Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft
File:                     4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft (raw, json)
Hash identifier:          IproxjVJBTj/stcu+72fSBxSmuiPOCP8+2YN9Lgo+V8=
Subject key identifier:   B8:47:14:0B:F1:90:2B:19:A4:C5:C3:F9:58:54:0D:25:63:07:AC:E4
Authority key identifier: 4E:7C:22:4E:61:59:38:F6:0A:67:41:A6:95:33:54:F1:A7:CC:AF:5A
Certificate issuer:       /CN=4e7c224e615938f60a6741a6953354f1a7ccaf5a
Certificate serial:       13E3E09B91E4DA350A2B24FCCD2FF83F12B555DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnwiTmFZOPYKZ0GmlTNU8afMr1o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft
Manifest number:          0228
Signing time:             Mon 29 Jul 2024 08:11:56 +0000
Manifest this update:     Mon 29 Jul 2024 08:06:56 +0000
Manifest next update:     Tue 30 Jul 2024 08:58:56 +0000
Files and hashes:         1: 4E7C224E615938F60A6741A6953354F1A7CCAF5A.crl (hash: JLLwo05IApOiDydDpw4ElihtMA7enMS2Y6+j5HbZp7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e3:e0:9b:91:e4:da:35:0a:2b:24:fc:cd:2f:f8:3f:12:b5:55:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7c224e615938f60a6741a6953354f1a7ccaf5a
        Validity
            Not Before: Jul 29 08:06:56 2024 GMT
            Not After : Jul 30 08:58:56 2024 GMT
        Subject: CN=B847140BF1902B19A4C5C3F958540D256307ACE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:5c:af:ff:95:8e:b2:61:ad:8a:40:36:46:
                    51:98:c5:18:fc:b1:05:7b:b5:2b:13:7f:4a:17:e5:
                    45:57:3b:a9:45:66:81:69:9f:05:23:9f:0b:9c:b3:
                    1d:dc:f1:77:46:89:7f:2c:06:93:00:8e:71:5d:6b:
                    ba:57:21:bf:89:1f:2f:ab:b7:81:10:ac:f5:5a:ed:
                    81:78:bb:c2:1a:42:59:2d:72:f5:14:1a:4d:1c:41:
                    0a:03:06:80:ad:ff:29:20:8b:ea:60:4e:53:d7:7c:
                    89:df:c0:48:e5:2c:39:d7:f1:dc:c9:9f:3c:bc:7e:
                    58:4c:f5:ca:3f:20:c8:0c:aa:1a:21:c4:57:e5:dc:
                    d4:f5:3f:9c:ba:df:5f:d3:3d:19:4e:59:3a:02:c8:
                    b0:1d:f8:4e:80:6d:9f:c1:fd:d3:a0:5d:f6:78:ce:
                    37:c0:af:d1:fd:4a:a6:0d:2e:2b:9e:38:9d:4e:d6:
                    e7:54:1d:5f:90:a8:72:2c:08:7f:aa:3e:67:b7:c9:
                    0e:f2:17:86:fc:41:3f:ba:6e:00:d0:6e:00:ff:08:
                    68:e8:d9:f8:42:14:19:f9:ba:99:c0:d9:d3:e4:54:
                    cf:a6:af:40:f0:10:9e:f8:e3:de:e1:29:01:02:6b:
                    14:32:e0:da:67:3c:cd:ed:a1:b6:6b:f6:7a:b2:8a:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:47:14:0B:F1:90:2B:19:A4:C5:C3:F9:58:54:0D:25:63:07:AC:E4
            X509v3 Authority Key Identifier:
                keyid:4E:7C:22:4E:61:59:38:F6:0A:67:41:A6:95:33:54:F1:A7:CC:AF:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnwiTmFZOPYKZ0GmlTNU8afMr1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:e9:ea:ba:c0:9d:25:e3:82:07:ce:84:81:f9:da:78:34:5b:
         c3:ff:a1:23:37:bd:80:a6:f6:6d:62:60:32:b5:67:ce:76:02:
         ce:42:00:a5:65:ee:a8:11:73:11:36:cf:65:fd:0a:4a:c7:15:
         4a:d6:49:ec:9c:08:ea:e3:32:2b:72:c8:f8:e3:cf:74:df:2b:
         91:b6:76:b6:36:2f:35:f8:68:78:fe:f6:87:d9:c3:fb:bc:55:
         b1:7c:0b:7e:e2:ec:de:5b:1d:c0:2e:02:c5:06:88:af:91:18:
         f8:9f:96:77:f1:7b:e8:18:b9:14:85:13:d0:20:2a:94:a2:38:
         e0:e4:43:2f:96:d3:21:e3:7a:52:bf:3b:26:52:bb:1a:4e:3a:
         4f:7c:d5:34:3b:79:f9:7e:c0:a6:38:d5:4a:85:1b:49:b6:e8:
         ee:e2:80:b1:7f:ad:f5:dd:cd:07:72:23:87:59:83:19:0d:9f:
         6e:22:b1:43:f2:25:3b:a1:cc:ad:0c:01:85:08:6b:21:66:e7:
         8c:ba:91:98:98:3d:e4:1e:3b:95:a2:ad:c6:a0:9b:2c:00:a1:
         51:50:73:54:ce:56:39:d6:53:c3:17:84:15:a2:f6:e8:ae:ba:
         f8:fc:e2:58:7e:e3:ee:1f:c5:77:4a:ff:96:be:23:94:da:cd:
         26:64:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----