Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft
File:                     98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft (raw, json)
Hash identifier:          1u/fY8IIg8WSyQsdGhAIdsNVza0noVLJFgOkGURZGOU=
Subject key identifier:   83:67:42:42:BB:38:A6:C5:E4:11:26:18:52:31:63:03:E8:6F:D7:EF
Authority key identifier: 98:AF:B7:4D:27:42:CE:8D:BE:4E:FE:AA:0E:96:BC:FE:52:A9:09:CB
Certificate issuer:       /CN=98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB
Certificate serial:       382B2112AC3AAAF6D22747F25D50FD3F3AC221
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft
Manifest number:          017E
Signing time:             Wed 22 Jan 2025 21:41:35 +0000
Manifest this update:     Wed 22 Jan 2025 21:36:35 +0000
Manifest next update:     Thu 23 Jan 2025 23:58:35 +0000
Files and hashes:         1: 98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.crl (hash: TD2R5iof/xGkGBJuA6rW6yIfQytqMyGFQTLD2eoRBcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2b:21:12:ac:3a:aa:f6:d2:27:47:f2:5d:50:fd:3f:3a:c2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB
        Validity
            Not Before: Jan 22 21:36:35 2025 GMT
            Not After : Jan 23 23:58:35 2025 GMT
        Subject: CN=83674242BB38A6C5E411261852316303E86FD7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:98:3a:28:e8:3e:fc:dc:68:b2:e5:16:a1:
                    1a:7a:df:9c:7b:1f:11:f9:f3:bd:80:07:ce:48:a2:
                    b8:0d:a3:a6:7c:a8:e6:1c:b4:cf:52:62:64:c5:ac:
                    ee:1e:8c:49:96:e0:96:a0:dc:09:99:7d:d8:9a:04:
                    4b:7c:2e:42:79:40:b2:10:25:53:a7:45:23:d2:ca:
                    63:7a:eb:7c:96:eb:e3:20:c6:3e:be:61:b6:19:f7:
                    91:f2:be:da:b7:64:fe:17:a4:9a:de:0b:f3:90:f4:
                    c9:6f:34:b5:a8:c9:ec:85:0f:60:ec:e6:e7:32:d1:
                    78:fd:7d:84:aa:bb:ee:9e:c5:96:a1:8a:2b:c7:36:
                    de:84:94:a0:54:90:2e:87:da:e5:92:c5:81:1b:a8:
                    26:29:bc:01:26:41:e7:96:0b:28:3c:28:d3:43:ed:
                    c3:65:c0:b2:9c:11:6c:ab:82:cc:0a:e1:95:5f:72:
                    0c:68:6d:16:f3:5a:bc:51:60:da:28:90:72:58:a9:
                    1b:6e:7d:d5:c9:7f:60:45:6a:44:58:50:66:86:c5:
                    5d:49:44:f3:fd:10:72:5f:2b:9f:12:b7:4d:d3:b0:
                    64:46:51:76:64:bc:55:de:f5:4b:cc:18:8a:72:95:
                    94:a7:2e:af:74:9a:5b:5c:49:4a:63:42:30:50:75:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:67:42:42:BB:38:A6:C5:E4:11:26:18:52:31:63:03:E8:6F:D7:EF
            X509v3 Authority Key Identifier:
                keyid:98:AF:B7:4D:27:42:CE:8D:BE:4E:FE:AA:0E:96:BC:FE:52:A9:09:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:be:b4:23:7b:a4:f6:87:e9:43:1f:eb:a1:92:99:cd:38:92:
