Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft
File:                     84B73A995F7E469C0FFD988D851B866DACA9AB74.mft (raw, json)
Hash identifier:          l/WH+9INBRxpE1d63yss6wFZ28Fm2+wMKaQJVf7qzlA=
Subject key identifier:   F7:E9:05:2C:28:2C:4E:28:63:03:61:92:B3:00:F1:4C:4B:C6:48:87
Authority key identifier: 84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74
Certificate issuer:       /CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
Certificate serial:       39ECCF85C62DAC7194B4F26F3A67A6D576156DA8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft
Manifest number:          0220
Signing time:             Mon 21 Oct 2024 13:12:02 +0000
Manifest this update:     Mon 21 Oct 2024 13:07:02 +0000
Manifest next update:     Tue 22 Oct 2024 14:02:02 +0000
Files and hashes:         1: 326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa (hash: M+UQgJRndf7iDu5NVHwZtWTdF7mL4QZTbFPoh5R2bPA=)
                          2: 84B73A995F7E469C0FFD988D851B866DACA9AB74.crl (hash: MJtQIr0IPajguk6D1uJw+ceYAlvjAAd6C/2s277qUxU=)
                          3: 326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa (hash: Ba/addKhejg17hZOADf/qh5k4qOtPpkMw6dX67YpIys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ec:cf:85:c6:2d:ac:71:94:b4:f2:6f:3a:67:a6:d5:76:15:6d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
        Validity
            Not Before: Oct 21 13:07:02 2024 GMT
            Not After : Oct 22 14:02:02 2024 GMT
        Subject: CN=F7E9052C282C4E2863036192B300F14C4BC64887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:bb:d3:6c:e7:4a:5d:31:51:af:ed:51:e7:
                    8d:e8:9e:6a:57:9b:fe:07:53:b6:7f:ee:ff:a6:e0:
                    85:dd:8f:db:39:fc:96:68:d0:3f:3a:e5:0d:47:8f:
                    0c:03:e6:4f:65:ae:d3:6d:18:36:87:e9:0e:6c:6c:
                    50:39:1d:bc:b0:2d:2a:c8:64:f5:5b:51:b8:ab:65:
                    17:8c:4b:d1:10:e7:cb:e9:30:55:91:1f:33:f7:40:
                    b9:a9:ae:8f:01:94:0b:6b:35:8e:44:16:38:c8:40:
                    eb:e9:a4:41:62:38:7c:06:ca:68:5b:d7:4b:a0:71:
                    29:92:a7:57:e6:db:49:8d:5d:15:72:07:de:7a:5d:
                    58:2e:83:66:ac:9c:15:a2:5a:27:e2:da:05:7f:33:
                    a9:f9:0f:f0:bc:cf:60:d8:f9:ff:99:f9:0a:32:27:
                    d7:cc:43:bd:53:ef:65:3f:f3:c9:39:a1:f8:26:69:
                    ba:d4:b9:e0:42:e9:f8:00:56:b6:87:f4:08:7c:5d:
                    60:26:a7:c2:95:fc:d4:76:fd:e1:aa:a1:58:64:8c:
                    b9:08:1f:ca:7a:ec:7b:2e:58:85:af:81:26:10:21:
                    83:b2:73:2b:68:8f:81:31:f6:a4:6c:97:5f:11:eb:
                    e0:88:70:22:c3:38:3c:42:61:c1:9e:bc:a1:3e:5c:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:05:2C:28:2C:4E:28:63:03:61:92:B3:00:F1:4C:4B:C6:48:87
