Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft
File:                     B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft (raw, json)
Hash identifier:          kLJZo/E1g166ArE4gl0caHd0QF/hyM0fEcBakf3IWJI=
Subject key identifier:   6C:AB:1E:68:7B:9F:52:AD:E7:C7:E2:58:1D:5B:54:FD:29:84:D8:EA
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       31353C57452197C232E6504D6484398D1947829D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft
Manifest number:          0122
Signing time:             Thu 23 Jan 2025 13:37:25 +0000
Manifest this update:     Thu 23 Jan 2025 13:32:25 +0000
Manifest next update:     Fri 24 Jan 2025 14:02:25 +0000
Files and hashes:         1: 326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa (hash: WxEbtOA91d9OHO9aT2g6iowjYN6K5+szyzBhDcVl8YM=)
                          2: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: 1zLEB1ySqLG6O8dK77EoS7uCQ9LHKZ/5i0AbZm+a9vI=)
                          3: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: 5mtKnsi0eiuLOj/vuPgtBHrR4ubrh7kZVKE+RU5MUcA=)
                          4: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: EXuK08+oqHk8pQl69db4apbuttuLFsyV61jf2S7CeW0=)
                          5: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: rfBVKVeDolW2xuJXtIBW3+sb6n+RTsWvOaIU0c6mIxY=)
                          6: 326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa (hash: BW6ky+6CFugwvR5bM9gBM+2MBg3Zgjy+mVE9dRIKmpw=)
                          7: B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl (hash: FCGUEduWtmSGxiZB70cWgMHHAcVhCvoeXe5LBWt4uk8=)
                          8: 92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer (hash: H13hcP/r4wxGw08Jc5sOHEEMFksM7Dg89XlhlYKqWC0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:35:3c:57:45:21:97:c2:32:e6:50:4d:64:84:39:8d:19:47:82:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Jan 23 13:32:25 2025 GMT
            Not After : Jan 24 14:02:25 2025 GMT
        Subject: CN=6CAB1E687B9F52ADE7C7E2581D5B54FD2984D8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:a1:4c:f9:a3:21:94:48:72:9e:b2:cb:6b:
                    f9:55:56:6a:1b:30:77:e6:bb:b3:b7:49:b4:dd:d8:
                    81:ea:94:57:9b:46:16:26:8b:e4:db:ef:37:4e:ad:
                    1a:e6:ab:13:b9:81:92:d0:63:5c:35:22:68:02:f5:
                    64:78:bf:7d:55:c2:d9:e0:f7:21:7c:1e:b2:5b:79:
                    36:dd:fc:85:93:02:11:43:f4:ea:cf:8b:c8:e0:90:
                    cc:51:53:c6:b8:50:c6:4f:91:d4:7d:10:cc:94:ba:
                    7d:f1:df:73:4e:d1:e7:95:2a:7e:c5:c4:a7:cc:9d:
                    b7:0f:6f:f4:db:f6:93:1f:fb:54:a6:fc:10:10:c0:
                    0f:61:cc:0e:a2:b4:89:41:84:18:d1:2d:12:c3:c1:
                    af:73:a7:bc:cf:81:0f:6e:7b:aa:e0:b1:80:b6:e9:
                    2f:9a:0d:40:aa:0c:55:f4:3c:5d:2c:66:b4:c9:8d:
