Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.mft
File:                     3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.mft (raw, json)
Hash identifier:          j5nQWUQJmZOgWtw4eWuayj35qRARxp52nrCLICFkIqc=
Subject key identifier:   E3:BF:A1:AF:7A:36:8D:3C:0B:12:47:A1:02:84:09:6E:9F:AF:15:12
Authority key identifier: 3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25
Certificate issuer:       /CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
Certificate serial:       2CE5FFA92DE0F08624258C730321E59230CB248D
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.mft
Manifest number:          07
Signing time:             Fri 11 Apr 2025 12:16:42 +0000
Manifest this update:     Fri 11 Apr 2025 12:11:42 +0000
Manifest next update:     Sat 12 Apr 2025 14:46:42 +0000
Files and hashes:         1: 326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa (hash: Zw9WYR4eMzymgQSAsiOwFTFyltw+FJXqEAqW7cuaqPc=)
                          2: 326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa (hash: +VQfiOnoyYbcrtNEjRqNZ1sp4+XxXQ2+pZFd/3Tdl44=)
                          3: 326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa (hash: /LMCV8uaDgSXS27/31u6nmSrHG6w0dZBYdTMV8n2J6g=)
                          4: 3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.crl (hash: DeZfuKK8+QGUjOolQ3qoISNj9/AmBTM0g0VI9Re4Lw8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e5:ff:a9:2d:e0:f0:86:24:25:8c:73:03:21:e5:92:30:cb:24:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
        Validity
            Not Before: Apr 11 12:11:42 2025 GMT
            Not After : Apr 12 14:46:42 2025 GMT
        Subject: CN=E3BFA1AF7A368D3C0B1247A10284096E9FAF1512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:31:47:fc:ab:20:4e:f8:3f:19:55:e5:38:
                    64:1f:cd:ce:52:77:36:63:3a:a9:f0:9b:4a:92:95:
                    2a:33:9b:61:a9:1c:9b:c1:fd:17:ff:8b:ac:f3:56:
                    3b:11:bb:07:df:3f:39:67:d8:34:eb:ad:de:6b:cc:
                    17:c2:7f:57:f4:f6:e9:21:14:8e:1c:4d:27:ae:f7:
                    12:38:af:dc:f3:ad:eb:b6:c4:44:c8:44:44:3e:46:
                    0f:0c:64:8f:f0:c6:05:7c:72:dd:cc:2e:a4:55:27:
                    7f:a2:d2:37:25:f9:3c:f8:93:8f:42:f4:99:4f:c4:
                    e2:03:9e:eb:32:73:41:aa:a9:e6:da:2c:3f:aa:11:
                    89:2f:ae:bf:46:7d:1f:5a:b6:c1:de:3b:71:4f:9f:
                    bb:23:a5:e4:fa:0d:fb:00:82:64:f3:97:ca:01:25:
                    8a:5d:45:fc:48:66:ce:78:a0:1d:dd:74:3f:74:02:
                    b0:31:39:c8:9f:ca:72:01:6b:4c:35:c0:4a:93:28:
                    8f:ac:19:46:e5:32:d8:e7:ae:4a:e5:19:00:4a:4a:
                    0b:ec:0c:43:b2:61:57:09:37:19:40:0a:f3:01:e0:
                    19:fa:ee:ec:88:0d:45:98:35:69:18:7d:26:54:a7:
                    70:6f:20:9f:94:b6:ee:c6:22:6a:b4:b7:1f:8d:eb:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BF:A1:AF:7A:36:8D:3C:0B:12:47:A1:02:84:09:6E:9F:AF:15:12
            X509v3 Authority Key Identifier:
                keyid:3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:1d:ce:a8:74:df:bb:73:bf:72:fe:eb:81:25:35:36:3c:
         76:2c:c8:9a:d6:f0:9d:ed:35:ba:ea:17:f1:c0:72:45:3a:96:
         10:da:82:4b:2e:fd:b7:5d:ab:66:6b:08:56:28:f6:bb:0b:f3:
         ad:b5:d6:52:06:5b:4d:b2:7f:05:b9:25:e2:82:58:3a:86:cd:
         f1:b4:18:fd:bf:8f:c5:2d:5c:8a:2a:cd:8c:c3:f5:4b:fb:f5:
         51:75:fc:ec:5a:cb:51:3e:3b:5d:fa:e0:ce:47:9b:98:89:4a:
         f0:08:36:4a:c0:68:8f:e0:2e:c4:a8:cb:3e:bc:95:fc:0c:83:
         bd:f1:25:6c:31:2a:f7:14:eb:ed:0a:95:76:51:c3:39:d8:3e:
         59:70:9a:c0:49:1e:fc:38:38:67:97:63:b9:0c:4c:77:f1:ba:
         ec:58:b4:ea:26:06:c5:18:c3:81:c5:0a:a7:b5:57:47:b6:ac:
         78:ae:52:c2:96:06:1b:ef:d4:3b:e2:4e:9a:a3:44:79:64:4e:
         65:c2:c7:0f:bd:7f:8d:99:c4:e2:4c:6e:dd:10:5b:60:e0:e3:
         50:82:b8:4f:cc:3e:8c:33:13:6d:95:81:b6:0c:39:54:05:f1:
         4f:53:99:5b:e8:97:fe:a3:3b:51:28:48:f2:a4:ff:86:9d:d5:
         02:81:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:15:28 2025 by rpki-client