Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
File:                     B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft (raw, json)
Hash identifier:          hMryuQdsLF83YVqqyOMLwch5hewIHoEo33xDL6bMCnw=
Subject key identifier:   00:19:CC:7D:46:D2:D7:79:6D:18:CA:DA:33:C0:64:ED:7A:5A:76:11
Authority key identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
Certificate issuer:       /CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Certificate serial:       0392721A5EBBAB1871EFBC5277F89D642C2A2938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
Manifest number:          B8
Signing time:             Wed 20 Nov 2024 03:49:37 +0000
Manifest this update:     Wed 20 Nov 2024 03:44:37 +0000
Manifest next update:     Thu 21 Nov 2024 06:17:37 +0000
Files and hashes:         1: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl (hash: 1heCWGimU7ZHMfnfLe6v512LQRKBY3surf8pzH2dlwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:92:72:1a:5e:bb:ab:18:71:ef:bc:52:77:f8:9d:64:2c:2a:29:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
        Validity
            Not Before: Nov 20 03:44:37 2024 GMT
            Not After : Nov 21 06:17:37 2024 GMT
        Subject: CN=0019CC7D46D2D7796D18CADA33C064ED7A5A7611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:f6:9d:fd:75:f6:ff:e2:f2:e8:a9:d5:4c:
                    11:bc:4e:21:36:c2:b0:f8:5d:35:be:e6:49:81:98:
                    72:9c:6a:f7:09:82:66:5c:da:8b:d8:ad:2d:c4:3e:
                    44:f6:e1:bf:64:1a:89:a7:be:e3:07:1f:7b:3c:58:
                    3a:95:64:c1:16:f0:76:3b:65:6a:90:a6:6a:22:74:
                    e7:11:a0:c6:0e:63:f4:fb:d1:5e:e2:d7:9d:2e:62:
                    63:b3:77:ab:05:cb:83:c2:1c:21:33:44:34:be:82:
                    18:51:02:a9:58:03:ab:82:57:5e:5c:45:d5:b5:45:
                    f4:61:f8:9d:2e:3d:ea:be:14:64:56:9f:04:c2:6d:
                    5c:19:a0:37:24:e8:01:69:9d:22:b3:cf:87:ce:87:
                    6a:76:d8:71:b0:c7:1b:58:c7:ab:f3:b0:c5:c8:b4:
                    51:3a:31:ce:1d:44:d5:0f:00:6f:21:28:3c:32:23:
                    ce:b4:46:0d:6c:52:5a:38:08:fa:78:04:7c:60:e5:
                    6e:49:36:17:3c:b3:23:52:f5:73:6b:03:7d:20:33:
                    42:b1:c3:40:79:45:05:33:63:cc:e9:d1:38:ed:76:
                    d2:65:10:2c:95:17:45:72:01:66:b9:fe:66:23:63:
                    c5:4c:a6:4f:54:ba:48:15:e6:e9:70:ce:5b:59:d9:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:19:CC:7D:46:D2:D7:79:6D:18:CA:DA:33:C0:64:ED:7A:5A:76:11
            X509v3 Authority Key Identifier:
                keyid:B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:20:92:9c:d2:72:28:e9:ca:ed:98:19:0c:f2:fa:7e:95:38:
         c5:a0:62:16:26:c4:b1:ed:53:1f:14:62:45:88:51:7f:2a:8b:
         00:ad:6e:65:8e:c9:97:77:46:36:7d:e1:9a:d8:14:fd:3a:c9:
         a7:f5:50:fd:39:55:a7:72:21:bc:8c:fe:fe:4a:04:83:e8:67:
         10:80:84:6a:d6:f6:ea:1d:8a:3b:65:5d:59:a9:a8:7d:cb:e1:
         f6:63:aa:d8:06:be:bf:b4:a5:0e:94:af:65:7e:8a:77:2c:c5:
         48:2b:ca:2b:68:29:42:84:7f:24:1e:cb:b7:3b:31:c2:6e:f6:
         77:c5:88:bb:cd:8b:5b:5a:8b:42:1b:2d:3b:d6:0e:70:f2:62:
         d8:3e:a8:53:44:92:cb:9e:1d:36:b2:6b:5a:ca:6f:61:8e:4c:
         12:f8:5c:d7:c7:29:3a:37:1b:70:3a:5c:9e:99:2e:99:42:66:
         5e:64:45:0f:84:18:e0:ab:9f:4a:c0:9c:77:de:df:10:4f:36:
         18:64:23:30:d5:fb:1c:5b:a2:a4:59:c1:db:b5:02:e7:04:be:
         72:a1:99:88:dd:9d:84:22:41:09:c5:25:d4:ec:99:39:61:f3:
         a2:ef:6f:46:13:14:42:59:b3:0e:9f:da:62:12:a4:1c:f8:9c:
         bd:5c:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:26:58 2024 by rpki-client on console.sobornost.net