                    e6:bc:23:1d:c7:97:b6:31:27:3f:ab:63:f9:d0:4a:
                    6d:ce:2e:40:90:57:ea:10:5e:22:46:dc:f1:f8:94:
                    93:7a:52:63:e0:85:0c:79:95:9a:63:58:4c:b7:7c:
                    c7:be:7d:d8:c7:43:62:53:82:5a:e9:d7:92:e9:06:
                    68:16:d4:61:b7:69:43:22:9b:85:11:b5:d6:13:4f:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AB:1E:68:7B:9F:52:AD:E7:C7:E2:58:1D:5B:54:FD:29:84:D8:EA
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:26:7e:51:10:e1:61:bd:28:4e:27:8f:bf:ca:d2:b4:31:57:
         8a:71:72:1a:79:d3:aa:fb:e2:ea:34:a3:bb:66:86:55:af:80:
         b5:ae:34:8f:e6:dc:06:0d:c1:22:d0:e3:03:2f:45:cf:82:20:
         cd:cb:54:c2:84:64:43:a4:47:f6:58:f5:8d:e9:91:80:a2:6b:
         35:b1:be:f0:42:9d:81:6e:00:14:19:c0:04:5f:2e:61:0d:e1:
         36:5b:26:27:74:2d:d5:9b:0e:6b:eb:fd:ab:33:53:8b:4f:23:
         47:ed:38:fa:3a:e4:06:74:89:b2:04:55:30:43:4c:d0:a9:f4:
         84:99:3e:3a:93:02:90:f1:a4:db:1c:a2:47:b9:74:fe:b3:32:
         34:c5:32:78:08:67:60:a0:26:b3:f2:4d:8c:0f:3c:4c:1d:6d:
         10:98:8e:71:5e:da:35:a5:ec:5d:ad:f1:a6:0d:b3:d0:ab:84:
         3a:b2:e0:d9:94:f1:08:82:73:59:21:29:0f:f7:a0:b2:c4:36:
         20:af:c3:03:35:7d:f0:72:b7:40:7a:e2:6c:88:e2:2e:b3:a0:
         36:17:a0:ca:e2:e2:a1:11:36:d6:69:25:3c:34:f6:5e:aa:90:
         b1:9d:1b:75:eb:c5:d2:30:ef:85:7f:e8:8f:82:5d:7f:6a:ae:
         24:ae:38:7e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUMTU8V0Uhl8Iy5lBNZIQ5jRlHgp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy
RkM5MEQwOTAeFw0yNTAxMjMxMzMyMjVaFw0yNTAxMjQxNDAyMjVaMDMxMTAvBgNV
BAMTKDZDQUIxRTY4N0I5RjUyQURFN0M3RTI1ODFENUI1NEZEMjk4NEQ4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbaFM+aMhlEhynrLLa/lVVmob
MHfmu7O3SbTd2IHqlFebRhYmi+Tb7zdOrRrmqxO5gZLQY1w1ImgC9WR4v31Vwtng
9yF8HrJbeTbd/IWTAhFD9OrPi8jgkMxRU8a4UMZPkdR9EMyUun3x33NO0eeVKn7F
xKfMnbcPb/Tb9pMf+1Sm/BAQwA9hzA6itIlBhBjRLRLDwa9zp7zPgQ9ue6rgsYC2
6S+aDUCqDFX0PF0sZrTJjea8Ix3Hl7YxJz+rY/nQSm3OLkCQV+oQXiJG3PH4lJN6
UmPghQx5lZpjWEy3fMe+fdjHQ2JTglrp15LpBmgW1GG3aUMim4URtdYTT3LHAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUbKseaHufUq3nx+JYHVtU/SmE2OowHwYDVR0j
BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC
OTYwRkVBMjJGQzkwRDA5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi8xL0I4OUJGQTg0
REM1QUZFMDUwNzZBMDgwMEI5NjBGRUEyMkZDOTBEMDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1Jn5R
EOFhvShOJ4+/ytK0MVeKcXIaedOq++LqNKO7ZoZVr4C1rjSP5twGDcEi0OMDL0XP
giDNy1TChGRDpEf2WPWN6ZGAoms1sb7wQp2BbgAUGcAEXy5hDeE2WyYndC3Vmw5r
6/2rM1OLTyNH7Tj6OuQGdImyBFUwQ0zQqfSEmT46kwKQ8aTbHKJHuXT+szI0xTJ4
CGdgoCaz8k2MDzxMHW0QmI5xXto1pexdrfGmDbPQq4Q6suDZlPEIgnNZISkP96Cy
xDYgr8MDNX3wcrdAeuJsiOIus6A2F6DK4uKhETbWaSU8NPZeqpCxnRt168XSMO+F
f+iPgl1/aq4krjh+
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:52 2025 by rpki-client on console.sobornost.net