            X509v3 Authority Key Identifier:
                keyid:84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:06:c9:c2:62:11:3b:4a:2d:a5:fe:b2:00:a3:69:73:c5:
         ba:03:4e:39:dc:98:71:2b:0c:11:00:cc:d1:62:43:cc:f1:97:
         ec:bd:49:8e:0d:f5:41:46:ca:aa:1f:e0:8d:4d:ef:96:a1:fa:
         b7:5a:31:c8:0b:3b:fe:85:86:2b:54:f2:77:e4:14:c2:b0:75:
         be:db:2f:3c:77:c3:23:2d:64:8c:1c:3f:5a:3f:bc:88:45:1a:
         f1:d9:fb:96:44:e5:11:d9:fb:a5:d4:ff:85:8a:b6:ea:19:6d:
         7a:00:f6:f6:1f:06:4d:8f:51:c3:4c:8d:ea:72:1d:f4:79:a0:
         fa:56:25:43:e5:66:b1:0d:43:a3:83:bc:33:8f:5f:c7:d9:3a:
         23:62:46:54:29:b1:5a:dd:81:f4:4f:d4:b9:be:6c:49:c1:41:
         88:c2:80:b9:cd:d6:69:b4:24:43:9c:ed:2e:0e:58:c9:13:06:
         7e:26:42:a4:9c:0e:48:77:ed:25:74:30:7e:84:fb:e1:cd:69:
         48:ef:5d:d5:fd:eb:64:75:99:bc:fd:96:5b:c2:2c:7f:13:59:
         9b:9b:72:9b:ce:7c:4e:8c:72:9f:ba:8e:ea:1b:48:01:30:3c:
         16:70:38:93:91:0a:e1:f0:1e:f2:25:2d:43:3b:90:e0:76:cd:
         30:d3:be:6c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUOezPhcYtrHGUtPJvOmem1XYVbagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRCNzNBOTk1RjdFNDY5QzBGRkQ5ODhEODUxQjg2NkRB
Q0E5QUI3NDAeFw0yNDEwMjExMzA3MDJaFw0yNDEwMjIxNDAyMDJaMDMxMTAvBgNV
BAMTKEY3RTkwNTJDMjgyQzRFMjg2MzAzNjE5MkIzMDBGMTRDNEJDNjQ4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfKrvTbOdKXTFRr+1R543onmpX
m/4HU7Z/7v+m4IXdj9s5/JZo0D865Q1HjwwD5k9lrtNtGDaH6Q5sbFA5HbywLSrI
ZPVbUbirZReMS9EQ58vpMFWRHzP3QLmpro8BlAtrNY5EFjjIQOvppEFiOHwGymhb
10ugcSmSp1fm20mNXRVyB956XVgug2asnBWiWifi2gV/M6n5D/C8z2DY+f+Z+Qoy
J9fMQ71T72U/88k5ofgmabrUueBC6fgAVraH9Ah8XWAmp8KV/NR2/eGqoVhkjLkI
H8p67HsuWIWvgSYQIYOycytoj4Ex9qRsl18R6+CIcCLDODxCYcGevKE+XKvdAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU9+kFLCgsTihjA2GSswDxTEvGSIcwHwYDVR0j
BBgwFoAUhLc6mV9+RpwP/ZiNhRuGbaypq3QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgyZjg1YmMtM2Q2OS00OGEyLWI5YzMtN2VmMGE4Mzlj
ZTE5LzEvODRCNzNBOTk1RjdFNDY5QzBGRkQ5ODhEODUxQjg2NkRBQ0E5QUI3NC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC84NEI3M0E5OTVGN0U0NjlDMEZGRDk4OEQ4
NTFCODY2REFDQTlBQjc0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMzLTdlZjBhODM5Y2UxOS8xLzg0QjczQTk5
NUY3RTQ2OUMwRkZEOTg4RDg1MUI4NjZEQUNBOUFCNzQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBblQbJ
wmIRO0otpf6yAKNpc8W6A0453JhxKwwRAMzRYkPM8ZfsvUmODfVBRsqqH+CNTe+W
ofq3WjHICzv+hYYrVPJ35BTCsHW+2y88d8MjLWSMHD9aP7yIRRrx2fuWROUR2ful
1P+FirbqGW16APb2HwZNj1HDTI3qch30eaD6ViVD5WaxDUOjg7wzj1/H2TojYkZU
KbFa3YH0T9S5vmxJwUGIwoC5zdZptCRDnO0uDljJEwZ+JkKknA5Id+0ldDB+hPvh
zWlI713V/etkdZm8/ZZbwix/E1mbm3KbznxOjHKfuo7qG0gBMDwWcDiTkQrh8B7y
JS1DO5Dgds0w075s
-----END CERTIFICATE-----