Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
File:                     9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft (raw, json)
Hash identifier:          /Z0RzBVTbimr2pINQwg8+YnI+Emly0+mM+PKYJlu2pI=
Subject key identifier:   E0:B0:D0:96:F3:D7:DC:F3:DE:E2:1B:E7:59:2B:BA:39:33:74:67:4C
Authority key identifier: 98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8
Certificate issuer:       /CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
Certificate serial:       0A73B8429F5F6E5A637402CC3A7E5586019B4CC5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
Manifest number:          0D
Signing time:             Wed 22 Jan 2025 18:53:13 +0000
Manifest this update:     Wed 22 Jan 2025 18:48:13 +0000
Manifest next update:     Thu 23 Jan 2025 22:19:13 +0000
Files and hashes:         1: 9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.crl (hash: LHRrMtBctkLf5qGIMMVPGOcYnWwgv3hw0ndaPGMtngA=)
                          2: 326130363a613030373a3a2f33322d3332203d3e20323135363439.roa (hash: r2Odt3IY0KcEXOjg3ZomCmpglxo3i3Egjj6VgNOH1vU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:73:b8:42:9f:5f:6e:5a:63:74:02:cc:3a:7e:55:86:01:9b:4c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
        Validity
            Not Before: Jan 22 18:48:13 2025 GMT
            Not After : Jan 23 22:19:13 2025 GMT
        Subject: CN=E0B0D096F3D7DCF3DEE21BE7592BBA393374674C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:90:a8:23:10:d9:41:25:fa:51:96:86:6a:
                    70:3d:51:f5:a8:99:49:00:57:ee:61:1e:38:ad:bb:
                    46:2f:75:49:05:0c:43:64:86:11:08:22:39:43:34:
                    09:81:d1:36:02:fc:58:e6:e2:a9:c2:be:d7:25:27:
                    80:5a:74:4a:eb:fb:44:5a:8f:6c:1d:bc:5f:3b:4e:
                    a7:e7:c4:4a:30:98:ec:f5:fd:7a:3a:df:68:5e:77:
                    0a:fe:f8:d9:3f:cd:4a:c6:c1:8f:45:63:3a:c5:56:
                    78:e7:b8:96:03:21:78:13:66:e5:12:ea:5d:cd:b4:
                    e3:b7:b2:af:a2:e4:b7:01:52:ed:f7:79:ec:15:9f:
                    83:b0:75:87:e0:77:a6:cc:dc:15:8d:a9:91:d0:3b:
                    2a:fc:df:50:ef:40:31:b2:1a:27:e8:ba:ed:1f:ab:
                    1e:8a:0f:2d:a1:32:23:a6:df:91:05:3e:94:83:17:
                    19:3a:31:f0:89:c2:ba:8f:5c:db:c5:fe:d6:ad:64:
                    90:5b:bb:10:1c:e3:70:27:6c:65:b7:c1:95:ce:62:
                    1c:85:42:cc:cd:51:71:ac:dd:4e:ef:e1:e9:72:5a:
                    15:a0:15:99:b5:8b:43:11:09:99:ab:51:b7:d0:f6:
                    4c:c7:e2:09:fc:c1:dd:78:76:7e:c1:52:6d:7c:a8:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B0:D0:96:F3:D7:DC:F3:DE:E2:1B:E7:59:2B:BA:39:33:74:67:4C
            X509v3 Authority Key Identifier:
                keyid:98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:57:40:c0:b5:57:86:1b:52:e2:9b:37:41:d1:68:4e:ec:
         17:01:27:53:7d:af:ec:6b:a0:98:c1:a5:6d:4a:fb:94:17:9b:
         28:2f:82:80:11:f6:38:85:af:5b:17:83:b1:4c:3c:e0:dd:f1:
         b7:de:78:01:16:76:07:23:6d:dc:87:f0:e9:ac:63:60:f8:e3:
         78:9f:15:1e:51:5d:93:12:97:d4:25:2c:ae:6a:bc:6a:d0:ef:
         0b:21:ff:bf:d1:d4:0f:de:1b:91:95:c6:30:35:3a:0f:78:14:
         f7:ff:d4:32:1d:6a:21:35:44:35:19:78:40:91:ad:b6:5f:46:
         36:4a:5d:ae:f0:de:ac:df:a9:07:5e:c3:cd:f5:a9:a5:c5:3a:
         5e:f1:2e:83:03:ba:d2:72:ed:2e:11:49:18:1f:a1:a7:27:db:
         9b:e4:a4:42:ee:6c:6d:d2:f5:af:d9:92:f2:5a:a7:ba:d4:b3:
         0a:0c:e6:ea:e5:05:a6:31:63:c3:50:21:34:97:c7:c2:57:48:
         a0:74:0f:27:3f:c6:48:f7:0c:09:8b:71:ad:9f:6e:83:b0:cc:
         04:bc:16:cc:bf:86:e4:c0:38:81:24:b6:f9:b2:03:d0:87:0a:
         a4:0c:5c:9d:30:09:d0:5e:d5:16:69:4e:68:3a:38:2b:11:44:
         da:3d:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:59 2025 by rpki-client on console.sobornost.net