Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft
File:                     3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft (raw, json)
Hash identifier:          c/eJdWU8z3lczrA7s2Rzu8F0h8Y6GBcj+ODuL7iwZzM=
Subject key identifier:   D9:F6:8C:0B:FC:51:D5:7E:E4:20:D6:BD:BD:E3:C3:F8:D2:2A:15:6B
Authority key identifier: 34:89:62:54:18:BF:8A:48:EF:4E:82:DF:DA:81:E7:E4:27:C6:B9:75
Certificate issuer:       /CN=3489625418bf8a48ef4e82dfda81e7e427c6b975
Certificate serial:       0A35AED28FBE38D47A144B45B86CA701A072CE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIliVBi_ikjvToLf2oHn5CfGuXU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft
Manifest number:          02
Signing time:             Thu 18 May 2023 15:25:22 +0000
Manifest this update:     Thu 18 May 2023 15:20:22 +0000
Manifest next update:     Fri 19 May 2023 17:22:22 +0000
Files and hashes:         1: 3489625418BF8A48EF4E82DFDA81E7E427C6B975.crl (hash: reRSW3zdyqhz8QLv33VnyIcFdxzw/SkZLkSXl+4eIhQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:ae:d2:8f:be:38:d4:7a:14:4b:45:b8:6c:a7:01:a0:72:ce:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3489625418bf8a48ef4e82dfda81e7e427c6b975
        Validity
            Not Before: May 18 15:20:22 2023 GMT
            Not After : May 19 17:22:22 2023 GMT
        Subject: CN=D9F68C0BFC51D57EE420D6BDBDE3C3F8D22A156B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:fa:5f:da:a3:ef:9e:4d:28:93:bc:f1:e9:
                    61:fb:3a:95:8b:ba:b2:3d:93:98:5e:65:9c:88:e9:
                    91:2c:73:ab:4a:d5:32:61:75:59:62:d5:05:9b:aa:
                    f4:20:05:27:45:66:5a:3e:c4:84:82:46:7c:b6:97:
                    0b:56:0b:29:80:5d:bc:cc:9c:b4:26:ab:13:54:58:
                    01:71:50:b6:f2:54:38:a8:e7:05:70:fd:b2:7a:45:
                    59:4e:12:19:16:fe:18:03:6f:57:4c:e5:0c:87:b1:
                    a0:01:13:2d:47:89:23:f8:e9:e1:12:66:31:d0:c9:
                    20:24:2c:d8:4e:1a:41:27:a2:a3:67:a7:11:3d:ed:
                    15:71:f5:fd:b6:c0:bd:38:f6:51:bf:43:d5:d5:a5:
                    82:bd:1b:d5:0f:24:8f:9d:92:9c:40:eb:37:2a:a3:
                    9c:49:66:be:d1:5f:87:8b:db:b9:04:a5:37:2c:a4:
                    39:f6:73:77:d7:c7:7f:99:6a:ce:64:95:02:51:db:
                    9d:57:92:25:e3:63:70:94:65:e6:7b:a4:19:8d:ed:
                    5b:22:f0:72:3d:f8:a5:87:50:03:54:a6:4a:10:57:
                    52:f0:72:26:84:b0:e8:f3:a3:d9:f9:0e:78:01:41:
                    06:f2:63:eb:27:d0:5f:e3:37:5d:31:9e:3c:92:1b:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F6:8C:0B:FC:51:D5:7E:E4:20:D6:BD:BD:E3:C3:F8:D2:2A:15:6B
            X509v3 Authority Key Identifier:
                keyid:34:89:62:54:18:BF:8A:48:EF:4E:82:DF:DA:81:E7:E4:27:C6:B9:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIliVBi_ikjvToLf2oHn5CfGuXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:8a:86:09:a9:f4:b0:2b:24:ee:22:bb:d4:d0:03:2c:67:
         b4:2e:08:58:cd:ea:27:cb:0e:d3:8c:0f:5a:e1:5e:4d:b2:32:
         70:fd:56:c6:0d:5f:66:b4:e9:a9:4f:f8:b5:93:1c:b6:e9:91:
         8d:e6:ae:12:fb:8d:0d:09:3f:74:35:b4:f1:ae:cf:40:ec:0d:
         0a:ed:b3:28:ef:22:2d:49:db:8d:6a:5b:0f:c2:b5:5b:36:d2:
         b2:c1:4a:0a:53:99:65:2a:b3:c3:02:e2:2c:b8:82:6e:01:1b:
         86:4f:ac:9b:5e:34:3d:92:7a:dc:5a:a4:1e:6a:c1:8d:db:fe:
         c1:77:50:7e:45:90:84:84:bc:56:77:84:52:c4:1d:a9:0f:e2:
         45:d8:22:6e:b9:2b:94:b0:7e:cd:cc:f3:5e:a3:0b:66:95:2e:
         52:f2:f7:df:5e:86:43:cb:65:65:ea:dc:9e:3f:dc:db:d7:4a:
         d9:d1:44:b3:7e:09:0e:4c:f8:e7:c1:08:da:bd:e8:b1:fb:07:
         4b:b5:56:7f:43:5e:99:26:d4:a6:11:88:fb:89:12:5e:4b:ff:
         60:aa:e0:26:3c:b9:c8:a7:dc:a2:01:d7:e3:8a:f6:80:0c:c7:
         cb:00:d6:6e:30:0c:75:cb:4e:cb:86:a8:57:dd:00:32:5c:48:
         5d:9a:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:06 2025 by rpki-client