Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/0/E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.mft
File:                     E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.mft (raw, json)
Hash identifier:          mP9iPYt9zjRgQFZmFfaVKsUSgo45D5ONMwYWYZ/YR3s=
Subject key identifier:   5C:F2:91:0A:11:B1:E9:4F:B7:11:7B:1B:39:60:10:8D:64:61:C1:FF
Authority key identifier: E8:5B:6D:CC:AF:B9:E5:58:31:24:7A:CE:77:E8:B7:A4:3E:60:46:B0
Certificate issuer:       /CN=e8238ea0d52c65298c79e62da18532405bea7039d2ab108ffe
Certificate serial:       12570E5DC48982BEFD6B5DB0C2F5B3A55228BBB2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d52c65298c79e62da18532405bea7039d2ab108ffe.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/0/E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.mft
Manifest number:          B2
Signing time:             Fri 19 Jul 2024 00:39:20 +0000
Manifest this update:     Fri 19 Jul 2024 00:34:20 +0000
Manifest next update:     Sat 20 Jul 2024 00:48:20 +0000
Files and hashes:         1: E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.crl (hash: LK3GWjpel98GYbkFXPzUilIbwlIskzFMprI9UvDeLv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:57:0e:5d:c4:89:82:be:fd:6b:5d:b0:c2:f5:b3:a5:52:28:bb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d52c65298c79e62da18532405bea7039d2ab108ffe
        Validity
            Not Before: Jul 19 00:34:20 2024 GMT
            Not After : Jul 20 00:48:20 2024 GMT
        Subject: CN=5CF2910A11B1E94FB7117B1B3960108D6461C1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:b7:73:d4:ed:a4:08:71:ef:69:ab:95:cc:
                    29:6d:95:07:d6:d5:61:23:33:a3:ae:71:89:aa:8f:
                    ac:2d:20:96:52:27:88:e0:e5:04:cf:d9:e2:cc:da:
                    3b:c2:a0:62:37:c9:e2:4d:c9:84:b1:86:a6:08:21:
                    b6:39:e1:cc:84:13:cc:dd:65:b8:26:38:de:10:20:
                    04:30:60:78:48:1c:b3:dc:98:52:b5:38:97:3c:37:
                    7c:83:3a:52:b2:d8:7b:b2:37:0c:8c:3b:e2:7b:50:
                    29:3f:11:f9:3d:e3:0d:3f:cc:67:22:92:2b:a1:82:
                    49:1a:ad:e4:34:22:10:05:95:ba:50:03:67:4d:07:
                    8c:cb:28:57:67:76:73:17:a6:66:16:25:52:bc:79:
                    91:75:8a:63:91:e3:34:2d:83:58:bf:7e:11:a0:cc:
                    0b:7d:4f:97:73:9f:54:db:cc:4d:e4:11:b7:91:1d:
                    5e:47:d1:cd:f9:dc:58:26:24:1b:fa:42:a9:5c:56:
                    3e:5b:77:9c:34:6c:2f:a3:f8:5b:38:de:5d:01:87:
                    12:84:b0:e4:d8:3c:54:9b:ba:17:cf:a8:98:dd:ad:
                    24:c8:07:eb:dd:89:5e:c1:b4:6c:d3:68:10:22:d8:
                    2f:5b:3d:24:09:61:3d:07:df:a9:d4:f5:37:fa:0b:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F2:91:0A:11:B1:E9:4F:B7:11:7B:1B:39:60:10:8D:64:61:C1:FF
            X509v3 Authority Key Identifier:
