Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File:                     40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier:          ByFMHgC/kFtjjE4wZpbVc74Qxe3ZYKquMluqteboCtg=
Subject key identifier:   55:33:C8:8C:EE:C2:2F:05:35:87:48:20:DD:1A:0B:8B:8A:47:74:1F
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer:       /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial:       22925F0EBF7D6C040701EEF9BD800D09517F5B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number:          03C0
Signing time:             Sun 13 Apr 2025 00:18:34 +0000
Manifest this update:     Sun 13 Apr 2025 00:13:34 +0000
Manifest next update:     Mon 14 Apr 2025 02:01:34 +0000
Files and hashes:         1: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: HT0EWcY81UMGZIsX6Um1qtwoJK5xkczdXaUAt+9/9o8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:92:5f:0e:bf:7d:6c:04:07:01:ee:f9:bd:80:0d:09:51:7f:5b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
        Validity
            Not Before: Apr 13 00:13:34 2025 GMT
            Not After : Apr 14 02:01:34 2025 GMT
        Subject: CN=5533C88CEEC22F0535874820DD1A0B8B8A47741F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:45:19:45:d5:13:7e:4f:f6:97:a3:74:b7:
                    f9:70:b1:a1:ab:90:fd:2a:c6:fe:b3:d9:35:12:02:
                    f3:ac:b7:d5:e8:ec:33:fc:96:8d:86:df:0b:28:c0:
                    6e:35:40:6b:55:02:41:69:4e:63:6b:18:6b:d1:87:
                    cf:ec:43:df:6e:7b:bd:b3:0f:dd:c5:92:81:e5:6a:
                    bd:5c:7b:4e:7d:24:9f:01:a4:aa:71:26:5b:9d:0d:
                    2f:9f:93:04:7c:1d:48:de:92:4e:2a:45:f8:39:90:
                    50:a7:f4:4f:3a:6c:61:61:7d:62:df:4a:41:93:63:
                    e3:dd:c7:ab:46:31:b4:3a:e1:3b:d7:32:69:fb:d0:
                    3f:59:e3:8d:78:1b:68:57:d5:a2:45:aa:cf:fb:c6:
                    58:c1:64:ce:db:78:20:62:2d:50:cf:8d:36:21:63:
                    18:6f:71:d4:16:9f:91:21:28:46:cf:b0:75:d7:6f:
                    a0:fd:0c:04:4c:45:3e:1e:14:24:56:d2:69:12:86:
                    68:96:00:9b:46:d2:ba:b4:43:d2:33:d2:4a:08:94:
                    a8:e0:7b:61:f2:f8:bc:a8:aa:45:18:cb:0b:a7:f5:
                    01:25:c0:5e:87:c0:cd:77:be:4a:bc:fd:50:0e:3f:
                    72:9d:7b:5e:c6:43:2a:7a:c1:97:7e:4d:65:56:c1:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:33:C8:8C:EE:C2:2F:05:35:87:48:20:DD:1A:0B:8B:8A:47:74:1F
            X509v3 Authority Key Identifier:
                keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:21:b9:46:eb:68:34:21:15:0e:0b:42:b9:fb:e0:16:3f:8e:
         4a:8b:cc:76:cd:42:1a:bf:dc:5d:56:07:c0:bb:56:c2:0a:a9:
         cd:92:f2:4f:96:7c:44:80:fd:78:d6:57:2b:56:54:0a:3f:77:
         4d:0d:a4:a4:96:03:be:85:54:a8:9c:7d:1d:42:db:57:c2:83:
         b9:f6:82:dc:f5:ec:10:67:59:24:59:4e:b2:b8:72:40:18:ea:
         f8:00:56:5d:b6:02:41:59:1d:60:b7:f8:28:f1:ea:db:ba:7f:
         f6:77:01:79:24:87:85:33:68:1d:d4:bc:36:32:b4:c6:9d:cc:
         df:1d:b2:b5:f9:72:73:65:35:37:b5:a2:7e:54:ca:77:51:6e:
         94:88:7f:a6:1b:19:55:b5:23:61:1f:87:0a:2e:5c:8f:a3:33:
         73:1a:5b:2c:42:b0:a2:aa:46:32:98:1d:80:7d:36:90:ee:48:
         18:d9:17:39:8e:8e:e1:a4:f9:b7:d5:f7:56:ab:bc:13:7f:f9:
         5b:13:9d:1b:9d:3f:17:22:16:eb:f0:6b:ca:19:c1:18:dd:f0:
         e7:60:40:a1:2a:18:2e:26:ed:72:c2:a3:30:22:58:4c:78:da:
         ec:73:86:e9:3c:2d:25:a4:4c:e4:11:89:c2:1e:c6:78:63:7c:
         a4:af:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----