Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft
File:                     D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft (raw, json)
Hash identifier:          8bdgTf/mNzsSsOVXOOtXMg5RaMV+3NRrLCq8wLwXBm8=
Subject key identifier:   46:E9:39:D9:B6:8F:28:34:39:FF:72:12:7F:EA:48:34:F2:99:F5:D6
Authority key identifier: D3:A3:D8:EF:7F:C4:8B:73:BF:AD:33:2A:34:76:A7:01:0F:22:0B:EF
Certificate issuer:       /CN=D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF
Certificate serial:       186071A30D1AA0CA124E4824D2DB6C3C6814E777
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft
Manifest number:          08
Signing time:             Wed 25 Dec 2024 01:06:00 +0000
Manifest this update:     Wed 25 Dec 2024 01:01:00 +0000
Manifest next update:     Thu 26 Dec 2024 03:28:00 +0000
Files and hashes:         1: D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.crl (hash: CxnCBfMmmKwYDx3HS+S1+6UKF3Rs7F+L+DU7Tx3fV7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:60:71:a3:0d:1a:a0:ca:12:4e:48:24:d2:db:6c:3c:68:14:e7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF
        Validity
            Not Before: Dec 25 01:01:00 2024 GMT
            Not After : Dec 26 03:28:00 2024 GMT
        Subject: CN=46E939D9B68F283439FF72127FEA4834F299F5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b8:c8:61:ab:2c:ef:49:87:1d:a3:32:7c:6f:
                    73:3e:7a:20:3c:c8:2e:9c:dd:60:df:88:41:0b:66:
                    e1:5d:f0:6f:d6:36:06:27:ef:c6:a6:2b:6a:e1:d0:
                    1e:ea:14:39:62:0d:88:83:c6:2e:4e:78:48:fc:04:
                    a0:70:93:e0:cc:97:b9:59:48:e5:c7:4e:ee:43:82:
                    ce:22:b1:2c:2c:2f:9b:52:cc:ea:b7:df:3f:d2:6c:
                    ed:c7:72:6d:2c:25:bd:92:bf:f9:ac:0f:af:0d:05:
                    3f:6f:f5:b2:ae:1e:2a:47:f4:3b:aa:fb:5b:47:a5:
                    58:7f:6e:5c:3c:e2:37:14:97:de:6d:b7:d7:0b:f2:
                    e4:10:46:5c:5a:e4:87:6b:ba:4f:ce:50:d4:ce:f6:
                    73:aa:99:b8:77:31:05:f9:7a:1a:ea:90:5d:af:5c:
                    8a:5d:2d:94:9a:f7:41:18:b1:e8:67:6b:74:d6:b9:
                    61:bf:e7:22:90:8e:d9:86:84:c4:c8:8a:a4:f0:95:
                    84:2a:d8:ca:25:06:82:e3:5d:b7:49:30:05:a5:f6:
                    ef:a9:c8:6b:19:ca:8c:b5:a3:d7:72:a0:93:c9:02:
                    51:f2:9b:f7:f1:eb:b0:7a:ec:b5:70:c3:9f:c0:e3:
                    55:6c:e7:d0:9c:c9:fe:3e:7e:3c:60:75:b7:f2:69:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E9:39:D9:B6:8F:28:34:39:FF:72:12:7F:EA:48:34:F2:99:F5:D6
            X509v3 Authority Key Identifier:
