Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft
File:                     C0D6D353C935E0FE15C81690DCA11D31ED250300.mft (raw, json)
Hash identifier:          wGFoZ3NCDs6QpppVShOY3CfLuvSYkNo0ls123LAJyiM=
Subject key identifier:   A3:7D:24:53:E3:70:7D:B9:AF:34:D0:D8:6F:92:66:A1:33:7B:2C:A8
Authority key identifier: C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00
Certificate issuer:       /CN=c0d6d353c935e0fe15c81690dca11d31ed250300
Certificate serial:       3B9427BEE378B90BA72131DD6C5E92FBF3296352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft
Manifest number:          19
Signing time:             Wed 30 Jul 2025 03:54:46 +0000
Manifest this update:     Wed 30 Jul 2025 03:49:46 +0000
Manifest next update:     Thu 31 Jul 2025 07:46:46 +0000
Files and hashes:         1: C0D6D353C935E0FE15C81690DCA11D31ED250300.crl (hash: tm1Yks1xIORXqhcAWzw40uK0jH4pTCvzk1SBy3VbNPw=)
                          2: 323030313a3637383a3132303a3a2f34382d3438203d3e20323133363035.roa (hash: 5q/M4lb8Ofpk3VIN4n2HLQvoxlI5gi3EJUTq2JtSuDA=)
                          3: 323030313a3637383a313064303a3a2f34382d3438203d3e20323133363035.roa (hash: Rc6xidsdGh15ql3Ow7KrnpPwhjt8cOH5K4OZkWTDad0=)
                          4: 323030313a3637383a313064303a3a2f34382d3438203d3e20323130343430.roa (hash: OENIfL5LdwDXNnHydIuzLY0aPGCuWDVK5DktiJALMcg=)
                          5: 323030313a3637383a3132303a3a2f34382d3438203d3e20323130343430.roa (hash: V1PYIWEGKTBSZpsDsi4hBMAUOytWnRs9tofp7Cv0sO0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:94:27:be:e3:78:b9:0b:a7:21:31:dd:6c:5e:92:fb:f3:29:63:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d6d353c935e0fe15c81690dca11d31ed250300
        Validity
            Not Before: Jul 30 03:49:46 2025 GMT
            Not After : Jul 31 07:46:46 2025 GMT
        Subject: CN=A37D2453E3707DB9AF34D0D86F9266A1337B2CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:10:8d:cf:aa:93:ce:b0:e7:e4:c4:f7:80:
                    39:92:64:85:1b:54:a9:a6:f7:bf:04:bc:87:9a:ea:
                    d8:8d:f6:d8:b6:93:a7:ef:85:6e:fc:c5:37:4b:87:
                    ef:25:c3:0b:fb:eb:51:68:80:54:ef:07:06:b9:bb:
                    8e:7f:6f:9f:ec:38:88:c2:e6:3c:c8:89:4d:7c:70:
                    51:53:e5:99:19:1a:2c:b3:fd:d1:e9:a6:8d:70:0d:
                    d9:27:2d:07:9b:97:b9:32:51:e3:43:e7:6d:a0:bf:
                    88:b8:2a:b6:b0:f6:b6:7c:e9:73:cb:43:8e:af:7d:
                    ff:40:b1:dc:de:78:b3:3c:21:0b:b5:1e:61:99:d4:
                    9b:47:f6:c7:34:b7:c9:54:23:3f:5e:73:f7:3c:68:
                    08:6c:d7:77:02:7c:5a:cb:c1:46:d2:7b:c7:9a:d7:
                    6f:d2:ef:3b:fb:1f:66:a0:53:7b:cd:d7:fe:9d:6f:
                    20:f6:88:eb:1f:bd:23:6c:2f:74:f7:59:10:20:01:
                    3a:00:6e:30:97:c0:7d:bf:c4:67:03:0e:d3:74:c5:
                    7a:53:45:9d:d6:25:c0:73:90:40:09:1f:82:6d:1b:
                    1e:ee:2b:9d:97:da:60:15:3b:88:d6:66:78:e2:9a:
                    88:48:bf:ef:be:8b:9f:0f:84:e6:ba:2c:53:a0:11:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:24:53:E3:70:7D:B9:AF:34:D0:D8:6F:92:66:A1:33:7B:2C:A8
            X509v3 Authority Key Identifier:
                keyid:C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:9e:47:fa:c2:5e:0f:42:31:e9:42:ef:d2:f5:ce:27:b1:
         af:3c:32:ea:40:2f:98:45:88:14:3a:34:78:f3:a5:e5:29:16:
         a7:24:52:5d:08:70:ff:49:b5:40:17:f2:ab:bd:d1:ef:65:8f:
         29:6c:70:99:09:28:05:3b:ec:a2:5d:4f:24:e1:bc:6c:8d:07:
         a7:6c:ec:c4:25:8f:a2:79:08:aa:5c:2a:e6:e4:a9:04:f8:ed:
         d6:dd:b8:24:a2:2f:b4:a2:45:f9:7a:55:92:59:c6:a8:8f:5e:
         54:07:74:a0:f3:69:f5:ec:c2:e1:bd:59:de:d6:2f:6b:14:90:
         3d:1b:d4:04:2f:15:15:ed:8d:2d:51:7b:7c:50:fd:6c:6a:12:
         bb:32:b8:24:d4:dc:7b:57:f6:96:ff:2b:af:c2:29:6a:75:fd:
         94:a0:0c:78:0c:0c:83:e3:5a:99:cb:e6:e5:82:43:8c:5e:9c:
         6d:e5:17:44:3e:5b:7c:76:45:24:75:18:25:20:96:85:0e:5a:
         c5:69:63:18:5a:aa:52:61:8a:5c:f2:51:ba:70:fe:85:e0:68:
         01:81:58:90:14:84:b1:14:81:38:1f:3c:93:25:f0:7e:51:30:
         ea:50:58:22:0d:a7:1b:18:5a:91:49:b5:50:6c:06:a7:94:f9:
         bb:b7:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:58 2025 by rpki-client