Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
File:                     677F663CDAA5996868019B05D109BAAD3558BE3A.mft (raw, json)
Hash identifier:          73tXf441J4yYDzwBDkPdZHW7gCELrr1VspFj8bTou1s=
Subject key identifier:   36:DC:9F:DC:49:93:A5:76:21:BC:76:1F:D8:B9:5A:95:1F:29:AF:54
Authority key identifier: 67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A
Certificate issuer:       /CN=677f663cdaa5996868019b05d109baad3558be3a
Certificate serial:       3CFBE5CA0E6370EFCAD1B372EF6926FBB0EFBA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
Manifest number:          01E4
Signing time:             Wed 25 Dec 2024 10:15:13 +0000
Manifest this update:     Wed 25 Dec 2024 10:10:13 +0000
Manifest next update:     Thu 26 Dec 2024 13:55:13 +0000
Files and hashes:         1: 677F663CDAA5996868019B05D109BAAD3558BE3A.crl (hash: rYkRruniM1WrajUZSDeCjrnW/mSiCrGOJjBo3uZIFGI=)
                          2: AS203619.asa (hash: 0los1stHaQLxtd9e99kWuGD8kupwtrYh64BUnzKxQNQ=)
                          3: AS200454.asa (hash: 4QF1h3i4lb03fFR7UUyIH+nFkp3Y4UB6Ej2ouPW2O6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fb:e5:ca:0e:63:70:ef:ca:d1:b3:72:ef:69:26:fb:b0:ef:ba:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677f663cdaa5996868019b05d109baad3558be3a
        Validity
            Not Before: Dec 25 10:10:13 2024 GMT
            Not After : Dec 26 13:55:13 2024 GMT
        Subject: CN=36DC9FDC4993A57621BC761FD8B95A951F29AF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:6c:ac:aa:a3:ef:2a:3c:f8:c8:8b:df:a3:
                    94:f9:15:33:dc:6b:f4:e0:77:7d:a0:98:fc:7e:00:
                    a5:6b:17:57:6d:7d:cf:70:6c:f6:71:77:f1:99:cd:
                    2a:c0:b5:4e:4f:00:ca:64:07:7c:28:1f:36:a2:6f:
                    65:4d:07:dd:07:b5:3f:9d:fc:9f:a1:53:10:25:bf:
                    b4:b6:a7:0d:81:31:7f:02:63:c8:9b:d0:a1:29:65:
                    62:c6:bf:6f:d5:be:df:ff:98:9f:96:41:80:bd:61:
                    78:9f:a7:f1:98:8a:87:a1:af:f5:64:08:f9:d0:de:
                    c3:0b:ba:e7:26:cf:ce:92:ff:67:18:db:b5:6d:33:
                    b1:40:60:6a:c9:6b:74:84:de:96:1f:6f:a1:86:ef:
                    a3:e1:15:5a:ab:d3:71:5f:47:fa:9b:7a:3c:72:3f:
                    2f:c7:d0:f1:71:56:fc:4c:09:92:ac:b3:0f:75:3a:
                    59:dd:a3:4a:3e:05:6e:00:f4:08:a6:46:e8:55:33:
                    75:74:b4:d9:d0:17:f0:d8:4b:ab:fb:29:fa:9e:5c:
                    f6:7b:db:85:2e:9a:2d:05:61:de:42:bb:85:8c:9a:
                    07:87:2a:ca:27:13:de:12:a9:7a:31:36:dd:41:67:
                    fb:f4:7f:e2:ba:ee:d8:d9:21:c8:7b:f1:24:7a:90:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DC:9F:DC:49:93:A5:76:21:BC:76:1F:D8:B9:5A:95:1F:29:AF:54
            X509v3 Authority Key Identifier:
                keyid:67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:1f:55:c0:f0:53:3c:20:96:d3:01:d8:97:44:40:5e:58:
         bb:fc:a7:6f:bb:59:ac:84:5b:c7:eb:97:ee:9d:8e:4c:0c:51:
         42:13:99:b9:da:6f:75:94:0a:3c:15:e3:0d:3e:5e:d3:bb:f4:
         5b:39:50:cc:4c:57:81:d8:d2:fb:6b:8e:33:41:af:8d:ce:0e:
         13:26:b6:33:55:c4:65:bc:65:68:9e:d9:aa:cd:55:9d:b0:2d:
         7e:31:ad:35:d5:d2:aa:eb:12:72:4a:4f:b3:95:fd:13:7c:d0:
         87:60:84:5b:78:e8:70:78:68:c1:02:8f:d8:99:05:8a:e8:9f:
         97:26:1b:44:71:f9:7d:73:9e:8e:76:d1:21:b7:2c:8d:42:8f:
         a3:8f:45:d7:a9:86:a0:d3:83:ab:95:b2:8f:29:87:ab:64:36:
         dd:44:f7:02:76:a6:f7:d1:6f:a1:46:98:0e:fe:10:2e:e6:73:
         96:78:58:4f:94:f4:00:f6:ee:23:e0:57:f2:d7:0c:69:f3:e6:
         c0:c6:4f:48:4b:cd:82:56:09:72:cb:20:42:1e:b8:62:92:1a:
         02:e4:5d:24:72:58:2a:c2:f4:ef:db:23:73:5e:63:59:92:56:
         30:19:5f:fa:94:1e:52:00:34:6f:09:51:48:ca:99:67:df:59:
         3e:04:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----