Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
File:                     07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft (raw, json)
Hash identifier:          mEZzk5ie/gggwnBmgOEk51QdvQE6SsrUG90MBDFaxEw=
Subject key identifier:   C6:B9:AB:A8:F2:AE:B7:EF:4C:20:ED:21:A6:9F:58:2A:DB:DE:DB:D3
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Certificate issuer:       /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial:       5CF75955587A934D87CFBA3A0E75BAD968D475AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
Manifest number:          BE
Signing time:             Thu 11 Jul 2024 19:19:41 +0000
Manifest this update:     Thu 11 Jul 2024 19:14:41 +0000
Manifest next update:     Fri 12 Jul 2024 21:07:41 +0000
Files and hashes:         1: 28FA507C2092BDD1BBD1B0816C9D71CD4681096C.cer (hash: dQ0N9CKVy3hxnwywpwJUo8yLDsXpt3wwg/MmomIjiLs=)
                          2: 326130373a323438363a6666303a3a2f34342d3438203d3e20323136333930.roa (hash: lpdtyMpTQi0Y5Zw42RBZiyX5zOVSadD9uTrMLpzqTCU=)
                          3: AB988C63F14514C64BA41F5464D70E7BB3EA8764.cer (hash: chx+B9anus/zy+EJkPnSNwLpqQPj8ik0zubrq7LS5+U=)
                          4: 326130373a323438303a3a2f33322d3438203d3e203433363037.roa (hash: pJkuLbGnU3X2bJVPr6ErCwUvKgDfH/rC1D+p0+2tkoY=)
                          5: AS215569.asa (hash: neB1rV+Mf0kvdvSgMpEsfAUwihy8vDtMFnS4Ta4J6B8=)
                          6: AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer (hash: xatF46EgoCuoQ6b73GnREyudGXnf2rIduDBudS6mjrU=)
                          7: 3139332e31372e322e302f32342d3234203d3e203433363037.roa (hash: QV7AW+QX/X6aUgIncvErYRoohj9PT1pN2OjgZR/RRqc=)
                          8: AS43607.asa (hash: sZAu9o3gCJdxhZl/rLbIkl0SqdUp27taq/wDNi4IKdk=)
                          9: 326130373a323438363a6665303a3a2f34342d3438203d3e203434333331.roa (hash: JOh1qDxez9MViTehCFAKFSEpPEUI46E4zUCwiRpViWk=)
                          10: 326130373a323438363a343030663a3a2f34382d3438203d3e20323134393030.roa (hash: JVYwjDBhfdlpoA1NjQkIy2F5GvCl3ZhHo6E2kO0aNUk=)
                          11: 86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer (hash: ScQfetH0RLx+2RK3OECS4B54DAj4IKITJ2d/b8TY5+4=)
                          12: 07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl (hash: 4acVM1Js5V9/MP4I87bPe6hfPASrt0VL8GH7KkAj/FI=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f7:59:55:58:7a:93:4d:87:cf:ba:3a:0e:75:ba:d9:68:d4:75:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
        Validity
            Not Before: Jul 11 19:14:41 2024 GMT
            Not After : Jul 12 21:07:41 2024 GMT
        Subject: CN=C6B9ABA8F2AEB7EF4C20ED21A69F582ADBDEDBD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:18:64:14:9a:a7:a3:fe:fb:78:fc:f4:a4:
                    f2:5b:72:04:9c:5e:38:0c:5f:14:20:30:7c:3f:3a:
                    51:0d:1f:e0:17:29:74:e4:fa:39:48:42:f4:f8:8b:
                    b5:96:f3:a1:71:26:b7:f6:0f:d6:6f:1c:36:c7:e0:
                    60:02:82:ed:9b:ad:5c:ef:a2:05:79:16:04:f2:36:
                    83:7e:0f:f2:bf:9e:12:e0:de:de:77:89:cb:cd:e1:
                    cc:f6:34:20:3a:14:6b:a1:a8:f3:49:14:51:72:3c:
                    df:7d:13:df:65:21:94:69:a3:6e:d4:67:b4:e5:3d:
                    a1:21:88:75:8c:81:81:52:be:4d:bc:e8:d1:39:5b:
                    0a:a2:33:e3:7c:a0:8a:3a:c8:2d:e9:64:03:28:9a:
                    ba:2d:59:65:ae:31:fe:31:69:9f:aa:9c:08:bc:bd:
                    d3:90:8a:28:a0:13:0f:46:1c:9d:27:bc:bd:cf:b9:
                    04:58:fd:ec:24:18:42:95:ac:48:32:d5:8a:f1:f4:
                    87:ec:54:30:07:7b:cb:35:c7:e4:2f:ca:2b:7b:1d:
                    ff:22:3c:4e:3b:0a:e4:be:e6:4b:fb:bc:f3:a7:80:
                    e1:f9:e4:29:36:77:b9:e3:18:21:23:eb:68:31:0f:
                    c1:6c:fe:d9:b7:f4:e1:f2:a8:b4:db:a0:aa:6b:14:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B9:AB:A8:F2:AE:B7:EF:4C:20:ED:21:A6:9F:58:2A:DB:DE:DB:D3
            X509v3 Authority Key Identifier:
                keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ae:bb:45:b7:19:78:e2:b2:4c:e4:a8:8d:7b:e5:53:95:ca:
         45:9e:69:db:65:3c:47:b7:aa:41:57:5b:cf:db:a8:65:e2:0f:
         99:b9:c2:9c:de:dc:08:21:44:b2:05:9d:e7:ce:cf:98:32:5a:
         74:7c:53:6a:69:70:36:33:bf:68:5a:19:4c:6a:56:e9:38:d0:
         5f:bb:67:f1:28:7b:e1:33:e5:40:03:51:3d:ec:56:6f:58:3f:
         0f:86:f3:8f:6f:81:cd:69:ee:ab:00:80:11:c7:e5:ba:ed:63:
         f3:0e:b7:00:b4:73:26:89:77:34:80:f8:26:11:31:e0:37:9a:
         ee:c0:4f:8d:34:47:74:6b:a9:8c:72:e2:33:47:88:06:01:0c:
         ac:2a:d5:89:07:b1:e0:f3:e8:ff:47:b0:80:58:22:04:18:8c:
         18:d0:06:0e:be:e3:11:b8:84:b1:a2:bf:ee:23:62:6a:6e:59:
         a4:b0:92:d3:fe:7f:3c:2b:db:aa:a5:bd:4c:7f:4c:2d:f0:c8:
         28:bf:ab:42:8f:87:03:59:5a:ea:c4:54:ea:ed:81:8f:6b:9f:
         8c:6a:48:77:ef:28:6e:b7:a7:fa:fc:09:bb:7f:bb:61:39:17:
         16:5a:af:52:47:97:4a:65:8d:d6:64:43:91:20:ad:c1:ee:6b:
         da:2f:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----