Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft
File:                     41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft (raw, json)
Hash identifier:          7Q7D3Put4enxRXQ/X7bxPtKkdZRGFAAx3IVh5x78kcg=
Subject key identifier:   E2:91:9F:21:77:68:A7:D4:4D:66:86:12:EC:B3:87:03:9E:84:12:2D
Authority key identifier: 41:CF:30:FB:DC:22:0B:6E:4A:6F:A6:77:92:B3:B2:48:EE:CF:65:70
Certificate issuer:       /CN=41CF30FBDC220B6E4A6FA67792B3B248EECF6570
Certificate serial:       550416B0D933BA6866FC004C3ACC391B16C24FF6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft
Manifest number:          38
Signing time:             Mon 29 Jul 2024 00:45:19 +0000
Manifest this update:     Mon 29 Jul 2024 00:40:19 +0000
Manifest next update:     Tue 30 Jul 2024 03:44:19 +0000
Files and hashes:         1: 41CF30FBDC220B6E4A6FA67792B3B248EECF6570.crl (hash: v2O5p7TBw5Ute4Ff81Hhyk2nq2BnxqqFHKVl72gZPWQ=)
                          2: 326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa (hash: zI/7RS5CULQs/eQeVEsRQEIfCAOBbTKX6vZdqlRmV9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:04:16:b0:d9:33:ba:68:66:fc:00:4c:3a:cc:39:1b:16:c2:4f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CF30FBDC220B6E4A6FA67792B3B248EECF6570
        Validity
            Not Before: Jul 29 00:40:19 2024 GMT
            Not After : Jul 30 03:44:19 2024 GMT
        Subject: CN=E2919F217768A7D44D668612ECB387039E84122D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ce:39:5c:f8:44:72:1c:68:42:a0:85:0a:90:
                    39:53:b1:ee:93:21:f6:0e:c2:ac:36:4f:6d:7a:78:
                    5c:3f:0a:98:a7:8d:23:f2:7e:80:93:66:b3:55:3a:
                    3b:6c:79:d0:33:85:5d:1f:29:a8:3b:8f:4e:06:56:
                    24:14:ff:0c:ef:a8:33:98:a7:51:25:ef:4c:0f:0a:
                    91:be:91:21:61:ba:7d:00:80:de:b2:8e:42:fd:b9:
                    72:1c:af:0f:b9:09:17:b6:af:f6:68:2d:39:85:6a:
                    12:25:e7:d8:33:de:30:c6:f3:ce:41:cc:10:54:e7:
                    26:83:d5:97:da:3e:9b:b0:b4:95:45:49:a3:0f:da:
                    a1:cc:05:f2:90:a4:99:9f:3b:11:5c:e6:95:d6:95:
                    c8:57:21:91:9d:96:bd:53:86:ff:c6:a7:18:26:ec:
                    1c:3e:a3:11:31:de:8a:c9:a6:b6:28:c6:d7:25:4a:
                    91:db:3c:cc:92:45:1a:d0:ad:75:b3:8c:94:40:58:
                    01:88:1e:49:3a:f8:6d:2e:f2:7b:80:dd:cd:fd:5c:
                    bf:d8:2e:2a:fe:e7:03:99:b5:7f:4c:d3:05:0b:a0:
                    1f:54:91:55:42:15:04:8a:80:d0:21:4a:39:de:31:
                    1b:77:c2:37:70:35:63:8e:a3:8a:93:59:62:46:48:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:91:9F:21:77:68:A7:D4:4D:66:86:12:EC:B3:87:03:9E:84:12:2D
            X509v3 Authority Key Identifier:
                keyid:41:CF:30:FB:DC:22:0B:6E:4A:6F:A6:77:92:B3:B2:48:EE:CF:65:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:60:d3:75:9d:e8:34:fe:23:02:3a:6e:91:7d:cf:7e:1a:c6:
         7a:f4:2c:88:4a:49:a9:26:83:5a:29:03:35:b9:34:83:2e:e9:
         74:75:a4:ad:1d:f7:92:e9:3d:44:b9:ea:c5:bf:14:14:ff:b3:
         37:56:de:e5:e3:c1:e3:89:a5:41:41:d3:75:9f:5f:d8:7f:f6:
         45:2a:29:68:31:13:30:80:e6:75:a2:2e:03:18:47:4a:56:27:
         e8:4f:61:36:64:71:2a:b2:d8:5c:0f:19:77:5c:3c:45:22:27:
         be:0b:aa:ac:7d:a6:3f:06:0a:10:c0:85:67:6e:08:ec:56:32:
         bb:b2:c4:52:3c:cc:9a:3d:6f:9e:56:a7:bd:7d:cb:1e:92:e6:
         4e:84:fd:cf:a7:22:4b:30:fc:e2:aa:0d:12:da:14:01:ae:68:
         06:95:0f:bc:1b:40:0b:ce:35:4f:d2:bc:4b:90:19:db:a3:ae:
         e6:99:81:ac:98:9e:fc:21:b6:b2:c3:61:c2:b0:50:86:11:2a:
         f8:34:f1:fd:5e:c0:db:4b:73:9e:b9:f9:2e:dd:16:c8:d5:73:
         d7:32:eb:55:86:17:9e:65:85:45:f1:a2:08:7d:91:61:33:d7:
         ec:71:0d:92:be:5c:7e:b5:bf:ed:98:98:e6:7b:cb:99:0c:69:
         15:e8:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----