Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/21/AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.mft
File:                     AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.mft (raw, json)
Hash identifier:          hHoVsAJwwc9mSZQuK8SS4Z/odKPEotoKaoDvtUqvq/k=
Subject key identifier:   87:3B:B3:AE:FD:BB:A5:6A:1A:41:92:80:FD:A9:8A:92:BB:19:D8:3C
Authority key identifier: AB:90:A0:EB:6F:E6:40:6D:48:AE:52:94:DA:B2:D0:E9:A6:F4:7B:2C
Certificate issuer:       /CN=ab90a0eb6fe6406d48ae5294dab2d0e9a6f47b2c
Certificate serial:       7EF1249A0EEB58C98B5C538F26228F6F8AFD0AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5Cg62_mQG1IrlKU2rLQ6ab0eyw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/21/AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.mft
Manifest number:          46
Signing time:             Thu 29 Jun 2023 08:17:48 +0000
Manifest this update:     Thu 29 Jun 2023 08:12:48 +0000
Manifest next update:     Fri 30 Jun 2023 09:22:48 +0000
Files and hashes:         1: AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.crl (hash: IkYUZpIvJnE4zsWBwLwz4cAQQ2coMZzYPS/IZDvuSXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f1:24:9a:0e:eb:58:c9:8b:5c:53:8f:26:22:8f:6f:8a:fd:0a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab90a0eb6fe6406d48ae5294dab2d0e9a6f47b2c
        Validity
            Not Before: Jun 29 08:12:48 2023 GMT
            Not After : Jun 30 09:22:48 2023 GMT
        Subject: CN=873BB3AEFDBBA56A1A419280FDA98A92BB19D83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:d4:09:00:8f:9e:ab:35:44:d4:9c:c5:c6:
                    ee:b9:f4:b0:e7:02:c3:ec:70:6d:29:d0:39:98:d0:
                    0d:51:3c:ed:1a:ad:00:30:86:3e:f7:8b:28:fc:ac:
                    d5:9c:77:f3:93:7a:7f:5a:92:51:88:fe:c0:d4:2a:
                    9c:d7:0d:ce:88:5a:49:52:52:c6:09:94:f3:f8:21:
                    bc:0c:d5:70:dd:e9:a2:f7:3b:9a:13:57:aa:c8:25:
                    86:99:a7:fd:7a:66:59:3e:6a:2f:f4:ce:22:5d:4a:
                    de:7a:70:14:f5:63:c4:d7:66:68:5a:9c:c0:fb:42:
                    50:a3:7b:65:9c:bf:93:47:05:10:1b:02:88:4d:90:
                    93:3b:16:71:cb:e0:3a:63:9e:e5:66:1d:cd:24:23:
                    5a:37:29:91:68:ee:f1:53:93:ef:fb:84:f5:90:c3:
                    39:83:50:b1:07:62:83:10:a3:e0:84:d2:d2:c2:90:
                    b9:7d:c1:c8:8c:c2:67:64:b2:bf:81:f7:d4:4c:fa:
                    92:84:63:a1:2a:4f:c4:3e:d9:60:c7:24:74:af:4a:
                    e8:28:35:09:b7:04:06:13:52:d1:8d:c7:9a:88:fb:
                    78:3e:e1:53:c4:86:97:27:75:ba:27:8a:82:1b:a5:
                    07:5c:0a:2b:5a:46:53:52:23:d0:5f:2d:52:3b:69:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3B:B3:AE:FD:BB:A5:6A:1A:41:92:80:FD:A9:8A:92:BB:19:D8:3C
            X509v3 Authority Key Identifier:
                keyid:AB:90:A0:EB:6F:E6:40:6D:48:AE:52:94:DA:B2:D0:E9:A6:F4:7B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/21/AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5Cg62_mQG1IrlKU2rLQ6ab0eyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/21/AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5b:2c:3e:9c:94:b5:0d:ee:28:58:6f:9b:6d:4d:d9:5e:c8:
         c2:5c:cf:94:65:c7:73:45:e8:6b:88:b4:6c:3a:67:39:da:2c:
         19:4f:08:7f:84:80:f8:7a:71:39:33:da:9d:ca:75:cf:f6:bf:
         64:05:c2:e1:0a:27:c0:42:6b:15:36:f7:f0:77:b4:a6:f3:3a:
         4b:bc:40:59:5a:31:8f:bf:91:29:10:cf:f3:62:dc:92:e0:85:
         64:04:25:5e:1d:1c:fa:bd:73:07:48:d2:8a:54:17:6e:b4:02:
         f7:54:98:7f:3f:0a:82:a8:3b:06:cf:ce:88:7c:da:42:5b:3b:
         48:59:87:42:07:23:dc:90:c1:bb:e9:7d:12:34:f8:62:0c:cf:
         9d:78:d7:cb:35:f2:3c:98:84:9c:ce:09:af:23:5e:b7:b1:61:
         9c:cc:de:99:56:28:76:4f:ce:48:ec:ca:7d:fb:3d:53:a0:ff:
         8a:fc:2f:e5:e4:c0:ed:37:4e:59:3e:74:84:b5:8c:96:23:ff:
         6d:99:bd:24:fd:0b:04:56:ad:08:2a:8b:71:d8:17:78:7f:c1:
         e7:b3:05:39:14:84:20:0d:72:dd:01:52:4e:c5:f7:6f:7a:04:
         a5:a6:fc:62:68:b8:78:fa:20:82:30:e2:dc:a5:08:c2:f5:ab:
         5a:af:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----