Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/755f54a1-f158-4973-9c2a-d8afca74c42b/0/8A1EC4110915E610773BA7F0934ED3740893F276.mft
File:                     8A1EC4110915E610773BA7F0934ED3740893F276.mft (raw, json)
Hash identifier:          iMBIV2RDm5nytaiQDV65Ntl7oZ9kppJ5xR33Sw7+1ds=
Subject key identifier:   09:D1:C0:9B:02:2F:83:3F:B4:C1:2F:FD:0B:36:0B:83:A7:3F:9B:0A
Authority key identifier: 8A:1E:C4:11:09:15:E6:10:77:3B:A7:F0:93:4E:D3:74:08:93:F2:76
Certificate issuer:       /CN=8a1ec4110915e610773ba7f0934ed3740893f276
Certificate serial:       0DEDFFD5B9615697D9776B08D61FEE94C60E1203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ih7EEQkV5hB3O6fwk07TdAiT8nY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/755f54a1-f158-4973-9c2a-d8afca74c42b/0/8A1EC4110915E610773BA7F0934ED3740893F276.mft
Manifest number:          0C
Signing time:             Thu 06 Jun 2024 18:02:57 +0000
Manifest this update:     Thu 06 Jun 2024 17:57:57 +0000
Manifest next update:     Fri 07 Jun 2024 18:48:57 +0000
Files and hashes:         1: AS215277.asa (hash: /FquUeJXGzWPA0gpwOiUYqIOI7aYUUpgKlXV1pk2iyw=)
                          2: 8A1EC4110915E610773BA7F0934ED3740893F276.crl (hash: 3H55wqgz4g4E5fX9jaSjS1ZxE2rO3u9YPwlczz2Ek/o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ed:ff:d5:b9:61:56:97:d9:77:6b:08:d6:1f:ee:94:c6:0e:12:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1ec4110915e610773ba7f0934ed3740893f276
        Validity
            Not Before: Jun  6 17:57:57 2024 GMT
            Not After : Jun  7 18:48:57 2024 GMT
        Subject: CN=09D1C09B022F833FB4C12FFD0B360B83A73F9B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:d9:fe:2f:77:19:cc:05:68:3d:ad:dc:49:
                    35:25:ee:8b:ad:45:7c:e8:ca:5a:55:24:b9:7c:5e:
                    be:29:6f:cf:c6:06:ab:a7:d9:83:34:30:94:a5:59:
                    18:6e:fc:3e:e0:cb:31:19:ae:53:c2:c2:db:1b:31:
                    68:d1:c8:d0:62:48:5a:3f:2c:89:59:99:3f:28:b4:
                    33:f0:50:e4:4c:e2:a4:7e:72:1b:53:cb:f9:90:29:
                    75:60:d3:ae:01:37:69:77:6f:7a:c4:ba:62:83:f9:
                    a0:15:a8:4b:e8:97:83:14:6d:bf:c2:39:83:9d:37:
                    1e:39:92:18:d8:fe:f0:22:46:3b:2a:d3:53:55:da:
                    eb:50:de:9f:d2:38:83:d6:1c:b7:75:8c:42:cd:66:
                    ad:d5:95:fd:0e:79:75:62:c7:8c:16:bd:92:a8:a1:
                    6d:c9:0a:bb:ab:21:47:aa:07:51:19:66:78:06:75:
                    1c:f5:f4:15:7a:0f:5c:0c:61:d7:c0:c2:04:8a:a1:
                    82:46:d3:39:96:d0:7c:d6:e1:a6:8d:59:18:03:94:
                    25:ef:93:d8:2c:8a:eb:09:6c:da:5e:1b:15:f6:55:
                    14:11:c7:82:9b:be:f1:8d:55:31:3a:70:68:ca:dd:
                    34:6a:9c:9c:dd:c9:46:bb:99:95:8b:bc:0d:52:df:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D1:C0:9B:02:2F:83:3F:B4:C1:2F:FD:0B:36:0B:83:A7:3F:9B:0A
            X509v3 Authority Key Identifier:
                keyid:8A:1E:C4:11:09:15:E6:10:77:3B:A7:F0:93:4E:D3:74:08:93:F2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/755f54a1-f158-4973-9c2a-d8afca74c42b/0/8A1EC4110915E610773BA7F0934ED3740893F276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih7EEQkV5hB3O6fwk07TdAiT8nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/755f54a1-f158-4973-9c2a-d8afca74c42b/0/8A1EC4110915E610773BA7F0934ED3740893F276.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f7:c6:bd:10:3f:ac:62:50:c2:1c:43:bf:29:e5:91:79:96:
         80:91:d4:99:6b:f6:06:4c:a7:23:37:88:2e:e5:ca:69:e8:26:
         16:5d:2d:a3:00:aa:7d:e2:a1:92:cc:fe:1e:52:74:46:61:70:
         34:31:c2:e2:61:33:6e:2e:6a:72:d0:cb:42:d5:83:44:eb:b8:
         da:f9:5d:52:66:dc:d1:ca:ba:c4:41:c0:c5:36:bb:e3:19:4e:
         4e:c9:c5:15:40:e6:6a:b3:a3:81:ab:2d:df:86:d7:48:57:02:
         b7:2f:11:2f:f6:23:a6:a0:af:d8:81:c6:9d:68:78:ed:f2:84:
         82:2a:7c:86:ed:bf:0e:12:ae:a7:2a:47:ad:10:19:01:ff:8a:
         0a:67:37:34:59:23:df:ba:e7:2b:df:95:1f:49:67:47:ee:e1:
         98:13:92:31:67:fa:a6:14:93:a9:00:54:6c:f7:c8:74:5e:66:
         ee:4d:a2:d6:94:0d:3b:0b:61:60:a5:bd:02:75:7a:12:76:a9:
         1d:9a:16:58:65:c9:a3:18:7d:48:cb:0d:8d:b8:5b:52:f4:b6:
         0f:29:d4:38:a4:9e:34:22:47:9c:17:d8:c8:af:1a:83:db:aa:
         3e:09:d5:c2:7a:8a:a9:a7:b1:85:fe:6d:1f:78:18:f3:90:26:
         6f:52:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:15 2025 by rpki-client