Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.mft
File:                     F42DD866D1ED93308763875100791B0AA79AA33E.mft (raw, json)
Hash identifier:          FlJFmi+8nyfdE5t752vM8bNH6q+hPoACC+GnyD1g9LU=
Subject key identifier:   B1:56:7B:60:8E:25:F0:D1:B9:B8:1C:38:8A:92:47:67:E3:6E:24:18
Authority key identifier: F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
Certificate issuer:       /CN=F42DD866D1ED93308763875100791B0AA79AA33E
Certificate serial:       06A598073780A6611C92D0ECE236B96485E89614
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.mft
Manifest number:          0102
Signing time:             Mon 20 May 2024 14:07:19 +0000
Manifest this update:     Mon 20 May 2024 14:02:19 +0000
Manifest next update:     Tue 21 May 2024 17:29:19 +0000
Files and hashes:         1: 326131333a646638303a653830303a3a2f33382d3438203d3e203434383137.roa (hash: r/mcsZ3jdsVZ5KPbL9JM/gxyHJn4wp8oL6I15wfP2DI=)
                          2: 326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa (hash: jmee1L2B6qiznR6ZGyRV6ISDmbRcr84qU/Tq21F7ZWw=)
                          3: 326131333a646638303a653865383a3a2f34382d3438203d3e20323033363836.roa (hash: 9MbkFxL85A+qLJWCgT5i2eEn75ijQPE/pyj+azPHepI=)
                          4: F42DD866D1ED93308763875100791B0AA79AA33E.crl (hash: oUgjXBsOS+wQM+OZkPcqvlkN6SG2viK+6myXU8ZgcgE=)
                          5: 326131333a646638303a383838303a3a2f34342d3438203d3e203434383137.roa (hash: qkKH5x7kqQlXUoseDkPn3oqNQbH4cchMIaJfFiUNnhc=)
                          6: 326131333a646638303a653830303a3a2f33382d3438203d3e20323136333735.roa (hash: cem4sK5wV149eFd99Ssyvp4ZP2kjEMWgJzv3FKLLO24=)
                          7: 326131333a646638303a383838303a3a2f34342d3438203d3e20323136333735.roa (hash: Z362I0awB5Q2io4M3hSMElyiPFUnx6CA9U6eXmynUwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a5:98:07:37:80:a6:61:1c:92:d0:ec:e2:36:b9:64:85:e8:96:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42DD866D1ED93308763875100791B0AA79AA33E
        Validity
            Not Before: May 20 14:02:19 2024 GMT
            Not After : May 21 17:29:19 2024 GMT
        Subject: CN=B1567B608E25F0D1B9B81C388A924767E36E2418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:67:91:8f:f9:62:be:04:8e:81:47:83:5f:
                    48:54:f6:86:d6:99:3f:98:9d:99:10:94:89:03:f4:
                    9c:ba:a9:8f:39:42:00:55:63:14:ba:21:7a:1c:79:
                    91:dd:4a:c7:42:ad:53:17:5d:26:f3:85:31:72:c9:
                    f3:9d:05:fa:f7:46:9d:c5:e5:6e:a6:dd:36:8a:46:
                    5f:4f:1c:a9:27:ea:e7:fc:7e:4a:25:1b:d0:fa:22:
                    12:ed:63:ba:33:0c:a9:3a:5d:38:c0:9e:98:10:b9:
                    4a:a0:ff:e1:40:59:98:85:0a:73:35:0b:90:2d:6e:
                    6b:63:55:0a:b6:1d:d7:19:0e:a5:3c:5e:82:cf:5f:
                    32:fb:17:78:6c:0e:c4:09:80:3c:be:b5:bc:3e:c8:
                    ce:8a:72:25:23:69:54:00:d8:36:58:5a:d7:34:09:
                    ce:0b:e2:4b:2f:f1:c4:2a:19:19:35:08:a2:30:34:
                    8b:5e:d0:a9:71:92:0f:5a:61:aa:41:7d:da:13:f9:
