Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
File:                     23D444E7DED3712847CAE2B46DDD886FC2914D54.mft (raw, json)
Hash identifier:          uDBjsGX6wrPucrMOiNtgxigk8gDU2BQM8dtj9iwlYb8=
Subject key identifier:   18:75:6E:37:72:D7:C4:C3:91:56:BE:92:45:36:FE:E0:37:77:15:CD
Authority key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
Certificate issuer:       /CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Certificate serial:       01EF01CD5B80C1462261001DA8B82DD577E7AAA5
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
Manifest number:          037C
Signing time:             Sat 12 Apr 2025 22:16:29 +0000
Manifest this update:     Sat 12 Apr 2025 22:11:29 +0000
Manifest next update:     Mon 14 Apr 2025 02:14:29 +0000
Files and hashes:         1: 23D444E7DED3712847CAE2B46DDD886FC2914D54.crl (hash: Mq4ccniTqnkUz4u94NgJ+G/ZnmItIPZBbt4s6f2aMOY=)
                          2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: tfZTODACLawFck6n6yim45qqX0QKQWHGw0OfZn9hHA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ef:01:cd:5b:80:c1:46:22:61:00:1d:a8:b8:2d:d5:77:e7:aa:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
        Validity
            Not Before: Apr 12 22:11:29 2025 GMT
            Not After : Apr 14 02:14:29 2025 GMT
        Subject: CN=18756E3772D7C4C39156BE924536FEE0377715CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:be:da:30:c5:9e:b0:2b:b1:81:8e:e7:9e:
                    48:d2:a4:1b:7f:98:82:fa:4e:59:bb:b2:68:5f:1c:
                    b3:43:0e:78:49:aa:a9:91:84:f4:16:db:47:e4:44:
                    6b:38:e8:b9:83:ff:79:ac:8f:b6:15:af:c6:bd:24:
                    06:17:13:ae:f4:82:fb:e1:91:43:bb:40:5a:e8:03:
                    22:2b:a3:4d:94:74:16:82:fb:dc:19:e6:2e:a8:8c:
                    48:2f:47:8c:97:ef:87:24:bf:66:aa:35:75:a1:da:
                    d8:6a:3e:09:88:5a:3b:64:c9:b5:2f:f3:13:f4:2f:
                    c1:8f:b7:19:5e:76:5d:a2:72:50:91:a5:38:7c:39:
                    4f:4a:61:14:a8:ef:9f:a9:d2:9f:7a:41:a9:fc:8f:
                    22:78:6e:81:77:5a:2a:38:18:76:b4:38:e6:34:b1:
                    0a:6f:b2:3e:e0:d3:f7:b2:73:cc:8f:6d:a4:c5:2c:
                    00:8f:47:44:eb:64:96:80:82:ff:4e:b4:42:f4:97:
                    0d:85:47:c6:38:3c:64:12:92:e3:db:f8:66:2c:60:
                    80:da:b6:ff:af:12:10:69:46:08:22:28:d5:cc:5f:
                    dd:43:2a:5e:0b:f5:8b:54:ad:3a:b0:ec:3f:0e:5c:
                    c1:e9:43:12:b0:35:a0:44:80:c9:45:9b:b0:45:a2:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:6E:37:72:D7:C4:C3:91:56:BE:92:45:36:FE:E0:37:77:15:CD
            X509v3 Authority Key Identifier:
                keyid:23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:eb:d8:36:11:30:6e:6a:7a:95:27:92:12:04:dc:61:4a:
         f2:0d:35:fa:43:d3:2f:7f:ee:6f:61:d6:a9:2b:41:15:3b:cb:
         9a:21:81:14:92:aa:3b:8c:71:13:76:2c:68:d2:80:d9:8a:77:
         b3:4a:6b:8f:72:4e:bf:5c:98:c8:90:8b:3f:b6:8a:ad:62:4d:
         98:06:1e:5c:e8:8d:42:99:d1:f1:82:97:c7:de:fa:9b:7a:88:
         6d:42:cd:51:7c:19:e7:5b:bc:38:af:5a:fd:b6:f0:ad:32:0f:
         6e:99:8c:e2:c3:4c:8d:c8:67:2b:5c:0b:bf:da:8d:27:0b:a8:
         af:e4:d6:02:00:cf:41:50:90:c7:52:4f:ef:4e:d2:43:39:3e:
         f9:90:92:9d:b5:37:01:48:d1:04:1d:39:61:10:75:f3:ae:99:
         1f:77:34:67:0a:fe:1e:f3:d1:56:23:cd:00:e5:78:ab:01:91:
         34:47:2a:5c:6d:69:05:af:d5:da:73:2c:89:c4:22:98:f1:ab:
         a1:cb:05:a2:c7:59:26:17:19:bc:79:69:a5:bf:13:af:cf:a6:
         9c:a8:4e:da:99:c3:8a:d0:93:5c:a6:34:70:b5:32:26:54:9e:
         97:d7:84:96:5a:c3:79:db:44:c5:63:dd:b2:66:48:0f:ee:e0:
         e1:80:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----