Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.mft
File:                     7796B1C4EEB415B656CB468A71B181E93F2C50BB.mft (raw, json)
Hash identifier:          EXbfIYkUXbp8dkRLSD4rGKjPWD8VQfQAhIrcbZ8q4uo=
Subject key identifier:   EA:48:7A:3D:AB:42:1E:35:3F:A5:71:7D:48:C7:91:A7:F4:0C:BD:8E
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       34CC3D2F71BD0ACA82BD04764DCDAF4B3BAE90A1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.mft
Manifest number:          4A
Signing time:             Thu 30 Jan 2025 01:33:24 +0000
Manifest this update:     Thu 30 Jan 2025 01:28:24 +0000
Manifest next update:     Fri 31 Jan 2025 05:02:24 +0000
Files and hashes:         1: 326130613a363034343a363365333a3a2f34382d3438203d3e20323133373638.roa (hash: bssPLKGPHDK4oSVXYzB3zo446+/8WhDNm1WEKvavFF4=)
                          2: 7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl (hash: y/fMOPRfaeHA/juGSxA+BOHlaEYXGVV1DfewSGzBVy4=)
                          3: 326130613a363034343a363365343a3a2f34382d3438203d3e20323133373638.roa (hash: C7SslzGwm/3L9OQdVJYLDkmrzwGDYJnorSBRT0RBp6w=)
                          4: 326130613a363034343a363365313a3a2f34382d3438203d3e20323133373638.roa (hash: Sr9otsafI4NvEFDveNtt5Mj9mjDo0SUWNgGpno0I5GU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cc:3d:2f:71:bd:0a:ca:82:bd:04:76:4d:cd:af:4b:3b:ae:90:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Jan 30 01:28:24 2025 GMT
            Not After : Jan 31 05:02:24 2025 GMT
        Subject: CN=EA487A3DAB421E353FA5717D48C791A7F40CBD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:fd:6d:9b:c2:db:a4:1d:ef:68:10:d0:34:
                    4c:ca:5e:49:4d:3d:a4:ab:32:c1:97:dc:d2:40:f5:
                    3f:b1:33:0d:f6:b8:4e:bf:5f:9b:3e:5b:3b:ac:28:
                    6d:64:85:d1:10:04:83:d8:c2:82:9b:8b:9d:3a:a2:
                    e2:cd:d1:60:cb:f0:a6:4f:d4:92:73:31:23:4a:15:
                    f7:b2:00:2c:f5:f4:8c:e1:0e:a7:f6:6b:be:89:71:
                    4c:fe:92:bd:43:cc:45:2a:91:0f:15:ef:ad:b0:64:
                    9c:62:02:4a:4c:2f:26:86:0c:40:25:e7:33:36:31:
                    15:ec:33:98:4e:5c:b2:e8:9d:f9:c1:e5:53:dc:e8:
                    23:19:4a:d1:c5:2d:d3:a5:1f:c9:50:d9:bc:7c:f2:
                    90:45:b3:da:6c:c0:bd:9f:17:c9:e6:ee:02:ff:c7:
                    1c:c4:4b:ee:59:9d:0a:1c:41:f1:81:53:6a:53:57:
                    8e:6c:82:46:5f:61:63:fc:04:a6:d5:5e:32:85:5c:
                    41:d1:31:a6:3b:f1:3b:27:d5:5a:65:3b:85:f6:eb:
                    f6:a6:e5:99:cb:99:41:f8:79:90:69:c3:92:2e:20:
                    8f:8d:46:5d:69:cb:f1:ce:f2:8e:dc:c9:82:1f:3d:
                    6f:86:59:26:9c:8b:37:9b:41:2d:d7:d5:04:bd:46:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:48:7A:3D:AB:42:1E:35:3F:A5:71:7D:48:C7:91:A7:F4:0C:BD:8E
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:dd:c5:09:88:cf:f7:b4:50:36:d1:38:16:2d:4f:fc:f2:
         17:d1:cb:ad:8f:7c:3f:5a:3b:b6:ad:58:8a:93:ae:ca:64:87:
         5b:5b:af:ee:29:74:a6:d1:65:65:ce:76:c1:03:41:ef:f2:e6:
         51:df:28:73:1a:eb:7b:9a:80:e8:93:9c:96:fa:c5:1e:93:8f:
         57:94:99:46:7a:de:c1:02:b3:41:81:a3:e4:87:62:a5:66:f9:
         ad:31:cf:32:99:22:24:9c:18:9a:c3:c6:c1:c6:13:31:00:ba:
         7d:b8:2c:e5:0f:11:4e:a8:2a:3a:29:6a:bb:d0:76:25:c7:51:
         e8:7b:29:cf:4a:bd:d8:a0:04:ff:77:2b:77:b7:4a:bd:69:46:
         b4:e9:08:7d:89:45:90:27:a0:26:50:ea:64:99:cf:d6:e7:44:
         73:72:b4:ec:56:3b:3d:4f:f8:56:f4:eb:ca:1a:1b:77:aa:8e:
         e4:89:d7:57:ff:e3:31:fe:a6:95:1f:f6:f8:07:b1:0d:a0:79:
         5a:f5:d1:94:22:59:f1:c9:2e:d6:63:83:68:bd:34:2e:2b:b4:
         96:e7:06:5c:51:9f:b3:ae:c3:d5:d1:54:5a:b0:d0:20:21:40:
         0b:f3:11:51:f0:e6:81:22:35:d9:07:0d:e0:2f:2f:78:94:65:
         83:5e:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 16:13:29 2025 by rpki-client