Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft
File:                     0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft (raw, json)
Hash identifier:          3KfaLZ5X+SykkLy4l76z3bMnGjpcI62TzRuDjyyYZBQ=
Subject key identifier:   42:20:A2:1F:62:0D:2A:A7:0F:80:37:76:72:E0:11:3E:90:AD:39:87
Authority key identifier: 0E:CB:A3:2E:DA:D0:39:B9:46:AD:A5:10:80:D4:78:FB:75:DA:2C:B5
Certificate issuer:       /CN=0ecba32edad039b946ada51080d478fb75da2cb5
Certificate serial:       017959CF80154F5DFB13716C2D70D2300A4E1B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsujLtrQOblGraUQgNR4-3XaLLU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft
Manifest number:          4E
Signing time:             Wed 10 Jan 2024 20:51:58 +0000
Manifest this update:     Wed 10 Jan 2024 20:46:58 +0000
Manifest next update:     Thu 11 Jan 2024 21:21:58 +0000
Files and hashes:         1: 0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.crl (hash: LFav2mfi1f+BLP3mqGQuwfJkOjBmjmLyxZjMXJbSvk0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:79:59:cf:80:15:4f:5d:fb:13:71:6c:2d:70:d2:30:0a:4e:1b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecba32edad039b946ada51080d478fb75da2cb5
        Validity
            Not Before: Jan 10 20:46:58 2024 GMT
            Not After : Jan 11 21:21:58 2024 GMT
        Subject: CN=4220A21F620D2AA70F80377672E0113E90AD3987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:cb:32:53:c3:d3:1a:b3:6b:50:2e:dd:a7:
                    a9:91:75:f1:86:5e:a1:51:58:20:bf:63:9b:10:e9:
                    bd:ce:a2:b0:fb:dd:86:1a:d8:e4:17:69:61:0e:3b:
                    19:13:6f:40:a1:e6:2d:d5:73:35:d1:c8:25:9b:ea:
                    e7:f1:4f:6a:c7:52:ef:1b:d2:f4:0b:4c:79:e8:05:
                    77:1b:01:50:ea:55:46:30:c0:d1:62:5d:ae:60:f9:
                    09:cd:67:10:2c:0f:f7:ee:e6:d9:9a:72:46:ac:21:
                    86:17:ee:cb:27:1c:a6:a7:27:47:4c:c3:1a:88:8b:
                    a4:49:e4:78:e4:d7:83:2d:bf:3f:d8:dd:6b:de:c8:
                    ce:59:69:4d:79:f6:d2:86:67:cb:e2:bc:8f:02:c0:
                    ba:52:4b:74:f6:a1:cd:ae:36:46:12:98:a2:a3:1a:
                    ef:10:a8:f4:d5:48:2a:10:4e:e4:42:82:c8:b1:0b:
                    d9:54:e7:9f:08:03:8b:dc:43:a5:17:d9:f6:49:1e:
                    39:dd:4b:3a:08:fe:68:b1:8d:45:55:8f:5e:96:87:
                    4a:65:f2:95:86:a7:0d:6f:a7:96:2e:18:da:7f:30:
                    9d:da:4c:7a:cf:17:67:d8:ac:0c:0e:83:54:b9:0c:
                    4d:57:02:53:85:1a:43:af:b2:4c:6b:fe:74:83:6b:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:20:A2:1F:62:0D:2A:A7:0F:80:37:76:72:E0:11:3E:90:AD:39:87
            X509v3 Authority Key Identifier:
                keyid:0E:CB:A3:2E:DA:D0:39:B9:46:AD:A5:10:80:D4:78:FB:75:DA:2C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsujLtrQOblGraUQgNR4-3XaLLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:63:3c:b1:a7:bc:38:74:2e:71:7d:09:ff:28:27:dd:2b:
         10:d1:00:48:1d:e7:d2:33:11:b4:48:f2:81:97:fd:a3:84:90:
         41:12:16:2b:8b:fb:d5:28:08:f1:fc:b9:4e:44:f5:8f:f6:df:
         18:11:7a:08:03:71:2c:01:ac:45:fa:f3:fb:8d:c4:a1:19:e8:
         05:32:ba:b9:45:bc:ca:6f:91:10:29:7e:4e:e5:7d:dd:ca:91:
         82:fc:fc:b5:0b:6d:a0:68:19:2c:5f:d3:36:4b:62:ba:36:cf:
         67:a0:8f:0e:28:ab:21:48:d9:97:02:d9:55:c8:50:d6:b0:88:
         51:88:c5:13:f2:40:a7:d7:1b:49:4d:c9:4e:3a:b7:58:ec:ac:
         82:ea:0a:59:02:aa:a9:d6:e6:18:2d:75:e6:ad:ff:19:af:ad:
         4f:e7:a1:b0:63:39:44:c0:ec:a7:30:c4:36:9e:5a:7f:13:9a:
         0f:4b:d2:df:4e:0b:ec:d7:b2:bb:d9:71:60:d7:c7:97:45:4f:
         9e:37:ff:4f:6c:46:98:d0:ed:82:c3:65:fb:02:ee:73:c3:bf:
         b6:03:8e:8d:0e:01:53:26:a9:ad:2e:2a:82:21:7d:ca:ca:e1:
         9e:63:ef:b3:97:87:e3:79:57:24:61:14:6c:c3:c6:06:31:3e:
         5c:df:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:49 2025 by rpki-client