                keyid:D3:A3:D8:EF:7F:C4:8B:73:BF:AD:33:2A:34:76:A7:01:0F:22:0B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:05:f4:f2:43:d7:46:17:12:67:a4:2a:ad:73:82:41:38:
         eb:96:5e:46:f2:57:44:00:5c:5a:c9:68:97:75:df:cd:8a:45:
         d3:b1:98:ac:97:d2:3d:35:a3:ad:67:59:40:24:a4:df:cc:e6:
         81:25:19:32:dc:3a:6c:1d:a8:d0:b7:6a:b7:58:c0:cd:e3:6d:
         53:f7:c4:c9:a9:d2:8b:bd:fb:72:1b:60:33:84:d0:b9:b8:1b:
         d5:be:81:3e:20:09:07:20:74:d4:c9:b3:da:fc:b4:d1:dc:1b:
         0e:d2:54:f3:c6:e3:6f:bd:94:8a:02:66:23:61:ac:28:23:34:
         66:69:f0:a8:a0:38:dd:03:d4:40:77:3e:d7:30:eb:f9:03:b5:
         7d:a3:34:67:14:25:35:be:b4:2e:08:5a:e0:a4:59:2d:fc:9a:
         06:ce:ca:2f:c2:00:b9:2f:71:b4:6f:17:df:79:9d:3a:02:10:
         43:d2:d8:a1:3f:78:9c:ae:b8:a4:39:30:d9:95:53:e6:57:25:
         44:23:90:91:1f:91:82:03:64:c4:f4:66:ee:11:2a:a6:33:13:
         72:0a:2f:a5:58:43:0c:b9:76:92:b4:a7:76:35:92:1d:c7:93:
         1f:97:8a:d0:df:f8:3c:ef:7d:63:38:8f:b3:e9:0a:7b:6f:bb:
         71:ad:7e:d5
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUGGBxow0aoMoSTkgk0ttsPGgU53cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNBM0Q4RUY3RkM0OEI3M0JGQUQzMzJBMzQ3NkE3MDEw
RjIyMEJFRjAeFw0yNDEyMjUwMTAxMDBaFw0yNDEyMjYwMzI4MDBaMDMxMTAvBgNV
BAMTKDQ2RTkzOUQ5QjY4RjI4MzQzOUZGNzIxMjdGRUE0ODM0RjI5OUY1RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsuMhhqyzvSYcdozJ8b3M+eiA8
yC6c3WDfiEELZuFd8G/WNgYn78amK2rh0B7qFDliDYiDxi5OeEj8BKBwk+DMl7lZ
SOXHTu5Dgs4isSwsL5tSzOq33z/SbO3Hcm0sJb2Sv/msD68NBT9v9bKuHipH9Duq
+1tHpVh/blw84jcUl95tt9cL8uQQRlxa5Idruk/OUNTO9nOqmbh3MQX5ehrqkF2v
XIpdLZSa90EYsehna3TWuWG/5yKQjtmGhMTIiqTwlYQq2MolBoLjXbdJMAWl9u+p
yGsZyoy1o9dyoJPJAlHym/fx67B67LVww5/A41Vs59Ccyf4+fjxgdbfyaUWFAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQURuk52baPKDQ5/3ISf+pINPKZ9dYwHwYDVR0j
BBgwFoAU06PY73/Ei3O/rTMqNHanAQ8iC+8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDJjNzJiN2MtZjU1YS00OTkwLWFjOGEtNjMzZWUxZjhl
OGUxLzEvRDNBM0Q4RUY3RkM0OEI3M0JGQUQzMzJBMzQ3NkE3MDEwRjIyMEJFRi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh
NmItOTQzNC1jYzgwZGNhMDkzZTYvMi9EM0EzRDhFRjdGQzQ4QjczQkZBRDMzMkEz
NDc2QTcwMTBGMjIwQkVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzAyYzcyYjdjLWY1NWEtNDk5MC1hYzhhLTYzM2VlMWY4ZThlMS8xL0QzQTNEOEVG
N0ZDNDhCNzNCRkFEMzMyQTM0NzZBNzAxMEYyMjBCRUYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAucQX0
8kPXRhcSZ6QqrXOCQTjrll5G8ldEAFxayWiXdd/NikXTsZisl9I9NaOtZ1lAJKTf
zOaBJRky3DpsHajQt2q3WMDN421T98TJqdKLvftyG2AzhNC5uBvVvoE+IAkHIHTU
ybPa/LTR3BsO0lTzxuNvvZSKAmYjYawoIzRmafCooDjdA9RAdz7XMOv5A7V9ozRn
FCU1vrQuCFrgpFkt/JoGzsovwgC5L3G0bxffeZ06AhBD0tihP3icrrikOTDZlVPm
VyVEI5CRH5GCA2TE9GbuESqmMxNyCi+lWEMMuXaStKd2NZIdx5Mfl4rQ3/g8731j
OI+z6Qp7b7txrX7V
-----END CERTIFICATE-----