Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          Kzlc/6VdTtgCcGDurjg1+rLSWahYsfIlt94Ap4LHMRY=
Subject key identifier:   45:0C:D1:D7:41:A3:3E:5F:54:DE:C8:F5:AF:14:31:9A:F3:2B:06:DE
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       19226B273C3867D3EB4EAE6232A0412623ADC631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          012E
Signing time:             Fri 31 Jan 2025 07:25:49 +0000
Manifest this update:     Fri 31 Jan 2025 07:20:49 +0000
Manifest next update:     Sat 01 Feb 2025 07:36:49 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: eDYFs0uxSH1GGz1ipcSshDIhmdvOe6VAWPpBVU777zs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:22:6b:27:3c:38:67:d3:eb:4e:ae:62:32:a0:41:26:23:ad:c6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Jan 31 07:20:49 2025 GMT
            Not After : Feb  1 07:36:49 2025 GMT
        Subject: CN=450CD1D741A33E5F54DEC8F5AF14319AF32B06DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:b1:9c:f8:d7:1d:42:dc:3e:e0:7d:3c:5d:
                    e5:d1:cf:a4:23:de:5c:19:82:41:91:d4:db:02:e1:
                    43:05:3e:fc:4e:dd:03:88:e3:fc:2d:e9:b4:42:6d:
                    b4:2d:b1:05:77:d4:c9:81:f7:11:d1:52:fe:00:42:
                    40:3a:cb:cf:10:35:fd:eb:0f:89:f8:bb:80:c3:0a:
                    15:c5:41:44:a6:b8:6e:1b:33:f3:65:26:89:67:af:
                    9c:3f:56:6b:09:6e:6a:01:6c:63:0f:5f:bc:c2:5f:
                    98:f7:dc:e2:44:68:cb:ac:1d:f1:86:e3:82:68:68:
                    fc:4c:a4:7f:18:e0:ac:a7:b4:1b:0a:85:06:5e:f5:
                    d7:0a:97:e9:06:b1:c6:3c:22:87:82:d4:8e:38:7e:
                    e1:f2:69:b2:4c:2b:58:d3:7f:62:0e:3a:0a:1f:73:
                    13:5a:60:14:16:3f:60:8f:ae:1c:96:bb:32:2e:06:
                    a4:dc:d4:b0:b0:2e:04:1c:2c:da:46:ca:37:d5:ca:
                    03:64:4d:2a:76:98:ef:8a:29:88:3e:cd:d6:5e:06:
                    67:b7:50:e0:1d:81:cd:84:34:6e:ab:fa:93:6f:31:
                    df:1f:a0:3d:d8:92:f3:ec:15:60:b1:b1:c2:9b:b1:
                    7e:49:a0:99:41:5b:84:75:f7:fc:a5:29:9e:54:66:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0C:D1:D7:41:A3:3E:5F:54:DE:C8:F5:AF:14:31:9A:F3:2B:06:DE
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:20:20:b4:a5:d1:c6:5e:be:b9:1b:9f:62:5a:6a:98:26:
         17:23:5e:d6:4b:8b:03:fb:a1:40:72:39:46:19:89:21:2f:c1:
         c6:f8:1f:08:c3:19:b8:c9:a6:ad:50:cb:9c:39:a4:6b:9e:2a:
         ee:11:6c:2c:ee:d0:e8:d2:45:d5:30:4d:11:6c:82:c6:b3:fe:
         d9:3c:d9:47:58:5e:6f:c1:06:58:df:0f:7a:99:7a:f8:6f:34:
         5a:f4:c0:64:60:d4:c0:49:1e:9d:21:b5:72:e4:df:a2:0f:de:
         81:d5:2f:c1:79:a4:ab:70:ae:08:d0:19:a6:08:a3:79:24:d2:
         09:c8:88:88:2f:33:7d:57:cc:e2:7b:4b:65:96:59:2a:ab:0a:
         68:fc:80:e7:52:06:10:1d:ab:ef:3f:54:f7:89:53:ae:4a:74:
         07:05:8b:05:25:b4:3a:c8:2b:d0:ec:56:f9:7e:57:c8:57:9d:
         ab:4c:35:b4:c5:03:dc:77:bd:71:3f:ea:ca:8c:4d:a7:da:18:
         91:90:9e:1a:04:58:7c:2d:18:77:b5:b2:8a:9d:b5:20:97:a7:
         27:b7:07:3d:21:83:85:f6:65:ba:73:37:bb:33:fa:0f:fa:34:
         37:e8:4e:b0:88:19:28:d5:ad:02:48:69:2d:3c:c6:cd:6c:4f:
         0e:d4:9d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:53 2025 by rpki-client