Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.mft
File:                     6357BB750B73CD5D9DBBCD91013CC468BF5759FE.mft (raw, json)
Hash identifier:          5UiZAxPGVT/Z9Iz1Lnr1CCeS39N6ZuW+FErlpiqxO5c=
Subject key identifier:   AA:E9:76:EC:C0:1A:8F:D8:AB:7A:63:D7:C0:50:29:F8:D5:C7:50:18
Authority key identifier: 63:57:BB:75:0B:73:CD:5D:9D:BB:CD:91:01:3C:C4:68:BF:57:59:FE
Certificate issuer:       /CN=6357BB750B73CD5D9DBBCD91013CC468BF5759FE
Certificate serial:       517ED1489DBF312B5E9935BD447B80662C1AEF24
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.mft
Manifest number:          0177
Signing time:             Tue 03 Dec 2024 08:46:52 +0000
Manifest this update:     Tue 03 Dec 2024 08:41:52 +0000
Manifest next update:     Wed 04 Dec 2024 12:12:52 +0000
Files and hashes:         1: 326130613a363034343a613134323a3a2f34382d3438203d3e20323135383130.roa (hash: s9b3VBNjAOB7O+OW4M7As5uvpne7zuZE8FDirP9gBLE=)
                          2: 6357BB750B73CD5D9DBBCD91013CC468BF5759FE.crl (hash: cCWF+BmVVTxCHLrOonb0KXW9miL7DbV/jLrbUaz7W6U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7e:d1:48:9d:bf:31:2b:5e:99:35:bd:44:7b:80:66:2c:1a:ef:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6357BB750B73CD5D9DBBCD91013CC468BF5759FE
        Validity
            Not Before: Dec  3 08:41:52 2024 GMT
            Not After : Dec  4 12:12:52 2024 GMT
        Subject: CN=AAE976ECC01A8FD8AB7A63D7C05029F8D5C75018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:62:aa:3f:8d:e7:1d:a8:58:05:27:d9:e3:
                    3f:1b:6b:76:76:00:fd:35:f3:dd:83:70:a3:37:12:
                    1a:c7:85:e6:d9:7a:82:9a:46:f7:1f:63:3f:95:d3:
                    79:e6:c3:de:78:fe:4e:8f:42:55:f4:31:cd:8c:d7:
                    e6:90:a0:74:16:d6:91:3d:58:06:4c:93:87:30:04:
                    66:43:7c:2c:e7:b8:8e:98:6f:a4:47:d9:05:92:f7:
                    47:b7:47:03:c1:3f:5b:09:0d:39:c1:64:dc:d1:70:
                    35:2b:29:47:df:55:ba:ef:b9:7c:0c:8e:9f:38:ec:
                    3f:c8:27:e4:d3:66:fa:fb:10:d9:49:00:69:36:e5:
                    20:32:99:c7:e4:45:e0:1b:23:6b:0c:f1:ec:d9:97:
                    4f:bf:67:fe:c8:9a:98:88:34:53:3e:8b:74:1a:f9:
                    3b:20:ce:47:f8:f5:00:96:9f:fe:71:db:1f:9e:74:
                    f6:6a:30:2a:4a:bc:f4:3f:3d:43:bf:a6:10:fe:21:
                    e3:f1:f7:2b:23:cf:9e:76:d8:4c:63:d4:22:e2:e5:
                    a2:77:46:1f:a9:c5:0c:84:f4:14:92:23:9a:e6:26:
                    39:a4:56:b3:0e:c8:4e:49:d2:ea:59:1d:4b:3f:21:
                    a4:7e:a4:62:1f:8c:49:e6:18:ee:95:72:b0:be:fd:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E9:76:EC:C0:1A:8F:D8:AB:7A:63:D7:C0:50:29:F8:D5:C7:50:18
            X509v3 Authority Key Identifier:
                keyid:63:57:BB:75:0B:73:CD:5D:9D:BB:CD:91:01:3C:C4:68:BF:57:59:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:66:7b:bf:47:5d:f8:51:5c:11:36:df:c9:13:e4:1d:8b:5e:
         de:36:5f:a1:27:04:33:10:2c:4e:1e:4d:5a:23:30:72:2f:d0:
         f7:cf:2f:3e:84:dd:6e:d8:fd:77:6a:28:9f:d1:c6:ff:74:d6:
         e2:74:b6:61:b5:41:51:d4:34:d9:c5:39:b7:14:88:ff:47:a6:
         0c:b5:05:06:9c:1a:d1:11:62:eb:fc:20:09:28:69:3e:f0:4e:
         2d:dc:f2:54:06:64:04:c5:95:c0:4f:26:7d:6b:5d:89:d3:56:
         d9:30:5e:dd:c9:e8:e6:bb:5a:a1:10:7a:8a:79:f6:b4:64:a7:
         8f:a2:98:ae:ee:04:15:95:e5:45:3b:3f:8a:89:75:6e:c1:6a:
         81:61:a6:b7:1d:32:69:a5:f4:27:a6:0c:40:66:00:0a:a1:a2:
         c0:88:b0:13:cd:a9:68:19:52:25:b7:c5:54:6e:24:5d:b8:d7:
         88:70:5d:38:34:5b:ce:e8:bb:6c:26:eb:35:d3:58:fa:4d:0a:
         d3:7a:23:7c:72:d6:93:96:b2:55:2a:a9:7a:2f:79:8e:df:7a:
         3b:00:d9:44:6d:e5:47:a6:60:e2:97:95:83:76:c2:36:88:ab:
         9f:c6:f2:ac:6b:78:08:68:26:a3:d9:92:d0:da:19:87:3d:cc:
         b7:45:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:02 2025 by rpki-client