Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/B85CD3A8EF4F91264E65D77BACDB34C1BC19771D.mft
File:                     B85CD3A8EF4F91264E65D77BACDB34C1BC19771D.mft (raw, json)
Hash identifier:          AimJjL3kqETMuMeeiBE37ZVMAjz7PStH+trllxkXwJw=
Subject key identifier:   91:69:4B:DC:FE:5C:0F:61:23:38:B6:71:68:7A:59:DF:D9:A9:EE:DF
Authority key identifier: B8:5C:D3:A8:EF:4F:91:26:4E:65:D7:7B:AC:DB:34:C1:BC:19:77:1D
Certificate issuer:       /CN=437299971559a37bb3a15e27c4ee5d4607d03a3a4313a756ff
Certificate serial:       76B38F8710B3D05A3782FCD78923216E13C4B17C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/437299971559a37bb3a15e27c4ee5d4607d03a3a4313a756ff.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/B85CD3A8EF4F91264E65D77BACDB34C1BC19771D.mft
Manifest number:          05
Signing time:             Sun 12 Nov 2023 14:07:35 +0000
Manifest this update:     Sun 12 Nov 2023 14:02:35 +0000
Manifest next update:     Mon 13 Nov 2023 17:22:35 +0000
Files and hashes:         1: B85CD3A8EF4F91264E65D77BACDB34C1BC19771D.crl (hash: 4FWOe9wu005E7xVxmLtfPyPEISoK7kDvTHo2sdh1Z8Q=)
                          2: 32332e3135362e3130342e302f32342d3234203d3e203135333533.roa (hash: M29mPXusu7Pi/BLxJu7hLRamnIDZGhu7BR7ZTWzYJjU=)
                          3: 323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa (hash: Zh7IX1HQ3AsfEM8kjHhVruW12h+l+L1f59AaUEgtB4U=)
                          4: 323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa (hash: aQxCUPASnzl2m44M+0nAdHIzcAvGjqb2eEsuo152jbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b3:8f:87:10:b3:d0:5a:37:82:fc:d7:89:23:21:6e:13:c4:b1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437299971559a37bb3a15e27c4ee5d4607d03a3a4313a756ff
        Validity
            Not Before: Nov 12 14:02:35 2023 GMT
            Not After : Nov 13 17:22:35 2023 GMT
        Subject: CN=91694BDCFE5C0F612338B671687A59DFD9A9EEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:47:7b:c6:fb:e7:a3:c8:b7:43:04:d9:6e:
                    1b:cf:18:80:f8:4c:29:45:9a:a1:87:33:48:fd:6c:
                    8d:f7:08:05:b5:bd:90:b7:6f:a9:02:e9:e2:fb:5d:
                    e5:c0:ae:b6:04:8f:70:a0:e5:16:98:8e:18:cb:12:
                    54:95:6a:6a:54:0b:49:62:2b:ef:55:d9:c5:08:17:
                    09:8f:c3:ec:96:30:1a:61:68:74:c1:b4:01:f2:52:
                    11:91:45:9e:15:79:d4:4f:38:f6:1c:a1:04:3e:f8:
                    63:66:63:f4:a6:75:a1:62:fe:87:ef:8f:b4:44:62:
                    a0:e9:05:24:60:dd:5d:3d:29:23:5d:22:c9:1f:dd:
                    fd:0b:00:e2:44:72:20:5d:a0:84:68:18:d7:80:d5:
                    01:90:60:7f:88:be:79:30:cc:e0:ca:e7:c6:bc:fb:
                    b9:f7:36:18:46:21:fd:91:38:6b:bf:af:6a:f6:9f:
                    23:5c:10:e7:e8:13:01:a5:5b:f6:f8:83:0f:13:04:
                    07:0e:43:ad:0e:85:bf:62:1b:e1:db:b1:0f:d9:7a:
                    f2:2f:a7:1a:0e:70:f0:21:f1:f6:08:15:f3:83:98:
                    de:5f:c6:af:7a:1a:a7:13:be:25:46:88:26:79:d1:
                    d8:12:c3:8c:b9:bb:75:44:7c:e0:0c:9c:49:8d:28:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:69:4B:DC:FE:5C:0F:61:23:38:B6:71:68:7A:59:DF:D9:A9:EE:DF
            X509v3 Authority Key Identifier:
                keyid:B8:5C:D3:A8:EF:4F:91:26:4E:65:D7:7B:AC:DB:34:C1:BC:19:77:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/B85CD3A8EF4F91264E65D77BACDB34C1BC19771D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/437299971559a37bb3a15e27c4ee5d4607d03a3a4313a756ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/B85CD3A8EF4F91264E65D77BACDB34C1BC19771D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:14:1f:b4:21:9a:d7:f7:c4:84:20:8a:19:81:40:4d:17:
         d7:4e:d3:b0:47:79:94:c5:f7:d2:2a:0a:a1:e3:89:41:64:d4:
         fb:f5:8a:08:06:e2:9e:11:7a:70:9b:05:53:2e:63:8b:ed:bc:
         51:fc:0d:30:55:f4:7f:d3:da:ac:e6:e5:26:86:76:28:c4:e5:
         e6:df:d4:c0:40:fb:c2:c3:e8:46:8c:b7:ad:29:fa:02:8b:71:
         77:46:17:e8:ba:d5:cc:92:5c:3c:21:40:11:b3:a4:49:65:85:
         0a:af:60:69:ee:0a:b2:68:41:17:62:90:c1:a0:96:dd:4f:c8:
         1d:23:3f:96:11:69:c5:88:9f:59:cf:de:df:b4:28:14:48:1c:
         eb:7f:ec:a5:13:3f:9f:f9:07:bc:4d:ed:8e:fe:43:ec:c3:21:
         69:b6:f9:ec:79:6d:a8:9b:6c:3b:c3:90:e3:18:46:fd:be:04:
         4a:7e:a7:88:31:0d:b3:6e:0b:67:e5:f5:a5:ac:ba:50:4b:29:
         07:15:26:42:63:b3:b8:6a:07:1f:4c:06:e3:d4:88:4b:84:7a:
         2e:48:d5:04:8f:ce:e4:a3:f5:c0:2a:93:68:39:f6:56:82:73:
         7c:c9:9c:81:3e:50:cc:2d:07:fe:7e:06:80:69:56:e5:07:e5:
         f2:e2:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 16:11:57 2023 by rpki-client on console-fra.rpki-client.org