Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft
File:                     E472D821C14C9E0738F632D7A74DF516C446A5E2.mft (raw, json)
Hash identifier:          W5+GkfUcPtLIkB9Cyx5A/1j/EZN8xEo8MP9JqnpX6Os=
Subject key identifier:   4B:DB:36:A2:7B:88:39:BC:BF:43:8C:33:EE:D0:E1:17:33:48:0E:14
Authority key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
Certificate issuer:       /CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Certificate serial:       3C53DB5348AF31A41ED1178E0CD1D5B469F82035
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft
Manifest number:          75
Signing time:             Tue 24 Dec 2024 20:52:08 +0000
Manifest this update:     Tue 24 Dec 2024 20:47:08 +0000
Manifest next update:     Wed 25 Dec 2024 23:07:08 +0000
Files and hashes:         1: 326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa (hash: 5AyW46QS+NNXmeLlk9GX6u+j5sEm8yE34btc4wy6pFU=)
                          2: 326130363a313238313a373030303a3a2f33362d3336203d3e20323135313434.roa (hash: JuSo1DBt1ysBmjCBYR9rL5TjGzKPRzLHlO0o/qG6xX8=)
                          3: E472D821C14C9E0738F632D7A74DF516C446A5E2.crl (hash: 0ThnjRX7W7kA8yJZeuXa7bEIkol8oCSSYJWEezYbfEk=)
                          4: 326130363a313238313a373034303a3a2f34342d3434203d3e20323136303735.roa (hash: pkHxrCPhxTzTO41txcSg6Ay5+GVAHCLr1XEt+KvKUy0=)
                          5: 326130363a313238313a373032303a3a2f34382d3438203d3e20323135313434.roa (hash: +0kHQpuTESgdMHr9bDetPXMshIIHCo38CJppRhqymzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:53:db:53:48:af:31:a4:1e:d1:17:8e:0c:d1:d5:b4:69:f8:20:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
        Validity
            Not Before: Dec 24 20:47:08 2024 GMT
            Not After : Dec 25 23:07:08 2024 GMT
        Subject: CN=4BDB36A27B8839BCBF438C33EED0E11733480E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:ad:13:1c:38:48:a2:e4:f1:ae:41:31:99:
                    12:5a:fd:fc:f8:cb:40:89:c6:2d:42:cb:b7:f8:63:
                    2e:ee:0d:44:43:1a:06:07:84:55:14:18:2f:25:65:
                    90:55:bf:aa:29:ca:d3:a7:c8:e3:cd:5d:f3:29:e2:
                    9d:c7:83:a0:4c:e7:6c:ea:bc:0a:ff:79:c9:38:5a:
                    08:a3:f8:1a:dc:67:e9:85:c2:d1:da:94:31:d9:08:
                    60:67:c8:6f:74:75:02:a9:28:a6:f0:c3:00:73:60:
                    35:4c:62:c3:3b:8d:39:cc:eb:18:ab:22:a0:3a:6f:
                    2a:ba:c0:19:01:25:65:f7:6d:8f:dd:de:eb:89:a9:
                    3f:e0:ab:d6:8a:04:c9:92:bf:88:30:ee:18:b2:12:
                    cc:53:a2:40:2b:9d:79:17:e3:35:14:89:fd:cf:5b:
                    d7:c3:2a:cb:c6:da:da:eb:2e:b3:49:33:79:ce:c6:
                    8f:33:56:df:de:3c:f0:91:3a:5b:94:d5:be:9f:bd:
                    ec:52:ad:fb:ca:7c:a6:01:07:2a:30:6d:1d:b4:e9:
                    a0:58:db:b6:87:86:fc:0c:c9:e6:75:0d:03:1d:57:
                    b1:e7:e1:89:cc:df:6b:01:9f:52:96:b7:2e:46:99:
                    03:d5:c5:c1:63:bb:29:1b:9b:74:32:46:60:34:7d:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:36:A2:7B:88:39:BC:BF:43:8C:33:EE:D0:E1:17:33:48:0E:14
            X509v3 Authority Key Identifier:
                keyid:E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a1:35:01:73:95:65:51:5a:7f:b7:e0:fa:f2:df:30:51:56:
         06:30:90:55:dc:c2:f7:a7:5b:7e:86:62:32:19:1a:36:74:d9:
         d0:a6:b3:05:30:bb:df:2c:fa:ae:09:81:ec:b4:eb:85:f0:ad:
         69:9a:a4:03:01:88:58:47:00:4f:04:95:5b:b1:ab:df:93:61:
         56:64:56:40:fb:ad:fc:d4:12:9c:31:71:65:af:41:1c:18:b3:
         e6:78:07:d5:e4:02:a9:ca:cb:76:71:24:f7:25:c3:fc:8d:c5:
         ff:91:ad:e7:f4:a5:d9:05:20:51:5c:92:d0:0a:5e:ec:cb:2f:
         ca:77:55:e7:8d:56:18:bc:ad:42:fe:57:28:5c:7f:6e:f5:8a:
         d6:72:8b:df:ca:14:09:fd:c9:70:53:2e:50:0e:27:69:70:95:
         ff:8e:e8:11:cf:1c:23:d4:07:2d:d1:f6:32:46:c0:c9:99:62:
         4e:2c:ca:76:d0:a4:55:36:c3:2a:24:83:8b:27:d8:0f:ab:e5:
         e5:ad:37:91:b8:02:84:9a:55:72:a3:9f:b7:6e:7b:d9:91:1f:
         85:c4:0e:36:32:f1:23:c3:a2:5c:4e:17:16:67:7e:9b:71:a3:
         1a:ba:5c:d2:41:b6:20:8b:e4:6c:bd:96:50:6d:2f:05:98:b6:
         a2:13:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:54 2024 by rpki-client on console.sobornost.net