Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft
File:                     18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft (raw, json)
Hash identifier:          hrFzj/PefbhWKGbwwhncwg2JTYvI7zSxCovDC5h/ZOk=
Subject key identifier:   FF:C8:59:E8:97:33:A1:09:32:AB:3C:2A:DD:24:66:1A:4D:5B:FB:1F
Authority key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Certificate issuer:       /CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Certificate serial:       729B361B500E39DEE3C7A205A092A06B5D0AD545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft
Manifest number:          1F
Signing time:             Tue 05 Mar 2024 23:25:58 +0000
Manifest this update:     Tue 05 Mar 2024 23:20:58 +0000
Manifest next update:     Thu 07 Mar 2024 00:28:58 +0000
Files and hashes:         1: AS215569.asa (hash: QuBPrTm22fzpsR1YgfT48f8aAqm3b1n/C/8UybzJdUc=)
                          2: 326130373a323438303a3a2f33322d3332203d3e203433363037.roa (hash: GebQaNqzCtdrXzNUpCWbrzmOx02SEpA8l4oUUbBXZYI=)
                          3: AS43607.asa (hash: 6vAs+LA+IgAm/mwHm3fUIPjB8OEGOXCGu9hyqc8nVM4=)
                          4: 3139332e31372e322e302f32342d3234203d3e203433363037.roa (hash: EdvsLAgty2YLvHeCmOyNGvwDfRacke6SNmV0IqDu3q8=)
                          5: 66D2F438D4B7E19C3D74AB88A9B399F011B22519.cer (hash: ISAfVs2VeTU28OM4mpfYSgZq5g2cD5VxiifamVQs4+w=)
                          6: 18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl (hash: JmNsA+U9FIiL9VYKK7qr2YF1e9lDZtwh78ZqJpXVjfU=)
                          7: 326130373a323438363a6666303a3a2f34342d3434203d3e20323136333930.roa (hash: SwfFJcx0OoI8pri4+dUTHUn9mK0eTTFgmDjxTZRL2+k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9b:36:1b:50:0e:39:de:e3:c7:a2:05:a0:92:a0:6b:5d:0a:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
        Validity
            Not Before: Mar  5 23:20:58 2024 GMT
            Not After : Mar  7 00:28:58 2024 GMT
        Subject: CN=FFC859E89733A10932AB3C2ADD24661A4D5BFB1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:ec:18:e0:7d:17:52:d6:cd:15:c5:41:0a:
                    36:2e:5b:e8:0b:ec:a2:a4:ae:41:38:c1:c1:f9:0b:
                    4e:b6:c4:6d:0c:39:bf:5b:8d:be:37:0c:83:1c:e5:
                    20:9e:af:1b:a3:31:97:d5:ab:bd:48:85:35:e3:27:
                    41:4e:67:a5:0a:0e:be:96:1d:fd:45:44:c9:b9:3e:
                    15:50:c0:07:1e:ad:70:47:42:6f:4e:7e:5e:7c:f5:
                    77:9e:c2:9f:63:ff:21:a1:91:01:91:c6:f0:2e:cf:
                    44:e3:bc:f8:18:60:09:5c:ca:29:32:eb:cd:20:d7:
                    3c:ff:0d:f4:0f:64:98:7b:77:2b:07:c6:88:6e:b6:
                    02:09:f6:3a:44:c7:41:4d:13:61:7c:98:2b:14:33:
                    1c:6a:02:86:fc:ff:6d:a3:18:35:bd:a7:6f:db:9a:
                    56:61:6e:1d:86:47:26:0c:16:9a:c9:c7:e5:8a:1c:
                    8e:e3:0f:3b:38:64:55:aa:11:4d:7b:0c:4c:11:19:
                    d1:12:66:3d:43:94:2f:8b:e2:bf:b2:11:59:28:b9:
                    8c:df:5d:21:7b:3f:25:a5:a8:cb:f2:e1:fe:f3:93:
                    f7:44:22:2b:4f:b0:e5:25:22:ec:a6:5b:d1:4f:54:
                    7e:ae:da:70:6c:48:81:aa:65:36:2c:36:1f:f9:1e:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C8:59:E8:97:33:A1:09:32:AB:3C:2A:DD:24:66:1A:4D:5B:FB:1F
            X509v3 Authority Key Identifier:
                keyid:18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2b:25:d7:66:ca:28:bf:08:70:40:c6:be:0d:2b:40:06:b9:
         f2:75:78:ac:f7:27:29:b3:ec:77:ac:55:86:89:68:d4:d0:ba:
         74:43:5f:8a:51:d8:4d:59:bd:7c:2b:81:89:55:fc:2b:52:68:
         df:c3:a9:50:5b:27:04:f5:83:8d:6e:76:34:df:9e:04:0b:2c:
         ab:7b:a0:bb:0b:fe:4e:df:d7:57:be:ab:39:29:26:5b:af:7d:
         09:2b:9b:e9:fe:a7:9a:11:13:c1:dc:06:c2:92:99:2f:2b:a9:
         21:41:ed:6b:a3:f2:fa:7f:16:1e:9c:6c:42:10:1a:ce:0e:9e:
         9d:12:f6:0c:83:df:1c:c5:91:b5:50:e9:0a:3e:18:b1:5b:77:
         f0:36:63:e4:b8:55:c6:e3:7a:33:ff:06:c3:a8:d1:49:59:ff:
         5f:4a:ba:09:da:a0:6b:31:35:26:68:f2:b2:c1:d1:a1:1b:fc:
         fa:72:df:02:be:bb:76:c4:36:1c:ef:03:cc:a5:3f:a4:46:3c:
         37:39:f3:2d:ff:84:0e:fe:f1:45:9e:ff:a5:c8:bb:19:47:0b:
         81:f8:81:db:99:8a:bd:a6:32:27:e8:33:c2:a9:9b:db:65:b1:
         c6:3d:64:14:9b:95:8a:ce:1a:7a:e0:44:81:d7:0e:5f:39:20:
         c0:e7:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----