Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
File:                     9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft (raw, json)
Hash identifier:          v/g+AvgI87eGlCYWF5TJzsl8HVBkPElC3esjK6v/flo=
Subject key identifier:   A0:6F:31:AF:6A:B5:0F:76:3C:FB:BA:BA:D1:FD:81:D5:A6:93:14:82
Authority key identifier: 9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C
Certificate issuer:       /CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C
Certificate serial:       505D38B70DE53957E5AE751CB3BFEEAB4ECEFFE5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
Manifest number:          0121
Signing time:             Thu 23 Jan 2025 00:45:47 +0000
Manifest this update:     Thu 23 Jan 2025 00:40:47 +0000
Manifest next update:     Fri 24 Jan 2025 02:39:47 +0000
Files and hashes:         1: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: sgJS+9fXpP0N1ynvWikQwztRvYYPuX1aHauJ8WKg3M4=)
                          2: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: ISxPaIAr0w+jmJbBaEWXIEHSE+CHx0GTfYgpjz88GTc=)
                          3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: TlfUIckGRAagg669M3xYDX52RxzXWa4zmUTL/zfVSIE=)
                          4: 9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl (hash: mXtAGkGmQQSiLUg9n5YBPRpF4BIxlerp8b8pCH1x5Ks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5d:38:b7:0d:e5:39:57:e5:ae:75:1c:b3:bf:ee:ab:4e:ce:ff:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C
        Validity
            Not Before: Jan 23 00:40:47 2025 GMT
            Not After : Jan 24 02:39:47 2025 GMT
        Subject: CN=A06F31AF6AB50F763CFBBABAD1FD81D5A6931482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:5a:d3:b9:59:a9:57:df:ba:f8:33:d8:f8:
                    12:42:f4:48:a0:6a:b7:d0:51:ed:90:d5:e5:1d:f0:
                    76:90:aa:be:88:26:48:2d:46:0b:1a:64:71:51:d2:
                    f7:39:92:ec:da:19:0e:80:02:b3:89:20:d3:93:4a:
                    de:73:1d:52:d7:e5:3e:6e:fe:a3:e7:c5:b5:38:c7:
                    42:a1:10:9c:95:61:cf:47:0f:18:95:f7:3e:2b:cc:
                    f1:57:1c:5d:93:fd:40:89:2a:2c:06:b7:de:c5:91:
                    c9:e2:e1:83:c2:f2:3d:00:ed:95:79:87:16:d9:06:
                    9f:88:d8:dd:6c:9e:48:cb:98:43:d9:d4:1c:f6:24:
                    bd:9a:6c:ed:1f:a8:8c:ac:16:0c:70:07:04:77:ab:
                    37:20:1e:3e:f0:5e:64:b9:f6:96:7c:3e:fa:d8:bb:
                    41:99:4b:b9:be:fd:e2:4a:6f:66:fe:04:22:e9:c5:
                    ee:1f:29:56:a6:89:eb:52:42:98:54:31:8d:36:1d:
                    70:97:eb:dc:3d:1b:02:80:d6:42:24:e1:07:8c:59:
                    e1:3d:02:24:ce:94:73:8b:13:07:7e:08:0c:f1:b7:
                    13:83:cd:d9:ee:b8:a2:07:dc:ac:68:69:ff:e6:ff:
                    13:17:62:4a:cb:4e:c6:d1:d3:2f:18:7c:4c:04:24:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6F:31:AF:6A:B5:0F:76:3C:FB:BA:BA:D1:FD:81:D5:A6:93:14:82
            X509v3 Authority Key Identifier:
                keyid:9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:96:43:6f:0f:d1:1e:48:72:3e:a2:0c:ef:da:27:a9:0e:48:
         3f:05:95:2c:55:ec:ed:61:60:08:9a:16:80:af:d0:2d:5e:8e:
         e0:4e:b5:fe:47:cd:5f:c8:9b:01:6c:e1:c3:6f:c7:70:a8:8b:
         7b:14:5b:c1:7d:e7:20:3f:54:9d:b8:a8:a2:fb:72:62:3f:ba:
         74:e1:00:c7:00:e2:f1:b0:18:4e:55:53:fb:3f:b3:af:08:af:
         eb:7e:6a:1a:f9:0b:df:cb:79:52:99:1b:79:81:a6:ab:ab:82:
         90:91:d9:e9:89:f2:ed:6f:60:12:ef:28:9c:42:5f:31:4e:40:
         73:8a:e3:34:9f:72:f7:b5:e7:4e:67:62:5a:dc:39:3e:8d:21:
         8b:9d:eb:99:8e:bc:72:d2:52:d4:91:61:b7:0c:9d:af:96:a5:
         8d:d4:29:89:cb:d2:8c:b7:6f:95:3b:00:2e:97:f2:1f:57:13:
         ca:c5:0c:89:20:d1:3b:cb:9e:1e:78:c4:72:e9:16:e3:ac:56:
         54:6d:36:71:07:7d:ed:c0:42:e2:3a:a4:f7:e6:4e:ed:3d:34:
         30:34:e0:96:7b:62:8a:10:3e:f5:86:70:0b:4e:84:c1:ce:9b:
         db:4f:a7:2c:04:6e:24:46:b5:6e:c8:5e:b9:34:c2:19:26:2f:
         88:14:0e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:19:17 2025 by rpki-client on console.sobornost.net