272.asa (hash: 7hnvKyRy7aTFsWQLILFhWEQEdrN/F4GJi21L2XD7fKQ=)
                          3: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: zAIz/6PrKY+PT044DrbJcMj6yEBb5+L5X0JVIU/xOe0=)
                          4: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: qsZmRVCIb9xrptyGq4LMD66U0ZsMiSdaKtlFWDj+fOk=)
                          5: 1EC805E37C5B53351C6A182763530A50D9308C7E.crl (hash: SAT960OP9ujoRELag6NR998fij5oIfkwlw4NUTAXIXM=)
                          6: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: dl0PTSDr5J0KB1na5PGRTf1dNkrbYDvNEMiS80IVTbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:56:27:09:39:6b:0b:77:18:e7:90:87:45:ac:12:23:f3:06:f7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
        Validity
            Not Before: Jan 23 07:24:24 2025 GMT
            Not After : Jan 24 08:48:24 2025 GMT
        Subject: CN=45878A9FE3D6EA74405629C0B66EC5ED15FC80D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:01:ea:2e:52:d9:15:66:c1:ad:25:4b:a2:f4:
                    60:ac:26:c4:45:1e:39:22:ca:9f:b1:77:f9:79:37:
                    bd:96:73:a7:d6:75:ba:44:cc:83:ef:a2:1f:a7:0a:
                    f2:c5:b7:9f:2a:17:f0:f8:2e:91:10:72:67:a2:94:
                    ec:c0:a3:d0:71:f1:fd:25:4d:42:b4:62:4d:14:55:
                    71:cc:bf:72:5d:b4:45:e8:0e:fd:b3:5f:1f:dd:8a:
                    a1:1f:e5:86:c5:e3:18:88:dd:a7:e3:b5:7e:72:19:
                    17:52:9e:27:8b:e0:e6:71:60:ac:87:ca:4c:19:3d:
                    a3:67:7e:75:cb:15:19:48:18:bc:82:28:17:51:bf:
                    f7:48:f3:52:b2:78:d1:45:ff:c9:91:da:47:99:0d:
                    2e:e2:be:74:46:04:f3:77:87:83:64:f0:ab:ea:c1:
                    17:ed:c8:f9:f0:b9:dd:a3:e7:01:45:1b:18:21:c0:
                    8c:c3:34:fd:ff:d8:ca:42:7d:2c:84:67:33:16:ce:
                    2c:91:ae:67:9b:ef:e7:ef:ed:6a:e3:66:6d:4e:29:
                    14:19:8f:af:d1:b5:01:84:f6:be:cb:b1:ca:50:3a:
                    27:c2:14:e0:39:f8:ba:02:c6:f9:60:74:1e:d5:b2:
                    af:48:83:2a:f4:a3:d2:38:ef:6d:39:e0:c4:ae:65:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:87:8A:9F:E3:D6:EA:74:40:56:29:C0:B6:6E:C5:ED:15:FC:80:D3
            X509v3 Authority Key Identifier:
                keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:34:1e:17:a7:b9:79:64:38:9f:e1:72:75:90:7d:03:f9:d5:
         4d:4f:06:c2:c9:cc:57:fe:06:63:14:6e:2e:49:f2:e4:32:27:
         09:a4:85:6c:dd:cf:ef:22:ff:19:34:78:04:15:a0:75:a0:89:
         11:6c:81:a0:16:ba:36:70:50:2a:b9:93:73:b2:71:ab:46:ba:
         3a:4b:08:01:cb:c5:a8:f2:54:ad:f0:cf:8b:fb:85:ea:de:62:
         bb:2c:65:43:16:d0:ac:13:6b:25:b2:07:6f:68:7b:47:bf:84:
         77:dd:9b:1d:44:96:12:c0:7f:f4:be:37:f1:95:b5:9b:ab:0d:
         e0:94:31:13:6c:ca:d7:cb:4e:68:3f:67:03:c9:d5:42:ac:b8:
         27:37:5e:d2:14:2d:8e:1d:c3:a5:5d:96:f9:39:0c:b8:25:7f:
         1a:cf:fe:8a:0d:52:0b:9c:64:ce:a7:f3:37:6b:76:6d:99:0e:
         99:01:d1:4b:70:ee:02:60:1a:46:a4:86:77:ef:cd:ef:af:79:
         d2:0c:e2:77:dc:60:bf:b7:c4:02:12:22:52:54:c2:5a:2f:06:
         84:e3:ba:49:be:0c:44:f2:c5:1a:04:e1:be:9c:64:3f:89:1b:
         d9:46:0a:2d:da:10:82:7e:d7:b0:f0:a3:ae:90:b0:df:d7:72:
         54:be:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:51 2025 by rpki-client on console.sobornost.net