Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File:                     0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier:          aSRbvr0DUbpy7maSdKB44F0Nw+zrbwkxpvcJJEhA2G8=
Subject key identifier:   80:57:5A:7A:DF:2D:CB:47:8C:F4:B2:CA:A2:AF:38:A3:63:E3:60:A4
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer:       /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial:       36A6B47D3E8B2C484F8886EF035333EB29AE2AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number:          A8
Signing time:             Sun 13 Apr 2025 05:27:42 +0000
Manifest this update:     Sun 13 Apr 2025 05:22:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:10:42 +0000
Files and hashes:         1: 3138352e3231332e3235312e302f32342d3234203d3e203632323430.roa (hash: r8RD1SHQl6OybEgdZXTaDzaRDBKJoFWuS6Yc77FVHmo=)
                          2: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=)
                          3: 38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa (hash: WUrbTcKV2+qO0uflme+Vda37GmhrcRAgBhkN6Ok9SGQ=)
                          4: 3138352e3231332e3234382e302f32342d3234203d3e203230343733.roa (hash: wPG7+ewf3YavylvXnnocD/9r9dGd3xv6uHxMRf9sKNA=)
                          5: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=)
                          6: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=)
                          7: 3139342e33342e3235352e302f32342d3234203d3e203536353934.roa (hash: x2RfjpSN3xicSqXOSngzYM3QyNU0bV4bA1DJ2SOK7nM=)
                          8: 3139342e33342e3235322e302f32342d3234203d3e203239383032.roa (hash: MPp6Igfxvoo4H6VVtRMvz7wqXYqi9rOeS8G4+bL/Qls=)
                          9: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hBCTJH2VP/g2W82hp9JFwDkEQwn2f5ZxdgSFMedjM7Q=)
                          10: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=)
                          11: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: 5lL29Qi66V8/XcK6jhZvT6QCuhW3PCdLBfHIouOlz3w=)
                          12: 38352e3131372e3233312e302f32342d3234203d3e203536353934.roa (hash: UV54BiPkSqZcI5HHAY2kqiR/Mb+BJaMnW0h9cdeDsZM=)
                          13: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a6:b4:7d:3e:8b:2c:48:4f:88:86:ef:03:53:33:eb:29:ae:2a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
        Validity
            Not Before: Apr 13 05:22:42 2025 GMT
            Not After : Apr 14 07:10:42 2025 GMT
        Subject: CN=80575A7ADF2DCB478CF4B2CAA2AF38A363E360A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:86:a0:a9:80:fe:95:62:8c:d7:6a:66:a0:
                    d2:29:34:f1:70:7a:b7:7d:8b:b7:a6:cf:c0:a2:ca:
                    ac:87:d9:87:71:68:5c:b3:d1:2b:aa:a6:5b:a9:27:
                    1f:b3:b5:fe:8e:50:bb:5b:09:96:e9:74:02:64:a0:
                    c4:de:f8:77:7f:e9:91:b3:5a:9b:77:b6:3d:32:ff:
                    54:f9:83:82:a1:99:b3:75:91:91:fb:ee:3f:84:dc:
                    89:9e:7f:81:6d:34:0c:87:1c:50:67:a7:f2:dc:81:
                    17:e0:b4:34:5f:d2:c7:ff:23:e8:6f:11:d3:3a:e8:
                    c0:17:00:11:48:9c:1d:26:b3:6b:d5:59:68:c3:34:
                    4a:78:79:9d:46:16:86:5d:44:4b:ce:ff:e2:7c:ee:
                    ed:d4:4f:41:5a:7a:d8:72:c3:41:c3:cb:7c:33:7c:
                    8c:c8:6e:29:b5:9f:83:c6:05:a4:04:fb:63:d8:1b:
                    e9:7d:6a:74:00:ad:e5:30:c0:ef:d8:3a:a5:fa:8f:
                    a0:64:0d:bb:50:16:47:3a:34:b2:64:d9:c2:2c:ab:
                    53:06:70:90:e1:ea:1d:c1:4b:ad:3b:86:6d:d0:c5:
                    ca:99:60:bf:e5:45:35:bc:1d:f7:7f:0e:6b:5f:1f:
                    55:26:cf:aa:ee:df:8c:0d:94:75:9c:60:ad:fb:b6:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:5A:7A:DF:2D:CB:47:8C:F4:B2:CA:A2:AF:38:A3:63:E3:60:A4
            X509v3 Authority Key Identifier:
                keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:12:e6:f6:26:9a:5f:75:16:25:50:30:da:f8:b0:b1:ae:de:
         c4:b4:21:8c:6e:19:51:30:ba:35:5a:d6:bf:5b:14:0a:39:2a:
         99:99:c2:a9:16:d8:b0:24:55:36:ad:f1:c6:9d:97:39:e4:de:
         7f:c7:89:b3:fc:36:a6:ad:91:a8:9d:58:3d:68:41:67:ce:2a:
         a6:3f:9f:60:06:37:0c:f5:07:ab:ff:de:a0:a5:ca:ac:0f:07:
         22:ea:f8:40:fd:ed:8a:5e:95:97:a0:e2:d7:97:2c:79:2e:37:
         d4:78:e0:19:2e:c8:06:0f:65:b7:5c:45:54:be:6b:ff:8a:44:
         35:03:06:45:fe:f8:25:15:ad:50:67:97:f1:6f:3e:05:b0:b0:
         4e:27:46:b8:8c:81:a0:fc:ca:89:de:6d:78:d9:29:22:da:30:
         67:ec:0e:31:82:da:05:9c:9e:b9:d3:0c:ff:f1:41:b6:85:12:
         c0:11:e2:05:66:64:eb:95:ac:fb:20:25:e7:35:fd:0e:16:79:
         83:7d:ce:c3:66:64:2c:2e:c2:29:ed:df:15:03:2b:2d:a6:2a:
         bf:f0:ef:f9:07:15:73:66:b1:1f:c0:50:a9:86:dd:db:68:2d:
         6a:ec:b1:6b:fe:18:39:a5:e7:38:c3:21:1d:e0:4c:44:30:83:
         46:3f:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net