                    c8:b8:e5:6f:64:c5:c4:39:aa:00:6a:f5:3b:5b:68:
                    e3:43:dc:f2:2d:a1:77:98:72:09:77:8a:a8:ea:a6:
                    8c:dc:9d:86:36:9a:b4:b2:0e:e5:e1:13:55:7a:00:
                    6b:db:1f:71:56:0e:40:bf:ea:4c:cd:d6:39:47:46:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:56:7B:60:8E:25:F0:D1:B9:B8:1C:38:8A:92:47:67:E3:6E:24:18
            X509v3 Authority Key Identifier:
                keyid:F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:73:3a:da:06:0c:95:b0:1f:a0:e5:0f:16:ce:85:43:87:f0:
         9a:e3:80:e4:2a:31:6a:0e:4f:39:61:35:38:81:09:80:8e:e4:
         18:64:25:4e:f8:d9:9b:f6:c8:f4:5f:75:d9:d8:45:45:3f:d7:
         8a:89:08:af:ab:98:83:59:81:14:42:df:5b:15:30:9d:56:19:
         5c:e1:8b:42:b3:24:be:4a:cc:f9:48:56:ef:d5:57:db:eb:a4:
         3e:71:15:b9:ff:73:5c:8d:cf:d6:15:05:aa:91:1c:85:35:78:
         b2:20:40:38:4c:73:db:10:15:02:6b:c4:e0:a2:3c:fd:25:bc:
         da:45:aa:a8:98:b3:c4:0e:72:5f:36:00:f7:d3:7e:2b:ed:ba:
         6a:5c:fc:9d:af:16:4a:6b:6a:f6:4e:ac:92:66:62:59:4a:74:
         51:15:0d:ea:6f:4f:e0:c6:4c:0c:5d:07:f3:2b:e3:1b:d7:0a:
         92:07:c3:77:27:48:09:19:21:10:ea:1f:aa:a9:1f:88:d1:bf:
         2f:a6:6f:3d:80:7f:6a:3f:aa:45:55:fc:57:d1:3c:07:85:cc:
         89:55:4c:32:4a:8c:f3:04:64:56:c3:a9:51:1e:7e:37:7c:ed:
         4a:15:9e:62:2f:35:61:02:e2:e6:37:8a:13:ac:a1:90:78:d1:
         a9:b8:0d:66
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUBqWYBzeApmEcktDs4ja5ZIXolhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyREQ4NjZEMUVEOTMzMDg3NjM4NzUxMDA3OTFCMEFB
NzlBQTMzRTAeFw0yNDA1MjAxNDAyMTlaFw0yNDA1MjExNzI5MTlaMDMxMTAvBgNV
BAMTKEIxNTY3QjYwOEUyNUYwRDFCOUI4MUMzODhBOTI0NzY3RTM2RTI0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMGeRj/livgSOgUeDX0hU9obW
mT+YnZkQlIkD9Jy6qY85QgBVYxS6IXoceZHdSsdCrVMXXSbzhTFyyfOdBfr3Rp3F
5W6m3TaKRl9PHKkn6uf8fkolG9D6IhLtY7ozDKk6XTjAnpgQuUqg/+FAWZiFCnM1
C5AtbmtjVQq2HdcZDqU8XoLPXzL7F3hsDsQJgDy+tbw+yM6KciUjaVQA2DZYWtc0
Cc4L4ksv8cQqGRk1CKIwNIte0Klxkg9aYapBfdoT+ci45W9kxcQ5qgBq9TtbaOND
3PItoXeYcgl3iqjqpozcnYY2mrSyDuXhE1V6AGvbH3FWDkC/6kzN1jlHRpiNAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUsVZ7YI4l8NG5uBw4ipJHZ+NuJBgwHwYDVR0j
BBgwFoAU9C3YZtHtkzCHY4dRAHkbCqeaoz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzIvRjQyREQ4NjZEMUVEOTMzMDg3NjM4NzUxMDA3OTFCMEFBNzlBQTMzRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC9GNDJERDg2NkQxRUQ5MzMwODc2Mzg3NTEw
MDc5MUIwQUE3OUFBMzNFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8yL0Y0MkREODY2
RDFFRDkzMzA4NzYzODc1MTAwNzkxQjBBQTc5QUEzM0UubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5czra
BgyVsB+g5Q8WzoVDh/Ca44DkKjFqDk85YTU4gQmAjuQYZCVO+Nmb9sj0X3XZ2EVF
P9eKiQivq5iDWYEUQt9bFTCdVhlc4YtCsyS+Ssz5SFbv1Vfb66Q+cRW5/3Ncjc/W
FQWqkRyFNXiyIEA4THPbEBUCa8Tgojz9JbzaRaqomLPEDnJfNgD3034r7bpqXPyd
rxZKa2r2TqySZmJZSnRRFQ3qb0/gxkwMXQfzK+Mb1wqSB8N3J0gJGSEQ6h+qqR+I
0b8vpm89gH9qP6pFVfxX0TwHhcyJVUwySozzBGRWw6lRHn43fO1KFZ5iLzVhAuLm
N4oTrKGQeNGpuA1m
-----END CERTIFICATE-----
Generated at Tue May 21 14:13:11 2024 by rpki-client on console.sobornost.net