Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.mft
File:                     E78C2AFCF0927B952709E9D02232AAF22369820A.mft (raw, json)
Hash identifier:          LaorKgvnhWFa5vK8xMQypTq4SQ5BJtxvDRG4bsHc2Es=
Subject key identifier:   11:DB:10:47:6E:AE:74:63:FD:37:D2:A2:D3:07:B5:0A:74:60:59:9A
Authority key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Certificate issuer:       /CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Certificate serial:       55DB99511F4A2DF80A3CAB3940F767F3D9E81CAD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.mft
Manifest number:          38
Signing time:             Thu 05 Sep 2024 12:31:28 +0000
Manifest this update:     Thu 05 Sep 2024 12:26:28 +0000
Manifest next update:     Fri 06 Sep 2024 15:12:28 +0000
Files and hashes:         1: 326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa (hash: FSvDJnvBb9JZOIRSY3tmRV+iA3B/nnOtW/fgEjlH7Kg=)
                          2: E78C2AFCF0927B952709E9D02232AAF22369820A.crl (hash: H67Afh79ux/WfF0getREsmdyk1SWK0wmzUUEG5vG3xA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:db:99:51:1f:4a:2d:f8:0a:3c:ab:39:40:f7:67:f3:d9:e8:1c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
        Validity
            Not Before: Sep  5 12:26:28 2024 GMT
            Not After : Sep  6 15:12:28 2024 GMT
        Subject: CN=11DB10476EAE7463FD37D2A2D307B50A7460599A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:99:00:43:7f:89:0b:b9:6e:ad:a2:20:b0:
                    7d:39:33:c6:24:da:cd:a0:9b:17:79:2a:cb:87:6f:
                    5c:d2:2d:65:40:d5:c1:e5:48:c5:8f:29:5e:22:e5:
                    0b:7b:bf:c8:6b:85:02:e3:56:ab:62:fb:b2:a0:63:
                    03:90:d6:d9:4d:7b:2a:c4:2f:bb:75:d0:04:81:a1:
                    ba:a2:f2:94:bf:24:2b:27:2d:09:88:88:c0:e7:c7:
                    1e:6a:35:b4:1d:02:33:b5:0c:3a:e6:bd:cf:54:c1:
                    f6:01:1a:d0:e1:ac:cf:4b:d4:d9:15:2f:17:40:e0:
                    d6:69:9f:04:a6:79:62:e7:7d:e2:6d:97:ba:26:4a:
                    2c:06:c2:6f:f1:88:f8:7a:f8:57:63:a4:5c:a7:8e:
                    0d:e1:b6:7e:dc:13:1b:20:25:52:ce:30:cc:6c:b9:
                    b5:09:5f:54:d8:9d:18:de:ec:f4:77:7e:e5:8b:05:
                    cc:2e:a2:2c:29:34:69:2f:ce:b3:99:15:b6:05:03:
                    2f:9b:f9:7c:7d:6c:be:00:f5:ad:2f:f2:11:70:21:
                    87:a1:02:03:ff:20:93:60:03:75:24:fc:92:a2:25:
                    7d:61:af:ee:6d:d9:de:6c:e0:64:84:b5:43:ae:b2:
                    ed:d7:83:18:f4:10:88:66:55:80:e2:f6:eb:42:67:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DB:10:47:6E:AE:74:63:FD:37:D2:A2:D3:07:B5:0A:74:60:59:9A
            X509v3 Authority Key Identifier:
                keyid:E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:db:ae:8d:9d:fe:2e:b4:58:2e:2c:1e:36:11:41:8e:d3:06:
         34:1e:e1:a6:00:02:90:ed:5f:2e:77:3d:24:46:19:dd:05:c1:
         26:34:15:3d:62:5d:36:10:4c:80:6d:08:cc:c3:34:90:91:26:
         68:9a:6b:4a:ed:63:03:ed:00:2c:13:b8:e0:fd:7a:27:b9:77:
         be:d2:6f:03:1e:e3:49:a6:bf:e8:6f:2f:20:63:f3:d6:c4:6a:
         14:f6:f5:ea:c8:e1:93:56:07:40:7a:11:7f:08:8e:ca:c4:8f:
         ce:5d:7e:c0:9a:67:7d:6c:77:af:c0:c8:22:07:26:cf:ce:e5:
         dc:4a:4c:18:a1:33:d0:bf:fe:ec:5d:c5:58:60:0d:93:3f:2f:
         3a:5a:2d:31:4e:bd:e1:bc:6b:f0:b8:91:96:a3:44:af:33:7b:
         d9:5d:b7:9d:6c:70:4e:53:50:fd:fc:fb:75:ee:4a:3e:de:61:
         1b:2f:06:79:f6:1a:51:6b:7f:b0:0c:14:8e:43:28:04:21:4e:
         b9:df:09:45:9f:e7:22:ba:17:d2:de:e2:4b:17:59:71:db:06:
         ed:64:03:d2:86:24:57:f2:e2:47:13:a0:89:b6:18:1a:6e:9f:
         ae:22:7d:8c:0f:0b:c3:45:a2:5b:7f:1b:2e:fd:97:02:89:52:
         5d:b5:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:43 2025 by rpki-client