Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          e4zR3bgcgNHQpKF2crfwBHb6Pl8Apvxs24tVI4uO3DQ=
Subject key identifier:   2A:24:CD:09:78:AC:43:38:26:F9:7A:E2:AB:4E:2E:07:44:8E:4F:2C
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       7106A383A5B751D79DFFE7E76C8321B094CE7434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          040C
Signing time:             Fri 31 Jan 2025 14:07:42 +0000
Manifest this update:     Fri 31 Jan 2025 14:02:42 +0000
Manifest next update:     Sat 01 Feb 2025 14:44:42 +0000
Files and hashes:         1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: ENEbkMExoMceN9GeeB5lMeB0WCNJSgKmR3L5TStLN/w=)
                          2: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: Dh1mwlUTMlGkbPsv2oKAQuUKQelXQm9TWTzWrXvc/xw=)
                          3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=)
                          4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:06:a3:83:a5:b7:51:d7:9d:ff:e7:e7:6c:83:21:b0:94:ce:74:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Jan 31 14:02:42 2025 GMT
            Not After : Feb  1 14:44:42 2025 GMT
        Subject: CN=2A24CD0978AC433826F97AE2AB4E2E07448E4F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:91:53:16:da:b3:36:00:a2:8c:75:23:e1:
                    99:a9:17:9f:bc:e1:f5:fc:3c:54:35:05:23:52:17:
                    f6:32:d0:ea:50:06:11:06:14:c9:95:ec:54:a0:cc:
                    c1:b2:98:52:db:b6:8e:c1:a1:ba:b4:69:35:55:a4:
                    e8:3e:6f:9b:e5:b8:a3:75:3c:47:95:6c:90:f6:fa:
                    cb:79:13:e1:5b:3c:d5:58:4d:85:76:72:a7:f6:74:
                    20:7e:8f:3a:b3:4b:7f:ff:bc:c2:15:25:76:0f:8d:
                    93:1b:38:a6:62:4f:19:12:65:d4:5a:d0:d3:b5:92:
                    9b:82:29:27:40:61:e4:6e:69:9d:16:4f:ad:7f:a9:
                    d7:4b:09:11:03:30:f9:78:23:2d:26:d9:b1:a7:3f:
                    7e:c4:00:ad:0e:3a:9b:0a:d3:b1:fa:bf:7f:68:04:
                    cf:87:7c:f2:ff:b2:f1:5d:ed:3b:85:d1:4a:6c:15:
                    e5:5b:15:20:54:a4:64:5f:cb:0a:15:23:90:40:48:
                    82:aa:f3:ad:be:63:94:dc:c0:3d:9b:4c:80:7f:5e:
                    19:a1:9e:a5:f3:51:ff:bb:57:ff:fc:1f:80:24:0b:
                    77:ad:84:98:88:70:95:05:92:17:26:ab:1d:a4:5f:
                    61:40:79:19:64:20:15:23:6d:3a:73:13:2d:a1:be:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:24:CD:09:78:AC:43:38:26:F9:7A:E2:AB:4E:2E:07:44:8E:4F:2C
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:1a:dd:7b:45:92:f0:c4:6a:62:d9:14:1d:76:1c:ab:6a:
         98:09:d3:c6:d7:7b:3b:be:f3:19:bd:8c:e0:5a:f5:18:67:14:
         64:4f:0d:53:83:72:dd:be:52:06:2e:a9:61:36:a5:4a:05:28:
         6f:f9:75:9b:63:5f:35:02:b2:06:94:d7:da:28:2c:aa:f4:55:
         93:ea:61:b5:f6:20:11:f3:ca:d2:c7:bf:33:c5:8e:5a:f3:06:
         2b:fd:a6:a6:2e:ae:78:47:e7:65:1a:c0:56:76:01:31:c5:f8:
         55:7f:5e:dc:af:89:c6:56:24:9a:38:1f:a1:59:5a:45:9a:13:
         82:a7:8c:c0:7a:07:2e:23:41:47:f0:48:f1:a1:71:99:a3:9e:
         bd:ed:ce:be:ee:bc:bf:9a:15:fa:89:82:64:e9:6f:43:69:8a:
         22:3a:9f:3d:4f:71:87:18:91:4f:23:63:c1:72:2f:e3:38:5a:
         84:3d:ae:5d:2d:45:cb:d3:c1:be:8f:de:bb:95:ff:34:4a:8f:
         ca:8c:46:c2:8c:a2:7c:fb:de:6d:9f:42:19:28:db:a9:30:53:
         99:4f:3d:5f:b9:3f:44:2e:af:9d:1a:99:8e:77:f0:0f:53:75:
         b1:74:da:41:52:4a:d1:63:0b:f7:72:d4:33:d3:58:44:ca:f5:
         fb:c1:97:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:36 2025 by rpki-client