Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.mft
File:                     A762083DD83BF60996D5F11D4DF4EEE568746B14.mft (raw, json)
Hash identifier:          ipVudwSCzemq6crfJlV5dLU7TFwTRjPfHY0uNeTJcjw=
Subject key identifier:   F2:CD:B6:14:5B:87:71:52:F9:80:56:FD:51:52:39:4E:B0:49:55:E6
Authority key identifier: A7:62:08:3D:D8:3B:F6:09:96:D5:F1:1D:4D:F4:EE:E5:68:74:6B:14
Certificate issuer:       /CN=a762083dd83bf60996d5f11d4df4eee568746b14
Certificate serial:       524DBEAE10C5C666FED84520030469DF23851580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2IIPdg79gmW1fEdTfTu5Wh0axQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.mft
Manifest number:          02
Signing time:             Tue 23 Jul 2024 19:49:44 +0000
Manifest this update:     Tue 23 Jul 2024 19:44:44 +0000
Manifest next update:     Wed 24 Jul 2024 21:43:44 +0000
Files and hashes:         1: A762083DD83BF60996D5F11D4DF4EEE568746B14.crl (hash: HTQvAIt3wnUgppmJ+kDUuQuEc8xb5Od1wL9SJPRBpsQ=)
                          2: AS213086.asa (hash: yqKfcFk2vU6zPrb8S6VKTzxrrn1oFKDf29x3fA5bQ1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4d:be:ae:10:c5:c6:66:fe:d8:45:20:03:04:69:df:23:85:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a762083dd83bf60996d5f11d4df4eee568746b14
        Validity
            Not Before: Jul 23 19:44:44 2024 GMT
            Not After : Jul 24 21:43:44 2024 GMT
        Subject: CN=F2CDB6145B877152F98056FD5152394EB04955E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:37:8b:b8:cf:46:ff:5d:2f:3d:08:cc:1d:
                    f9:1f:f8:a5:0c:d8:8e:ec:8a:55:f9:70:bd:92:f3:
                    cc:af:47:a0:2c:34:30:6a:fe:dd:32:b0:1f:1a:d2:
                    c8:c1:dd:2a:ae:4c:8b:6c:dd:67:53:39:f1:08:93:
                    ed:33:36:77:cd:4b:b0:9e:51:ac:e6:df:54:90:00:
                    e1:48:00:84:62:0f:cd:24:68:c9:22:b2:0e:61:e8:
                    00:2d:12:36:d3:f4:5c:a9:f0:65:d2:fa:a1:4d:69:
                    21:4b:46:57:d0:fd:01:90:7c:63:47:04:9e:7b:16:
                    79:fb:6a:be:fc:d8:59:7c:a5:a9:ab:2c:35:20:e3:
                    9b:34:6b:11:1d:e1:75:f2:b3:59:53:38:72:53:34:
                    87:06:3d:90:8a:37:08:6c:1f:34:c8:1f:8d:fa:3d:
                    a5:92:35:b2:1b:e0:aa:19:09:af:b7:fc:50:4a:c7:
                    34:17:ed:70:dd:99:40:de:15:16:47:e3:34:a6:2d:
                    51:e2:cf:73:19:54:99:00:f7:09:ac:6d:2e:45:64:
                    de:05:58:ce:12:9b:5f:61:aa:75:a5:96:cf:f5:30:
                    20:0c:bd:18:51:38:e6:65:5d:a1:40:76:e1:2a:76:
                    4a:04:ea:b1:05:f5:5f:c3:fa:67:46:3e:d5:bf:52:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:B6:14:5B:87:71:52:F9:80:56:FD:51:52:39:4E:B0:49:55:E6
            X509v3 Authority Key Identifier:
                keyid:A7:62:08:3D:D8:3B:F6:09:96:D5:F1:1D:4D:F4:EE:E5:68:74:6B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2IIPdg79gmW1fEdTfTu5Wh0axQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:b8:a6:2b:03:e8:23:a0:04:b3:20:a5:e3:0e:df:7e:32:
         3d:91:49:a6:89:8e:4a:1a:40:74:7b:f7:f8:55:80:d2:e1:06:
         08:a5:f7:0e:a1:db:ab:09:0f:79:09:8e:27:a9:00:6f:aa:7c:
         e7:de:3d:11:76:a8:a2:d3:3e:f4:c9:fa:97:3f:08:bd:3c:e5:
         ab:cf:bd:4a:94:c2:c0:4c:5c:5a:27:4f:8e:50:77:58:95:50:
         06:09:49:3d:14:ee:7c:5f:f0:17:d9:e0:c2:f3:86:70:45:11:
         a7:f2:71:66:94:2d:65:fd:27:ed:ac:ae:e9:94:93:a9:4d:bd:
         2a:f2:01:67:5c:33:85:f0:73:31:2a:bd:01:32:1a:eb:ac:da:
         e1:53:dd:f5:12:c1:e7:0b:64:7a:50:51:b5:76:1d:6b:32:8c:
         0d:b0:54:0c:49:20:54:46:83:1a:3a:e5:49:5c:23:6e:6f:7a:
         04:0d:c1:e8:89:3e:5a:ca:5b:53:72:80:49:59:f3:dc:d0:f8:
         7f:9a:e7:02:50:25:90:94:65:04:05:2f:f3:60:62:fa:d1:6a:
         ec:e2:c9:45:35:e2:48:3a:f9:19:69:ab:2b:f5:50:9b:63:cc:
         a6:25:ba:c1:3b:9b:cc:05:98:43:20:38:33:d2:09:e2:b2:64:
         d0:57:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----