Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft
File:                     B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft (raw, json)
Hash identifier:          GY1XAHgRGXmikRNOdPr3iQJbHQMEfB0TgQIEzGrLjdQ=
Subject key identifier:   C3:8F:56:C1:20:A0:C5:94:CF:7F:3A:9D:3F:5B:A9:75:BD:F5:C4:95
Authority key identifier: B3:EA:FB:B8:7C:FF:EF:94:01:86:75:9F:08:A7:81:5F:1C:67:A7:29
Certificate issuer:       /CN=b3eafbb87cffef940186759f08a7815f1c67a729
Certificate serial:       02F205680E1AA849C11859426C43F9BE656FA25F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-r7uHz_75QBhnWfCKeBXxxnpyk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft
Manifest number:          01D2
Signing time:             Fri 14 Feb 2025 13:38:41 +0000
Manifest this update:     Fri 14 Feb 2025 13:33:41 +0000
Manifest next update:     Sat 15 Feb 2025 17:28:41 +0000
Files and hashes:         1: B3EAFBB87CFFEF940186759F08A7815F1C67A729.crl (hash: DR4cyT+yjnIY0V16FVzzEaImW2KlXtDIuSEA5V81zgc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f2:05:68:0e:1a:a8:49:c1:18:59:42:6c:43:f9:be:65:6f:a2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3eafbb87cffef940186759f08a7815f1c67a729
        Validity
            Not Before: Feb 14 13:33:41 2025 GMT
            Not After : Feb 15 17:28:41 2025 GMT
        Subject: CN=C38F56C120A0C594CF7F3A9D3F5BA975BDF5C495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:51:13:be:86:32:41:1a:78:d2:48:81:62:
                    c4:64:8d:58:89:e0:f4:41:5f:cd:ca:11:c0:05:54:
                    0c:e7:5e:cc:be:24:28:7c:43:fe:db:5e:b4:c3:20:
                    48:b2:19:a6:df:60:f1:bd:e7:5a:41:b8:2c:86:65:
                    16:ce:1b:25:65:6c:d0:ea:b2:f7:bf:40:82:21:8d:
                    05:eb:96:97:2d:48:25:eb:b0:e2:56:7e:ce:88:50:
                    34:3e:a7:90:ac:d2:89:2a:da:38:85:1b:b9:83:76:
                    07:cb:00:93:e4:8f:99:b3:13:24:09:b3:1c:d4:ae:
                    6a:25:34:b6:06:0d:64:a2:fb:60:e5:94:9a:29:96:
                    ea:58:a8:c2:7e:f8:38:70:d8:59:8b:05:16:f1:c1:
                    ef:8c:f7:4f:0a:af:61:bc:1e:69:31:b0:77:b8:7c:
                    ad:2c:95:f0:bc:90:0a:3e:2b:85:c8:f9:df:ae:ec:
                    8c:9d:0f:3d:3f:fa:ff:32:3c:00:fb:e3:d6:96:1d:
                    33:12:a6:f5:a0:3f:b4:4d:ba:d3:2c:0e:7a:6c:7b:
                    6d:fb:27:26:20:8f:32:8e:f4:e4:e7:a6:00:8a:c8:
                    e0:69:26:a7:32:77:6c:27:30:4a:d0:74:60:fa:da:
                    b3:ed:27:93:8b:a8:0d:77:42:52:a4:0c:b9:8f:33:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8F:56:C1:20:A0:C5:94:CF:7F:3A:9D:3F:5B:A9:75:BD:F5:C4:95
            X509v3 Authority Key Identifier:
                keyid:B3:EA:FB:B8:7C:FF:EF:94:01:86:75:9F:08:A7:81:5F:1C:67:A7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-r7uHz_75QBhnWfCKeBXxxnpyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/0/B3EAFBB87CFFEF940186759F08A7815F1C67A729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:72:f7:31:f3:39:c8:9b:ea:e8:be:4a:2d:82:0e:cf:2d:0f:
         03:93:84:dd:87:23:0e:91:58:46:c7:32:f4:e3:22:c3:be:93:
         ff:df:e4:ed:9d:75:83:a3:68:c1:9c:21:e2:1e:bf:b0:4a:c2:
         65:0c:d8:94:55:a4:1b:56:16:da:56:14:0c:2b:cb:3e:2d:76:
         13:ef:b0:9d:da:3a:3a:73:c4:27:dd:d9:78:fc:c5:92:6f:19:
         d1:86:ee:02:f9:9a:44:18:2e:a0:eb:36:46:2d:4e:fd:b1:04:
         a6:34:da:1b:38:2b:99:43:86:fb:bc:13:44:03:ec:b1:83:44:
         48:b2:c0:78:34:29:97:5d:2f:02:89:38:58:48:0c:dc:d7:7d:
         3a:25:97:04:f7:28:47:c0:6a:a1:61:4c:82:32:94:80:86:37:
         62:bb:43:2c:33:6f:bd:5c:57:fd:7c:25:6e:ee:83:0b:31:9d:
         2a:00:2c:01:2b:a7:04:12:a4:f0:ac:d6:f8:13:be:06:c4:ad:
         1a:dc:52:f7:b7:0b:eb:3b:b2:4d:29:9a:11:8e:d5:53:1e:a5:
         56:08:73:5b:33:cc:51:46:a3:00:11:02:c5:92:02:28:57:8f:
         87:ba:13:53:b2:3e:eb:fa:70:54:35:03:16:6f:91:fe:d6:77:
         c0:17:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:10 2025 by rpki-client