         40:2c:be:9c:4c:de:e7:ad:bf:dd:57:67:07:e9:a4:8f:28:b2:
         df:20:b3:90:0c:8b:dc:ed:52:8a:9f:a5:a4:87:bb:97:80:1e:
         08:ca:93:c4:be:72:7a:0a:2a:bd:1f:83:f1:e1:4e:32:b7:ba:
         af:de:99:67:aa:91:a3:59:14:47:ff:06:d0:e1:52:9c:c6:69:
         af:e9:28:7a:e0:1a:bb:a2:20:7d:a7:36:02:68:6b:17:96:2d:
         77:8d:e6:29:69:5f:f2:71:7d:94:81:f1:46:77:ac:ae:5a:fa:
         20:21:1f:1e:9a:b4:69:d2:c5:ef:fd:47:0b:6f:07:35:d7:c0:
         28:f7:89:93:6e:aa:df:79:00:77:c3:11:b7:9a:f4:88:e9:f9:
         0e:87:fb:bf:f2:9f:0e:5f:a0:9b:74:8f:9c:2a:17:75:2a:7f:
         9e:1d:1e:2e:03:6f:9c:2c:e6:25:5d:84:15:30:d5:70:d2:4e:
         43:8e:08:e6:8b:75:c3:a3:24:89:ac:f7:06:de:b3:1d:35:37:
         da:01:96:28:09:c3:42:fb:94:eb:a9:96:e2:42:c8:20:ef:ca:
         96:63:34:e8:ab:32:34:0c:76:d8:a4:17:40:c1:e7:bf:b0:62:
         d1:ac:5e:c4
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgITOCshEqw6qvbSJ0fyXVD9PzrCITANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg5OEFGQjc0RDI3NDJDRThEQkU0RUZFQUEwRTk2QkNGRTUy
QTkwOUNCMB4XDTI1MDEyMjIxMzYzNVoXDTI1MDEyMzIzNTgzNVowMzExMC8GA1UE
AxMoODM2NzQyNDJCQjM4QTZDNUU0MTEyNjE4NTIzMTYzMDNFODZGRDdFRjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL+0mDoo6D783Giy5RahGnrfnHsf
EfnzvYAHzkiiuA2jpnyo5hy0z1JiZMWs7h6MSZbglqDcCZl92JoES3wuQnlAshAl
U6dFI9LKY3rrfJbr4yDGPr5hthn3kfK+2rdk/hekmt4L85D0yW80tajJ7IUPYOzm
5zLReP19hKq77p7FlqGKK8c23oSUoFSQLofa5ZLFgRuoJim8ASZB55YLKDwo00Pt
w2XAspwRbKuCzArhlV9yDGhtFvNavFFg2iiQclipG2591cl/YEVqRFhQZobFXUlE
8/0Qcl8rnxK3TdOwZEZRdmS8Vd71S8wYinKVlKcur3SaW1xJSmNCMFB1FJsCAwEA
AaOCAoIwggJ+MB0GA1UdDgQWBBSDZ0JCuzimxeQRJhhSMWMD6G/X7zAfBgNVHSME
GDAWgBSYr7dNJ0LOjb5O/qoOlrz+UqkJyzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUtYmFkNy1iNDI4MThjZjUw
ZTgvNy85OEFGQjc0RDI3NDJDRThEQkU0RUZFQUEwRTk2QkNGRTUyQTkwOUNCLmNy
bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j
LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0
MS1iY2MxLTI3NjU0M2EyNWM3ZC8wLzk4QUZCNzREMjc0MkNFOERCRTRFRkVBQTBF
OTZCQ0ZFNTJBOTA5Q0IuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzcvOThBRkI3NEQy
NzQyQ0U4REJFNEVGRUFBMEU5NkJDRkU1MkE5MDlDQi5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABa+tCN7
pPaH6UMf66GSmc04kkAsvpxM3uetv91XZwfppI8ost8gs5AMi9ztUoqfpaSHu5eA
HgjKk8S+cnoKKr0fg/HhTjK3uq/emWeqkaNZFEf/BtDhUpzGaa/pKHrgGruiIH2n
NgJoaxeWLXeN5ilpX/JxfZSB8UZ3rK5a+iAhHx6atGnSxe/9RwtvBzXXwCj3iZNu
qt95AHfDEbea9Ijp+Q6H+7/ynw5foJt0j5wqF3Uqf54dHi4Db5ws5iVdhBUw1XDS
TkOOCOaLdcOjJIms9wbesx01N9oBligJw0L7lOupluJCyCDvypZjNOirMjQMdtik
F0DB57+wYtGsXsQ=
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:19:17 2025 by rpki-client on console.sobornost.net