Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft
File:                     A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft (raw, json)
Hash identifier:          DS9FoU385c4IxKWcvNdBtQj8k3a3fGueS2sg5D66p+8=
Subject key identifier:   95:81:9F:64:9D:14:34:5E:98:D7:E3:69:24:B9:6D:10:57:B5:46:A2
Authority key identifier: A8:C1:21:52:A8:5C:AD:E1:EE:31:B6:08:3F:7E:4D:55:7C:B8:69:04
Certificate issuer:       /CN=a8c12152a85cade1ee31b6083f7e4d557cb86904
Certificate serial:       5E971EE9FCF7EB67FA254D23556BC5AB7768E64A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMEhUqhcreHuMbYIP35NVXy4aQQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft
Manifest number:          59
Signing time:             Wed 20 Nov 2024 15:57:22 +0000
Manifest this update:     Wed 20 Nov 2024 15:52:22 +0000
Manifest next update:     Thu 21 Nov 2024 17:52:22 +0000
Files and hashes:         1: A8C12152A85CADE1EE31B6083F7E4D557CB86904.crl (hash: W1MEIgXuWoa3Wb9jFyEq/gZwLynEXILhigWJb2Ev9ps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:97:1e:e9:fc:f7:eb:67:fa:25:4d:23:55:6b:c5:ab:77:68:e6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c12152a85cade1ee31b6083f7e4d557cb86904
        Validity
            Not Before: Nov 20 15:52:22 2024 GMT
            Not After : Nov 21 17:52:22 2024 GMT
        Subject: CN=95819F649D14345E98D7E36924B96D1057B546A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:6f:53:e7:4e:98:f1:8e:18:5b:97:cb:a6:
                    4f:e8:1b:a9:1d:70:75:a8:6a:8b:bd:c7:e3:3f:a3:
                    f1:2d:e0:00:b0:11:34:9d:a0:4d:96:fd:96:6a:51:
                    1f:1f:49:b2:dd:ce:86:ff:0d:40:51:d5:e6:28:65:
                    fe:52:87:2d:79:ec:e7:6a:85:ab:00:13:a9:d7:fe:
                    38:88:0e:17:c7:b0:9c:70:b0:04:3e:76:df:25:dc:
                    52:58:35:a4:de:bf:2b:0d:4b:b3:0d:c0:50:e6:84:
                    c5:82:97:33:db:47:6a:35:29:e8:60:df:ce:e6:d8:
                    4d:ff:21:d4:46:b2:f4:b2:ea:2a:e8:9a:e7:5c:09:
                    d8:72:e0:5b:50:32:be:87:3c:e1:60:b6:83:bd:5d:
                    ae:aa:98:6a:1b:30:ea:9c:a4:1d:92:ee:ef:aa:6c:
                    91:f1:2c:e7:44:84:ea:66:0c:4c:28:a2:93:70:09:
                    1f:bb:9f:f5:04:22:30:04:1b:b6:9d:c9:26:4d:b6:
                    8e:41:f1:b4:89:c3:e2:46:e9:c7:1b:c1:62:fa:fa:
                    b2:1c:22:a8:8e:6a:51:a9:b6:b6:9c:17:73:ca:d4:
                    df:1c:ef:39:25:52:a6:28:9d:3b:98:d6:20:b4:12:
                    63:bf:de:27:f5:fd:b1:c0:43:cf:49:08:7e:85:9b:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:81:9F:64:9D:14:34:5E:98:D7:E3:69:24:B9:6D:10:57:B5:46:A2
            X509v3 Authority Key Identifier:
                keyid:A8:C1:21:52:A8:5C:AD:E1:EE:31:B6:08:3F:7E:4D:55:7C:B8:69:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMEhUqhcreHuMbYIP35NVXy4aQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ef:ff:85:fb:d7:03:eb:65:3d:67:92:2d:60:83:d3:10:e8:
         43:3c:72:84:4c:f2:bf:91:66:01:61:19:e8:2b:a0:8f:b4:2c:
         43:5d:48:58:3d:c9:2e:3c:bd:23:6b:b0:e2:99:ed:fb:f0:ca:
         a7:bc:c0:ee:57:ae:62:8b:e9:88:52:ed:21:24:6d:3a:b2:8d:
         1b:df:74:0b:45:98:a8:3b:9e:16:83:88:b1:9a:2a:ea:3b:56:
         17:8c:29:d3:53:f6:c2:1a:26:5b:28:d9:68:31:76:c3:46:b5:
         6d:e0:f1:c5:51:4f:d5:86:aa:c7:55:bb:05:fa:5a:17:c3:83:
         dc:52:43:e0:54:42:33:53:c6:ac:95:9a:c2:2f:5e:1c:a2:5b:
         11:ef:91:7e:31:9f:c9:df:07:30:11:84:f1:9e:fc:54:12:66:
         cc:dc:2f:22:88:38:2c:15:f7:92:42:85:13:b3:f3:93:39:a6:
         8d:6b:e0:fe:4f:46:ec:82:c7:01:b4:1d:4a:a8:e7:d8:31:73:
         9a:38:b7:f3:7c:e5:6a:4f:eb:68:26:0d:6b:d1:30:8c:eb:8b:
         d0:02:f1:3c:92:04:27:66:49:13:41:ce:bd:03:9e:1b:fd:1d:
         29:29:ee:38:2c:ab:97:71:17:75:9e:80:25:04:06:5d:65:a3:
         b3:cb:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----