Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft
File:                     362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft (raw, json)
Hash identifier:          zkMry6X7tdKj67qUgen1CQfKm1l/eGYuOqRJqBxcWkc=
Subject key identifier:   75:B5:14:A9:5F:82:EC:1F:5D:85:22:F3:3E:75:4D:29:40:A3:EF:E8
Authority key identifier: 36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6
Certificate issuer:       /CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6
Certificate serial:       743575500721FFA1BF235CFC15ACE9AFC3DECEA0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft
Manifest number:          04
Signing time:             Mon 29 Jul 2024 08:21:23 +0000
Manifest this update:     Mon 29 Jul 2024 08:16:23 +0000
Manifest next update:     Tue 30 Jul 2024 08:30:23 +0000
Files and hashes:         1: 326130613a363034343a626630303a3a2f34382d3438203d3e20323135343732.roa (hash: bvxel1hk1aZqtKmi/AXwpJWAUOQjsjqppkoV61zTWfU=)
                          2: 362BBACF6433B5D7341F52AE03A397A596DCE5C6.crl (hash: RoewmZR0x1M8KMSJz21GlSFJ2Y46LwInEqA8aabIWUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:35:75:50:07:21:ff:a1:bf:23:5c:fc:15:ac:e9:af:c3:de:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6
        Validity
            Not Before: Jul 29 08:16:23 2024 GMT
            Not After : Jul 30 08:30:23 2024 GMT
        Subject: CN=75B514A95F82EC1F5D8522F33E754D2940A3EFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fc:61:98:f0:f1:09:42:4e:f5:3b:08:f2:d5:
                    3f:02:87:07:27:a0:73:5b:57:89:ac:e0:d1:8a:c4:
                    52:51:6e:b8:07:f6:e2:14:a7:77:9c:a2:87:73:a5:
                    df:2b:5e:7d:60:f1:04:b4:42:d1:22:c9:70:ae:b0:
                    49:f4:15:62:b1:1f:1a:76:24:6a:f2:62:ae:12:fb:
                    51:43:61:3d:d1:cc:99:a9:60:3d:a6:b3:d3:05:9a:
                    a9:64:1b:a7:42:a0:63:3b:8c:c2:dc:38:0e:b0:36:
                    71:58:dc:9e:94:10:d3:c7:8e:85:14:f1:8f:0a:b8:
                    8c:8f:21:1b:f5:88:ac:9f:c0:d0:dd:f9:76:81:32:
                    7f:02:9d:80:f3:98:fd:12:8c:b9:52:94:59:b0:22:
                    a5:39:80:f2:b9:00:3c:da:48:a4:ef:54:4d:13:d7:
                    1f:04:8b:3e:0d:61:90:93:4b:bf:95:32:fe:9a:15:
                    fe:8c:da:e7:f7:ad:b0:df:33:96:df:0b:f0:78:43:
                    53:1b:35:39:bb:c2:c5:f9:d1:82:07:9c:ec:66:c9:
                    19:7f:df:05:0a:f1:62:2f:81:d1:54:de:57:9f:a8:
                    83:9b:55:76:bf:b4:33:09:b7:14:e4:b9:03:0d:f7:
                    6f:4f:f6:0a:5f:65:48:d6:ca:d3:41:8b:0c:09:7e:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:14:A9:5F:82:EC:1F:5D:85:22:F3:3E:75:4D:29:40:A3:EF:E8
            X509v3 Authority Key Identifier:
                keyid:36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:02:d2:df:bb:d0:8a:b2:c7:2d:63:da:bb:fb:33:f6:5a:
         96:2c:5c:8f:f5:e4:20:e0:47:8d:f0:73:e2:3d:a9:44:fc:e4:
         8e:26:47:6a:48:81:fe:6f:f7:82:3e:fb:2e:90:5e:e7:8d:b1:
         0b:1b:1b:ce:7a:8a:0f:fb:53:22:c2:c7:6e:08:e9:d3:16:a7:
         8d:e5:39:ad:a4:e6:09:3b:f0:0e:f2:ac:11:51:f9:e7:32:7c:
         71:5d:32:93:02:14:8f:a8:93:fa:90:64:13:ce:72:3e:48:87:
         4c:a4:b3:7b:2c:f5:0a:ec:7f:94:bc:5f:37:9f:92:4f:1e:ae:
         0f:f0:e1:96:3d:41:63:6e:2c:02:94:ac:dd:89:3c:20:da:35:
         7f:79:79:f9:9a:8c:cd:41:db:1e:76:d2:f0:74:3a:0f:c6:71:
         59:51:a6:4a:38:c4:39:87:62:d1:45:32:8c:bf:fa:e4:dc:a5:
         33:29:73:57:f8:3a:14:1d:e1:7e:0d:79:e9:aa:a9:cf:4c:c4:
         c2:18:f1:ec:b8:33:f6:5b:43:11:8e:f3:df:98:bb:aa:78:a6:
         ef:08:ac:c4:28:3a:89:fc:1f:7c:b8:27:d1:38:16:e2:d6:52:
         2b:2a:0f:bc:62:42:a4:d7:67:9f:e0:74:38:09:53:d6:03:79:
         6d:df:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----