                keyid:E8:5B:6D:CC:AF:B9:E5:58:31:24:7A:CE:77:E8:B7:A4:3E:60:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/0/E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d52c65298c79e62da18532405bea7039d2ab108ffe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/0/E85B6DCCAFB9E55831247ACE77E8B7A43E6046B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:3e:00:8a:1e:8e:18:3f:2e:21:81:06:f5:2b:7a:88:fc:
         6f:b3:52:4b:a2:14:35:f0:54:3b:ff:57:8a:e9:82:88:f7:a0:
         fc:4a:ed:32:be:bf:57:52:95:4f:48:90:71:be:e3:cc:ea:3e:
         55:4e:98:2d:dd:2d:f4:6a:14:b2:26:40:d8:0a:01:3d:ae:26:
         97:be:b6:b8:0b:8e:10:ca:20:fe:d1:71:43:3b:42:6a:92:2b:
         2d:11:b3:91:94:ac:4a:48:7c:0a:ca:ca:c6:69:c0:86:95:fc:
         d2:03:ad:a4:25:a6:f7:6b:1d:f3:4c:b2:fa:f5:e9:f8:20:c5:
         57:8f:ab:00:96:5f:f0:b5:bd:50:9b:65:4a:27:52:dd:67:62:
         24:dc:24:cb:4f:af:ef:26:5d:ab:6d:45:43:a7:75:e1:e3:d6:
         2c:b2:c2:77:5f:95:8d:3b:5a:5f:b8:69:b2:5a:4e:e5:31:cf:
         dc:85:fd:8f:6b:9d:fc:9f:00:63:5a:67:30:cb:65:9f:b5:6b:
         2f:12:6d:1a:ad:89:81:65:6d:9d:4a:e7:24:5d:6e:07:db:19:
         47:c7:25:97:05:f8:ba:57:63:97:b2:66:43:0e:dc:f3:a7:2f:
         f6:47:b4:fb:f2:e2:ba:d4:29:fd:29:2d:ac:55:46:a6:a4:f3:
         e5:84:cc:e0
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUElcOXcSJgr79a12wwvWzpVIou7IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTgyMzhlYTBkNTJjNjUyOThjNzllNjJkYTE4NTMyNDA1
YmVhNzAzOWQyYWIxMDhmZmUwHhcNMjQwNzE5MDAzNDIwWhcNMjQwNzIwMDA0ODIw
WjAzMTEwLwYDVQQDEyg1Q0YyOTEwQTExQjFFOTRGQjcxMTdCMUIzOTYwMTA4RDY0
NjFDMUZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/O3c9TtpAhx
72mrlcwpbZUH1tVhIzOjrnGJqo+sLSCWUieI4OUEz9nizNo7wqBiN8niTcmEsYam
CCG2OeHMhBPM3WW4JjjeECAEMGB4SByz3JhStTiXPDd8gzpSsth7sjcMjDvie1Ap
PxH5PeMNP8xnIpIroYJJGq3kNCIQBZW6UANnTQeMyyhXZ3ZzF6ZmFiVSvHmRdYpj
keM0LYNYv34RoMwLfU+Xc59U28xN5BG3kR1eR9HN+dxYJiQb+kKpXFY+W3ecNGwv
o/hbON5dAYcShLDk2DxUm7oXz6iY3a0kyAfr3YlewbRs02gQItgvWz0kCWE9B9+p
1PU3+gsn+wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFzykQoRselPtxF7GzlgEI1k
YcH/MB8GA1UdIwQYMBaAFOhbbcyvueVYMSR6znfot6Q+YEawMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNlOTBhM2M1LTNmMzgtNGRkZi1iMmNh
LWE0ZDUyYWNlM2MxNC8wL0U4NUI2RENDQUZCOUU1NTgzMTI0N0FDRTc3RThCN0E0
M0U2MDQ2QjAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMGNmOTg2YS0yZWM5LTRhYTItOWU2MS00
M2EwZWZjNGYyZWEvZTgyMzhlYTBkNTJjNjUyOThjNzllNjJkYTE4NTMyNDA1YmVh
NzAzOWQyYWIxMDhmZmUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
M2U5MGEzYzUtM2YzOC00ZGRmLWIyY2EtYTRkNTJhY2UzYzE0LzAvRTg1QjZEQ0NB
RkI5RTU1ODMxMjQ3QUNFNzdFOEI3QTQzRTYwNDZCMC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIarPgCK
Ho4YPy4hgQb1K3qI/G+zUkuiFDXwVDv/V4rpgoj3oPxK7TK+v1dSlU9IkHG+48zq
PlVOmC3dLfRqFLImQNgKAT2uJpe+trgLjhDKIP7RcUM7QmqSKy0Rs5GUrEpIfArK
ysZpwIaV/NIDraQlpvdrHfNMsvr16fggxVePqwCWX/C1vVCbZUonUt1nYiTcJMtP
r+8mXattRUOndeHj1iyywndflY07Wl+4abJaTuUxz9yF/Y9rnfyfAGNaZzDLZZ+1
ay8SbRqtiYFlbZ1K5yRdbgfbGUfHJZcF+LpXY5eyZkMO3POnL/ZHtPvy4rrUKf0p
LaxVRqak8+WEzOA=
-----END CERTIFICATE-----