Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/66950426E34C31CE2D1F2604E94F4D1A65D61995.mft
File:                     66950426E34C31CE2D1F2604E94F4D1A65D61995.mft (raw, json)
Hash identifier:          JJay0QRHBGq7JgF3C3X9HEH6X78jhdjKBdGEyXbf3H4=
Subject key identifier:   51:CC:38:E1:0A:32:72:F9:2C:D6:47:9C:C2:9D:5D:20:0D:85:2F:10
Authority key identifier: 66:95:04:26:E3:4C:31:CE:2D:1F:26:04:E9:4F:4D:1A:65:D6:19:95
Certificate issuer:       /CN=66950426E34C31CE2D1F2604E94F4D1A65D61995
Certificate serial:       4AFBEE9559CA0008A2CDE33BF1345CB0A5BE4546
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/66950426E34C31CE2D1F2604E94F4D1A65D61995.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/66950426E34C31CE2D1F2604E94F4D1A65D61995.mft
Manifest number:          35
Signing time:             Tue 21 May 2024 06:14:05 +0000
Manifest this update:     Tue 21 May 2024 06:09:05 +0000
Manifest next update:     Wed 22 May 2024 07:31:05 +0000
Files and hashes:         1: 66950426E34C31CE2D1F2604E94F4D1A65D61995.crl (hash: +Nw1mODT/6rKd+Y13HrnbSPiMCRGPkT1XOqjSPo+C9k=)
                          2: 326131333a646638303a376530303a3a2f34342d3438203d3e20323034383434.roa (hash: MuwqZk1rxz6oimIhilBXAUI1GFyX38ZQFKGo/L0/Ewk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fb:ee:95:59:ca:00:08:a2:cd:e3:3b:f1:34:5c:b0:a5:be:45:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66950426E34C31CE2D1F2604E94F4D1A65D61995
        Validity
            Not Before: May 21 06:09:05 2024 GMT
            Not After : May 22 07:31:05 2024 GMT
        Subject: CN=51CC38E10A3272F92CD6479CC29D5D200D852F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:5a:9c:c0:71:19:f6:60:e7:2b:06:c4:1e:
                    bb:51:43:5f:a1:ec:f3:0b:61:01:c6:8c:69:5c:cc:
                    9f:64:34:01:c1:a9:9d:08:f4:cb:1f:5f:02:12:1b:
                    e4:16:9b:ec:38:1e:81:09:4c:db:21:01:e9:f9:c5:
                    f0:e1:d1:3b:79:6b:46:77:83:51:8b:cd:b9:2a:f9:
                    55:52:23:8d:4c:8c:ee:e6:e0:71:8b:c6:5f:30:f1:
                    0c:89:75:ce:1c:80:0e:21:8f:85:58:85:4e:39:10:
                    f0:9c:f0:a5:2d:ae:52:aa:40:c6:27:d1:d6:e1:68:
                    6a:9c:17:92:79:6a:cb:c0:09:84:7c:9c:b8:5d:95:
                    d1:3b:04:4d:0f:38:3a:fe:dc:23:1d:94:be:97:50:
                    53:3f:96:4b:3c:23:2c:a4:c8:64:61:ba:81:35:57:
                    78:3c:32:d0:85:93:4d:43:06:02:d7:8d:7e:bb:44:
                    e4:97:a4:ee:ff:2b:e2:db:79:3c:d8:f7:d5:b4:cb:
                    d5:2a:86:80:90:49:2b:07:e7:23:19:db:cd:73:8c:
                    b7:0d:38:d3:36:b4:4c:40:17:48:f3:49:60:25:71:
                    51:d0:e7:55:be:af:7a:67:b8:d1:e7:3f:40:2b:cd:
                    4a:64:c3:d3:8b:85:84:58:c4:e9:85:d6:7f:63:2f:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CC:38:E1:0A:32:72:F9:2C:D6:47:9C:C2:9D:5D:20:0D:85:2F:10
            X509v3 Authority Key Identifier:
                keyid:66:95:04:26:E3:4C:31:CE:2D:1F:26:04:E9:4F:4D:1A:65:D6:19:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/66950426E34C31CE2D1F2604E94F4D1A65D61995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/66950426E34C31CE2D1F2604E94F4D1A65D61995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/66950426E34C31CE2D1F2604E94F4D1A65D61995.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:ea:f0:48:1c:3d:f5:4d:e1:f8:57:51:d5:c5:3c:ad:91:
         84:60:3c:67:08:3e:75:5d:3f:c0:4b:57:4a:17:7a:c1:52:21:
         ca:1a:c2:14:59:56:83:63:d7:72:89:59:86:f3:e7:ff:41:34:
         1e:96:2f:13:08:9a:47:e6:86:ac:a5:23:36:f1:5e:32:53:ab:
         5b:e7:31:d0:15:c1:5a:95:ac:fd:ba:f6:fd:4f:40:a0:b8:aa:
         01:d3:54:d6:10:e6:d8:89:be:9a:68:8e:6f:98:61:b1:6b:1f:
         1c:0d:74:54:3e:b8:d3:8f:05:dc:2a:2d:8d:27:d4:cc:83:19:
         5b:7b:4c:7f:5d:8c:28:3e:09:1a:c0:68:d7:43:42:82:05:fd:
         8c:eb:77:95:25:f5:89:82:26:b6:d1:5e:38:ef:7f:1f:0b:e8:
         36:61:8b:5b:6d:e0:33:12:7c:71:e9:34:b3:38:11:48:fb:a8:
         f5:87:14:e7:b7:a1:68:f8:d8:70:9b:1b:f8:05:86:88:8e:1d:
         15:a2:3e:53:8b:65:58:1e:a7:52:80:aa:50:6f:97:15:46:a2:
         f1:48:2d:13:b5:fc:cd:ee:b5:b5:67:39:7f:b7:dc:9d:fa:ff:
         f2:e4:7f:61:70:81:a0:90:3f:dc:e7:05:d1:ef:f4:ae:0f:25:
         a3:ac:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----