Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
File:                     32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft (raw, json)
Hash identifier:          pjPFRgqSyFh0zwZBR2dnbjeku3GE/Tmr1k+ZNcWaadI=
Subject key identifier:   EA:9C:50:68:30:FE:26:53:64:22:7E:31:FB:0B:4C:E1:1B:0E:EC:E5
Authority key identifier: 32:F7:DA:9A:5D:29:D2:B5:1E:F3:E5:BA:CE:EC:E1:59:65:A5:43:FD
Certificate issuer:       /CN=32f7da9a5d29d2b51ef3e5baceece15965a543fd
Certificate serial:       166EAF8B2C6F7678D29E8D844BD4C2F61235055F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
Manifest number:          14
Signing time:             Thu 27 Jun 2024 13:46:51 +0000
Manifest this update:     Thu 27 Jun 2024 13:41:51 +0000
Manifest next update:     Fri 28 Jun 2024 17:03:51 +0000
Files and hashes:         1: 32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.crl (hash: QZYPUz4VQ4bto5Q3Pdwt2R8Zq9CBY0Ad9fFAoQabJlM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6e:af:8b:2c:6f:76:78:d2:9e:8d:84:4b:d4:c2:f6:12:35:05:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f7da9a5d29d2b51ef3e5baceece15965a543fd
        Validity
            Not Before: Jun 27 13:41:51 2024 GMT
            Not After : Jun 28 17:03:51 2024 GMT
        Subject: CN=EA9C506830FE265364227E31FB0B4CE11B0EECE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:18:48:fe:24:2d:72:14:cb:72:1b:26:40:
                    54:a2:9c:90:42:15:f0:56:8e:42:da:12:b9:fc:1e:
                    57:eb:4b:97:e0:f9:18:c7:8c:54:83:99:f8:ff:ee:
                    17:e6:ab:d4:bc:68:a5:fc:44:50:ef:60:d2:87:f2:
                    f9:ee:83:62:08:46:1c:fd:9c:9e:ae:9b:ec:ba:65:
                    a4:be:47:cc:a8:d9:d6:33:29:bc:30:95:da:c8:fd:
                    14:ef:45:79:49:df:df:c8:85:79:7e:f4:1b:d8:6f:
                    1e:7c:30:4a:e0:e9:0e:ee:19:c1:0d:8c:54:4c:55:
                    14:7d:97:52:7c:6d:17:be:d9:cd:d5:62:11:eb:b1:
                    05:2d:40:9a:80:29:6a:b9:c3:ec:fc:c7:7f:61:eb:
                    56:b4:b6:34:b8:f7:fe:b9:33:d3:b2:ee:a3:8e:66:
                    15:89:f9:3b:91:fe:7e:ea:b2:20:0f:bd:0a:74:1a:
                    29:d5:9c:77:39:61:af:3d:c3:dc:fe:e6:7f:b5:f3:
                    3a:7d:51:0b:75:a5:3a:7d:34:ea:56:7c:a8:67:0c:
                    0e:3b:08:0c:06:b2:87:4e:17:91:2b:60:9c:47:1c:
                    07:dd:3d:ea:76:58:8c:d4:39:36:b2:40:e8:e2:8e:
                    97:03:19:f5:59:fb:2f:5c:4d:f2:d1:7d:6b:e2:90:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:50:68:30:FE:26:53:64:22:7E:31:FB:0B:4C:E1:1B:0E:EC:E5
            X509v3 Authority Key Identifier:
                keyid:32:F7:DA:9A:5D:29:D2:B5:1E:F3:E5:BA:CE:EC:E1:59:65:A5:43:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:be:8e:50:6e:31:8a:1d:c8:aa:5e:96:95:ae:67:79:18:2c:
         e3:fc:7e:8b:00:72:6f:4c:bc:2b:a6:25:51:ea:58:13:7d:33:
         87:ce:dc:84:da:9f:a4:50:ea:60:6d:90:b0:ec:45:6c:d6:e0:
         80:8d:f9:85:c9:8c:8b:90:e8:45:46:0d:a9:d3:e4:5f:8b:0a:
         83:d2:0e:74:7d:15:ad:97:42:5a:54:ce:f4:e9:1c:12:4d:ce:
         8e:31:5a:92:e9:8f:36:95:65:39:1c:0f:e0:56:ad:35:b4:35:
         9e:89:3e:bc:22:99:fa:51:b2:6d:04:3d:0f:80:88:1f:59:a7:
         b4:a5:a1:a1:9c:9a:87:a4:7d:a9:5d:40:1e:3d:b6:66:d4:a6:
         14:e6:7d:89:08:fd:b6:21:b9:47:71:e7:ee:21:c1:8b:89:dc:
         98:c9:c0:2b:71:96:40:c8:ad:b3:6a:7b:d7:f1:db:60:9a:b6:
         aa:8a:f9:14:e5:1f:a9:86:87:95:6c:2c:ff:86:4b:1b:31:16:
         99:59:7a:4e:93:15:ec:7f:60:9c:59:85:0d:fc:eb:2c:86:ad:
         e6:39:cd:9e:1d:ae:f3:79:17:97:44:aa:18:a5:dd:86:ba:58:
         9b:bb:51:c7:60:8a:94:be:40:cf:f5:60:dd:78:67:98:63:54:
         90:66:3d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:23 2025 by rpki-client