Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft
File:                     DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft (raw, json)
Hash identifier:          LYNS6WF6cC7q3QJlPzvd+vjRYW5TBw55PDmhCqNuRm0=
Subject key identifier:   AD:29:6E:EF:BB:72:2D:86:27:47:4F:4D:11:58:B7:29:50:82:1A:91
Authority key identifier: DD:52:D1:8E:6E:E1:2F:A0:65:9C:A4:CA:95:01:A1:76:AF:07:44:03
Certificate issuer:       /CN=DD52D18E6EE12FA0659CA4CA9501A176AF074403
Certificate serial:       2B04D506B48A239F333E424925E9D375877B81EC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft
Manifest number:          2A
Signing time:             Thu 26 Sep 2024 22:13:00 +0000
Manifest this update:     Thu 26 Sep 2024 22:08:00 +0000
Manifest next update:     Sat 28 Sep 2024 00:51:00 +0000
Files and hashes:         1: DD52D18E6EE12FA0659CA4CA9501A176AF074403.crl (hash: PxsHShte5M2f8/5Z+JvsMtWgMNMmrPFDR94Lca3BQV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:04:d5:06:b4:8a:23:9f:33:3e:42:49:25:e9:d3:75:87:7b:81:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD52D18E6EE12FA0659CA4CA9501A176AF074403
        Validity
            Not Before: Sep 26 22:08:00 2024 GMT
            Not After : Sep 28 00:51:00 2024 GMT
        Subject: CN=AD296EEFBB722D8627474F4D1158B72950821A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:3e:28:12:07:fc:a9:0a:0b:57:c5:f3:20:
                    c9:f8:6c:97:6e:ac:ce:18:1b:d5:2c:57:fa:ba:11:
                    68:06:89:ac:2b:ae:ae:82:cf:96:3f:79:f4:c6:bd:
                    2f:c1:9e:3d:c5:81:57:b5:cf:8d:f4:ee:4b:d0:6f:
                    06:c6:7a:f2:1b:5d:d1:17:60:90:48:e6:f1:76:db:
                    97:40:1f:3f:20:45:69:5d:30:05:68:a0:79:f6:74:
                    1c:4d:1c:33:0d:71:a5:70:07:d6:66:12:96:3c:2b:
                    c3:6a:b5:e6:cd:8f:bf:40:cf:f2:8b:d1:89:17:1b:
                    ff:e2:64:7e:ad:a8:5a:56:3e:c2:50:de:3f:44:94:
                    04:77:d6:50:26:e5:ec:c1:3b:dc:fc:ca:49:b3:2a:
                    96:98:55:04:eb:da:4f:57:5a:24:f3:ad:ab:b3:66:
                    71:9c:88:43:89:6b:e6:3e:d3:f6:0d:2e:5a:11:ba:
                    88:d4:6d:70:0e:ad:18:20:07:0e:f2:37:cd:4b:d4:
                    02:12:a0:09:72:de:c8:02:2a:47:3c:10:46:ba:c1:
                    f8:84:88:6a:2f:cd:ab:fb:49:2a:e6:e5:15:16:bd:
                    74:a6:07:3b:06:8d:3e:96:99:bb:c1:94:89:15:43:
                    18:fa:3f:c5:2d:01:32:f5:29:3d:9e:cf:90:49:c2:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:29:6E:EF:BB:72:2D:86:27:47:4F:4D:11:58:B7:29:50:82:1A:91
            X509v3 Authority Key Identifier:
                keyid:DD:52:D1:8E:6E:E1:2F:A0:65:9C:A4:CA:95:01:A1:76:AF:07:44:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:a7:c8:9d:07:63:80:9f:54:aa:f1:ba:d1:4c:cc:14:e8:
         01:0f:01:e5:ea:23:59:3d:ec:11:e2:64:74:d1:fe:ec:84:77:
         49:78:c4:f3:00:83:86:a4:c8:06:f3:8d:8a:b9:3c:fb:e2:78:
         79:9e:ea:85:fa:09:ee:a1:23:b2:6d:90:66:9f:4a:45:1d:c4:
         1c:af:1e:5c:18:b2:da:61:03:e6:3d:e0:c8:6f:9b:93:4a:e1:
         25:c0:4e:1a:1c:bc:da:32:93:95:35:84:0a:4a:4a:7d:cd:4b:
         b1:3a:72:2f:de:0f:24:97:30:26:f2:65:fe:86:a1:fd:88:02:
         2c:43:7a:70:84:e6:5a:db:cd:97:a3:ef:6b:71:79:d9:40:46:
         42:b6:9a:67:cd:9b:46:a7:40:8c:bc:5d:06:9f:df:3d:a2:ce:
         d1:9c:d3:07:d6:9d:c1:6c:e4:e9:69:2c:2a:83:a2:c6:b6:5a:
         32:f9:9b:b4:84:59:0b:93:7b:d8:0c:f0:a3:3e:fe:07:32:ee:
         a1:04:40:ca:e4:f5:af:99:af:73:70:bc:d2:3f:04:04:9b:5a:
         be:45:93:89:64:29:e0:78:17:19:91:c2:0a:c5:b7:c2:4e:99:
         bd:74:9e:75:c8:f3:d0:2d:22:54:99:c5:fa:09:db:ab:e0:ed:
         c8:23:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----