Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft
File:                     B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft (raw, json)
Hash identifier:          hUv/vs59Q1Ma9JOz08h2Jy7B7Vy+qgfVV+QvPiUt+No=
Subject key identifier:   FE:6B:C2:CE:ED:6D:B3:F7:A7:83:6B:04:E5:24:AF:7B:B7:67:4D:7B
Authority key identifier: B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
Certificate issuer:       /CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Certificate serial:       52F4DF8B3D2051424E7752C4175832F140457CE0
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft
Manifest number:          011D
Signing time:             Wed 31 Jul 2024 12:04:56 +0000
Manifest this update:     Wed 31 Jul 2024 11:59:56 +0000
Manifest next update:     Thu 01 Aug 2024 13:36:56 +0000
Files and hashes:         1: 326130363a396634343a3a2f33322d3332203d3e20313530323439.roa (hash: tcC60R3OjaHeGwSTmORXDpyKu9qV4IybL5Q+nNsDgC0=)
                          2: 326130363a396634343a663134303a3a2f34342d3438203d3e20323135363734.roa (hash: ugXzwUU/+w/qdko801fUvszpgqSQbGy5nq6Q38PQPN4=)
                          3: 9682B2FF0EB7AE18049761215DA092A02BD2405E.cer (hash: sfTrV6pq3UNV5+SFSEma986Vd/AYpInm5lK0E8eQSik=)
                          4: 326130363a396634343a663137303a3a2f34342d3438203d3e203437333131.roa (hash: 9jhhlQBf5kEZO6AiRK1xrjoSGlpjxtl7nlHc8pH6akw=)
                          5: B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl (hash: qtbGHRkrKRQBLnblACbCKqrbWypOtG2l33PEVqD+dwU=)
                          6: 326130363a396634343a663365303a3a2f34382d3438203d3e20313530323439.roa (hash: 0fjvdOyyF8A2Z2dyvEMEgnnB9O61IydZOhRYZtOKiCk=)
                          7: 326130363a396634343a3364643a3a2f34382d3438203d3e20313530323439.roa (hash: 6Sirl1mPFlYkSeJDnTK4fKPOsLXorMMY9ZXc/Akijpk=)
                          8: 326130363a396634343a3a2f33362d3438203d3e20313939343539.roa (hash: dF+ul8qucFwNhwS18S5luRCbpkOYSoLS05POUgZo/uo=)
                          9: 326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa (hash: 65qnsbZ/PSu/u6744mywa+3nJ5nDW89U54q9iXre4NM=)
                          10: 326130363a396634343a663132303a3a2f34342d3438203d3e20323033363836.roa (hash: MLANoXxWYaJcGfNL+XeDpDntVMZmEEbOcXznOzAVG2k=)
                          11: 326130363a396634343a663130303a3a2f34342d3438203d3e20323133323933.roa (hash: WPwSkzQmftTMdP2NF4msAGlQy0pqynxEH9ybKWc3p34=)
                          12: 326130363a396634343a663133303a3a2f34342d3438203d3e20323135363833.roa (hash: o8VCBUQYHTq+uKsdJwzlb2ifyiIzF583f3zpiX9ztY0=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f4:df:8b:3d:20:51:42:4e:77:52:c4:17:58:32:f1:40:45:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
        Validity
            Not Before: Jul 31 11:59:56 2024 GMT
            Not After : Aug  1 13:36:56 2024 GMT
        Subject: CN=FE6BC2CEED6DB3F7A7836B04E524AF7BB7674D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:76:43:42:43:57:62:52:5b:f2:8e:10:b7:7c:
                    6d:69:91:dd:43:f3:ea:15:0c:17:1a:8a:d8:76:5d:
                    a3:52:9c:bb:d2:db:16:f3:9d:39:73:0a:9b:f4:fe:
                    e2:5b:6c:28:61:83:17:c3:5b:47:a9:42:c3:b3:4c:
                    da:9d:88:79:ba:ef:a0:00:77:7b:2a:cb:e2:6b:cf:
                    4c:cb:72:4c:9c:c2:85:6c:94:98:0a:8a:5d:f2:c5:
                    cb:88:35:7c:e4:04:51:e5:87:92:ee:98:ca:e0:3d:
                    96:e0:15:e1:7a:76:be:db:1b:2c:4f:db:68:bb:cc:
                    92:e1:c0:d8:6d:b4:43:5a:e2:9b:30:f1:6f:b3:4e:
                    37:04:b2:e4:62:a3:48:b4:eb:9b:ba:f1:66:d3:40:
                    b3:44:cd:d3:56:16:da:69:e3:cd:41:00:00:d3:4c:
                    04:aa:ba:d4:bf:c7:6a:2e:bf:10:d0:44:e7:af:0c:
                    18:a9:22:ab:5b:a2:a2:ee:e0:8b:37:12:9c:38:40:
                    c2:72:91:7f:f9:9a:4a:6f:b4:83:0c:f4:cd:6a:cd:
                    76:99:e6:15:1b:71:b2:c4:98:bb:c6:01:be:75:df:
                    d2:96:01:79:bc:d8:3b:47:cd:9b:70:cf:1f:6c:de:
                    d3:57:d9:7a:a6:26:b8:1b:7b:4a:c5:47:4c:02:f2:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6B:C2:CE:ED:6D:B3:F7:A7:83:6B:04:E5:24:AF:7B:B7:67:4D:7B
            X509v3 Authority Key Identifier:
                keyid:B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:a1:b8:31:8f:8a:dc:cf:3f:d2:8e:77:04:85:20:ad:d2:
         13:25:31:5f:de:2b:33:93:dd:73:14:50:5d:83:a2:68:46:db:
         22:3c:6b:17:bf:66:16:44:c9:bc:cd:13:d2:73:4f:30:66:96:
         47:bf:93:4b:f2:c8:fa:d7:c5:a7:53:85:af:70:32:04:ad:ae:
         4f:18:0c:05:53:c9:40:ab:2d:59:34:da:6e:2d:db:53:b6:de:
         e7:d8:4e:79:e0:03:0c:89:c4:37:fe:22:34:91:6f:6d:be:e2:
         8c:ed:85:34:b4:50:f5:1a:ea:d7:88:2d:93:ff:0f:7a:d8:6b:
         ad:81:c4:1e:28:29:c7:ac:3c:39:4b:f1:31:4f:24:73:c0:92:
         a5:91:77:ce:6a:5e:9d:ca:ea:51:b4:29:f0:5e:38:76:ee:f1:
         59:df:a0:34:ed:18:49:08:38:c1:df:04:43:a9:a9:90:cc:42:
         f8:2a:4d:0c:52:1e:cd:48:f4:21:35:7f:a0:82:5b:5e:bd:c0:
         33:34:f1:cb:75:2d:7b:e2:be:41:11:a1:36:35:77:66:07:bf:
         2f:56:93:a6:72:c7:6f:92:0c:ba:dd:e9:44:28:16:1b:fc:f9:
         29:da:82:78:14:87:81:de:41:88:68:85:45:43:84:2e:db:69:
         1a:3e:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 10:00:18 2024 by rpki-client on console-ams.rpki-client.org