Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
File:                     C3A70AD7F32685733597C663E02CE28A3306F923.mft (raw, json)
Hash identifier:          z9zJewvOudbBq5xkLFXaQeMDGjdOdmbkDfiB60jIYEs=
Subject key identifier:   F9:17:6A:78:D2:FA:3A:20:EC:35:E4:DB:43:73:00:75:D6:AE:9E:72
Authority key identifier: C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
Certificate issuer:       /CN=c3a70ad7f32685733597c663e02ce28a3306f923
Certificate serial:       7E8B46460A5D3333C01191869E55741CDBE9D790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
Manifest number:          39
Signing time:             Sat 29 Mar 2025 10:55:05 +0000
Manifest this update:     Sat 29 Mar 2025 10:50:05 +0000
Manifest next update:     Sun 30 Mar 2025 14:02:05 +0000
Files and hashes:         1: C3A70AD7F32685733597C663E02CE28A3306F923.crl (hash: GEdwxO3+oo549CfYEvxbOBKT3L8FfVtwhkTinrzuZhY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8b:46:46:0a:5d:33:33:c0:11:91:86:9e:55:74:1c:db:e9:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a70ad7f32685733597c663e02ce28a3306f923
        Validity
            Not Before: Mar 29 10:50:05 2025 GMT
            Not After : Mar 30 14:02:05 2025 GMT
        Subject: CN=F9176A78D2FA3A20EC35E4DB43730075D6AE9E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:c5:c4:e0:c0:87:9a:85:5b:93:3a:77:39:
                    9a:3b:f5:23:3c:f9:b5:13:da:fb:9d:13:d1:e2:70:
                    60:84:47:7c:76:00:58:e5:71:a7:a1:96:07:61:29:
                    2f:fa:1f:a1:87:a1:a0:cd:e4:4d:24:36:16:bb:2e:
                    f3:40:43:50:00:52:4e:d8:26:c1:21:eb:6d:a1:b8:
                    d4:bc:8c:74:41:3c:0a:40:d8:88:b8:e1:a9:e4:5d:
                    8f:07:68:9d:51:00:47:7c:1f:fe:51:d2:4d:85:11:
                    54:3e:b0:7c:5b:43:cf:19:34:8a:49:97:98:34:02:
                    20:07:b2:c8:a3:cb:bb:83:cc:84:58:11:f5:22:65:
                    6b:48:83:92:74:70:71:f7:75:19:0c:d5:66:66:7f:
                    1e:0b:b0:c5:88:26:cd:47:87:c8:fd:2e:74:5a:e7:
                    12:5b:74:e2:a5:a8:2e:a0:46:1d:ad:14:0d:b5:0f:
                    d6:38:29:2b:56:a6:87:6f:c7:e5:97:8f:61:11:17:
                    c5:fb:75:d9:ee:06:5d:dd:02:d6:20:4d:cb:f8:e4:
                    47:22:e9:ba:6c:64:85:52:96:3f:cd:06:a4:37:ce:
                    6f:ba:c7:52:8e:b8:07:ad:19:3d:8e:26:b3:a4:c9:
                    80:93:f2:d5:01:51:c5:2e:71:df:a6:33:43:d3:95:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:6A:78:D2:FA:3A:20:EC:35:E4:DB:43:73:00:75:D6:AE:9E:72
            X509v3 Authority Key Identifier:
                keyid:C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:c3:93:60:f8:ef:dd:fc:90:95:87:14:28:d6:40:af:1e:
         ff:ec:9e:70:f6:ed:6f:b8:f2:f7:5b:9f:78:ef:cb:d2:fd:47:
         2d:dd:a8:25:f8:83:8b:82:b7:74:75:3d:22:85:b4:4d:8b:74:
         6f:ef:9e:d8:65:c6:0f:54:2d:a2:d7:78:a3:29:69:41:ec:0b:
         40:03:ab:83:bb:90:e1:ef:68:1b:38:08:f0:28:9f:77:d5:71:
         a1:e4:c4:67:8c:1f:d4:b1:56:0c:37:63:94:c1:f2:8f:9a:9b:
         da:bd:c3:df:d2:c8:c7:26:04:3c:b3:14:4a:0a:97:bd:51:c2:
         c6:a0:5f:81:8d:41:09:ba:3e:cd:2c:e2:78:af:04:65:4a:d4:
         49:d7:40:1a:ed:e7:9e:21:cb:da:4a:ab:5b:17:c4:38:51:8e:
         dc:25:ce:67:9b:b1:fa:28:a7:75:32:6e:07:57:b3:00:a0:1d:
         32:55:c3:d7:bf:fc:db:3b:e0:4a:6d:68:3d:81:43:b3:5e:6c:
         43:6d:4a:be:90:75:4d:38:e8:14:d2:66:1b:28:5b:9b:0e:19:
         a9:5e:10:be:99:58:2d:0e:6e:e0:ef:27:06:09:ab:b8:82:37:
         40:05:d5:64:f0:8c:1a:e4:8a:24:68:2b:8a:b6:04:3f:da:ae:
         a4:f4:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:33 2025 by rpki-client