Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/0/1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.mft
File:                     1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.mft (raw, json)
Hash identifier:          7Af7UXXl0RuTNQZ5s/Suvc5s0IFKfifccEH5oQWtyRs=
Subject key identifier:   C9:B0:E5:2B:95:0C:89:C3:FA:FB:41:95:C8:9F:2B:07:42:AA:8C:07
Authority key identifier: 1E:A8:D2:35:74:79:5B:2B:5C:AB:05:EE:44:BA:34:B5:D2:FA:5E:63
Certificate issuer:       /CN=1ea8d23574795b2b5cab05ee44ba34b5d2fa5e63
Certificate serial:       0802E2DD468C85623954851D3135AA6CE3C9B50F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqjSNXR5WytcqwXuRLo0tdL6XmM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/0/1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.mft
Manifest number:          0F
Signing time:             Fri 31 Jan 2025 10:41:12 +0000
Manifest this update:     Fri 31 Jan 2025 10:36:12 +0000
Manifest next update:     Sat 01 Feb 2025 14:14:12 +0000
Files and hashes:         1: 1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.crl (hash: rrm+3kITP4xty1rjlmEWuYvEmfFSV+mG1SDqG70M7LU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:02:e2:dd:46:8c:85:62:39:54:85:1d:31:35:aa:6c:e3:c9:b5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea8d23574795b2b5cab05ee44ba34b5d2fa5e63
        Validity
            Not Before: Jan 31 10:36:12 2025 GMT
            Not After : Feb  1 14:14:12 2025 GMT
        Subject: CN=C9B0E52B950C89C3FAFB4195C89F2B0742AA8C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6c:40:de:b9:e4:6b:2f:0a:3f:89:43:45:e4:
                    55:17:c3:be:77:d0:08:d0:9a:cd:fb:64:a2:00:a1:
                    13:04:b7:39:9e:a2:7f:94:cc:43:e3:d4:b0:0a:76:
                    c9:4f:03:cf:7d:a3:22:8d:9f:df:7b:81:37:36:8d:
                    b1:62:42:fc:53:8c:1c:26:a7:7e:09:b7:76:d5:42:
                    91:8f:69:ea:2b:c7:ab:9e:c4:e7:d9:08:58:f0:a2:
                    8b:7d:f3:dd:9d:9f:37:48:3c:0f:dd:a7:39:9e:b8:
                    35:05:8c:d0:cb:93:8b:92:81:87:21:5c:75:19:73:
                    f4:61:df:21:9e:a9:d9:dc:a5:b6:a7:41:fc:7f:10:
                    17:b6:f5:cb:fc:41:9d:4b:70:c5:3f:53:5c:42:11:
                    80:ba:28:04:a5:74:44:aa:1a:60:57:f3:af:49:da:
                    cc:69:e6:e4:3a:5f:30:f8:cc:12:63:9e:e1:a2:f0:
                    6c:e1:2e:c8:67:56:a7:1e:7b:66:16:e1:e5:fd:19:
                    2f:80:c5:c2:b5:23:bd:a5:7a:81:65:ff:7f:15:b1:
                    7a:12:de:67:4e:11:c4:bd:9f:15:94:9c:6c:ae:32:
                    c2:89:89:b0:87:0c:77:fd:ca:d2:40:32:cc:c0:50:
                    6b:2c:8b:2c:fb:1c:92:5a:d3:2d:8f:57:5b:64:8f:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B0:E5:2B:95:0C:89:C3:FA:FB:41:95:C8:9F:2B:07:42:AA:8C:07
            X509v3 Authority Key Identifier:
                keyid:1E:A8:D2:35:74:79:5B:2B:5C:AB:05:EE:44:BA:34:B5:D2:FA:5E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/0/1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqjSNXR5WytcqwXuRLo0tdL6XmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/0/1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:24:92:60:b1:17:0b:88:7c:6b:e8:b9:2b:8d:38:b0:a8:3c:
         d9:4d:57:03:76:84:92:3f:5b:41:bc:7d:af:85:48:c3:30:c6:
         cd:4c:f1:ec:a6:22:1f:5d:f0:d2:92:0b:6c:89:f8:4d:1f:be:
         9b:c0:d8:e9:9a:bd:41:63:00:a8:fd:01:d9:c3:5f:87:bc:5d:
         5d:8b:a3:8f:08:f3:0a:73:fc:59:9b:71:3a:58:44:05:1a:72:
         bb:e6:ce:a3:9d:1e:50:6c:c9:1c:39:02:ef:15:20:1f:ac:75:
         2a:14:b3:4e:c0:ff:fe:44:57:6f:34:29:5e:22:d0:0d:ad:23:
         f0:80:2f:00:bf:cf:fe:66:f7:04:d4:96:5d:44:26:2b:1a:c2:
         77:fc:0a:5b:dc:0e:cf:bf:67:f8:e2:92:6c:38:2d:1e:1f:66:
         d3:4e:36:1e:23:1c:be:88:f5:78:4e:ca:9c:3f:e7:29:28:b9:
         19:43:36:13:86:d3:af:d9:ca:e6:64:9d:19:a9:45:57:02:6f:
         5c:8f:a5:2f:95:bf:c4:71:73:6a:19:f1:b7:37:dc:04:4c:c8:
         1e:b8:8e:0c:39:7d:c2:b3:25:c6:f8:7f:3a:52:7e:c9:23:92:
         86:ab:b4:92:27:11:b8:56:9d:a2:22:81:d7:b1:88:e6:06:1b:
         d3:8f:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:35 2025 by rpki-client