Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft
File:                     1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft (raw, json)
Hash identifier:          +JMSj7YVNh7tza+MXlxOgPYoKa9jgkMmLcNl683oXDY=
Subject key identifier:   FD:E4:58:2B:8C:B1:DB:50:70:46:9B:79:D8:B3:BB:4F:1A:49:CB:E0
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Certificate issuer:       /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial:       69DAF0C5BFE738AED413DAF8936273355E6542B9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft
Manifest number:          D5
Signing time:             Wed 22 Jan 2025 22:59:22 +0000
Manifest this update:     Wed 22 Jan 2025 22:54:22 +0000
Manifest next update:     Fri 24 Jan 2025 01:01:22 +0000
Files and hashes:         1: 326130393a353463363a653030303a3a2f33362d3438203d3e20323133393535.roa (hash: l3M6B6Xlvvkk2/KN0m3frkEmvUgqwh1jsuL61CVWdDY=)
                          2: 1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl (hash: ExKVOLFRU+YfHY9x4gG+aLnGEyTSjfDosaQWya/DS7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:da:f0:c5:bf:e7:38:ae:d4:13:da:f8:93:62:73:35:5e:65:42:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
        Validity
            Not Before: Jan 22 22:54:22 2025 GMT
            Not After : Jan 24 01:01:22 2025 GMT
        Subject: CN=FDE4582B8CB1DB5070469B79D8B3BB4F1A49CBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ef:ee:75:d8:26:ea:93:58:fc:4d:4f:ee:c1:
                    50:5d:bf:bc:14:43:6e:0e:db:f4:a5:0d:ad:a9:22:
                    65:47:0d:3b:8e:fc:dd:52:19:40:70:db:16:11:4a:
                    bf:1d:28:45:ec:bf:78:40:09:e8:a7:12:3f:6e:9f:
                    b3:bc:ee:8e:1d:d0:ff:47:e5:cc:19:04:36:6f:65:
                    31:86:07:1b:56:8c:41:d3:f6:39:73:4e:dc:7c:b5:
                    2a:0c:4c:0a:1a:4f:3f:b2:9a:0a:f3:12:8a:df:04:
                    b6:26:29:90:50:e5:db:79:c8:4f:f3:7d:53:75:92:
                    fb:bf:ad:df:5c:2a:0a:db:97:e5:42:73:3a:67:ff:
                    c4:e9:b3:3f:e1:d7:9b:f7:d8:98:7a:2f:1f:ee:20:
                    dc:81:9a:cd:98:bd:27:69:63:e4:0c:c6:18:2b:d9:
                    5b:b4:59:47:4b:ee:5d:b4:80:4e:da:04:2f:cc:6f:
                    64:9b:a5:ef:d9:1d:9e:98:bb:e7:d2:3f:10:35:b3:
                    4a:03:8b:82:c6:67:da:4a:96:74:ec:e8:fd:b7:2b:
                    66:6e:80:13:54:ca:02:0a:8e:47:11:55:4a:f9:22:
                    39:e5:ce:f9:1c:6f:83:bc:ce:4d:7a:77:f7:9a:2c:
                    b9:67:c2:24:af:7e:7d:be:7f:52:e9:20:ad:b8:8a:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E4:58:2B:8C:B1:DB:50:70:46:9B:79:D8:B3:BB:4F:1A:49:CB:E0
            X509v3 Authority Key Identifier:
                keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:95:25:16:52:e2:55:2a:8f:a3:1d:0a:34:10:21:f3:a0:d0:
         48:39:ec:71:28:6a:00:40:8c:95:f3:c4:c1:d1:c0:cc:b5:09:
         83:fa:62:1c:f2:66:c3:9e:b8:02:d5:43:46:0d:0e:03:e6:dd:
         ab:cf:76:dc:23:bd:82:21:73:d7:0e:79:9d:75:58:af:b8:8a:
         d7:90:1e:de:bd:a9:6c:8b:2e:3b:36:0c:17:c3:a7:cc:3e:0d:
         a6:d2:05:3e:d3:95:30:82:ce:da:58:90:73:f1:fa:c9:a4:8e:
         b2:70:a8:08:c4:29:60:14:7e:58:6d:ad:ee:24:9a:fc:d9:ae:
         09:c7:5b:37:e2:c9:78:18:3b:6c:89:ff:7d:03:0c:ca:4c:0d:
         62:3a:b0:34:07:e7:24:24:52:98:96:2b:18:1e:3d:d0:b2:3a:
         3e:c9:b2:4a:5e:d4:3b:3a:d8:fe:0a:7b:1f:bd:6f:46:3a:5a:
         db:83:3c:49:6c:38:4f:7c:b5:26:6a:2b:cb:4c:64:46:dc:70:
         0f:44:23:68:24:5e:ba:7c:d5:69:c2:d8:8b:fb:19:15:b9:b1:
         c4:88:41:1d:6a:a3:9a:e2:23:e1:f9:28:02:6a:30:dd:e2:cf:
         d2:15:23:56:5c:48:a4:b2:37:42:29:6e:ad:8a:9d:95:bf:cf:
         18:77:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:19:13 2025 by rpki-client on console.sobornost.net