Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft
File:                     4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft (raw, json)
Hash identifier:          U53kMiKMWgLx3kK4kaaZMbvA2yFtgPGmPVaiDpplrmE=
Subject key identifier:   AE:58:E1:13:21:08:1A:AE:6E:0D:2B:39:28:15:63:44:A7:3F:E1:96
Authority key identifier: 44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF
Certificate issuer:       /CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
Certificate serial:       447F016AD0AD56F8E20C20D561A444C5AAEF50C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft
Manifest number:          C7
Signing time:             Thu 05 Sep 2024 10:44:31 +0000
Manifest this update:     Thu 05 Sep 2024 10:39:31 +0000
Manifest next update:     Fri 06 Sep 2024 12:05:31 +0000
Files and hashes:         1: 32332e3136342e3135322e302f32342d3234203d3e2030.roa (hash: fzzJlJga8cj1rQ40CH+n+s+F2v3DOEY9s6af/zNmYKQ=)
                          2: 4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl (hash: /7TaUJfnlx3Lw7E2lrEmTuuhc0PKSQwLPH94833i3ac=)
                          3: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: bJHncf04r57gkEli3OQiXlk06GlA13JmXllNdKXQqkc=)
                          4: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 7lCQ+4D+Fvw0Vqlf1IJ8/62maKJB5dyc/yH3C22hdjQ=)
                          5: 32332e3136342e3135332e302f32342d3234203d3e20323135303531.roa (hash: DZplqqmqKCVr74zxujQJWlg4aQ6tAEGc4lwoFScHrSE=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7f:01:6a:d0:ad:56:f8:e2:0c:20:d5:61:a4:44:c5:aa:ef:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
        Validity
            Not Before: Sep  5 10:39:31 2024 GMT
            Not After : Sep  6 12:05:31 2024 GMT
        Subject: CN=AE58E11321081AAE6E0D2B3928156344A73FE196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:82:4c:22:c7:b5:91:fe:01:0b:b0:2b:dd:
                    0b:a1:63:05:2c:32:5f:9b:51:57:41:1d:21:e6:75:
                    d0:70:e9:81:21:36:08:ca:9d:72:7c:a2:78:94:75:
                    99:5c:19:24:4f:7b:f5:36:f6:80:13:40:92:6d:91:
                    1b:4c:3d:f6:18:ac:9f:be:83:88:e2:be:91:08:5d:
                    28:23:4f:ed:d5:e5:b3:2b:a9:c2:ed:5e:28:7d:93:
                    09:a4:6a:c0:32:c6:c8:ab:aa:18:2a:ed:71:72:78:
                    80:20:01:69:4b:34:1a:e5:0f:59:ac:2f:da:73:ad:
                    72:69:c3:a4:1e:3d:d3:22:5d:ce:cb:7b:04:ff:fd:
                    52:dc:91:ef:55:ab:ba:28:b1:47:28:64:e3:ac:47:
                    6a:82:f2:dd:fe:63:b1:62:81:57:a2:12:a5:37:dc:
                    75:c8:29:bd:89:ad:6c:78:30:f2:5b:25:7c:78:62:
                    7f:12:1b:29:aa:20:1f:54:2f:87:2b:e6:5c:19:45:
                    17:bc:90:cb:e9:8d:46:f9:57:41:a9:6a:a8:cf:cb:
                    b6:0f:30:7c:22:ed:86:73:b5:61:69:3d:3e:c3:18:
                    ec:ef:e3:29:91:eb:ac:db:a4:5f:ad:d5:48:bf:54:
                    72:4d:b7:05:82:4d:e2:c4:7e:dd:bb:51:60:dd:85:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:58:E1:13:21:08:1A:AE:6E:0D:2B:39:28:15:63:44:A7:3F:E1:96
            X509v3 Authority Key Identifier:
                keyid:44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ad:31:50:d3:d4:ee:6a:b0:99:eb:9a:4a:f7:36:14:dc:ba:
         9e:25:a0:92:22:b9:6e:ce:df:3b:c8:f6:1a:93:4f:bf:2a:b9:
         1a:97:b2:d6:03:24:12:01:41:6d:37:38:91:0f:c6:39:0c:e4:
         0e:35:0f:aa:f9:5f:b8:c4:03:81:93:02:64:4d:da:c5:d4:75:
         41:63:11:21:66:ac:86:07:5c:80:c3:74:e6:51:18:2a:45:46:
         68:3c:99:7f:21:4f:79:21:06:ad:49:bf:a2:53:3c:f5:ac:e3:
         88:9b:bd:ca:d0:ce:e8:c5:be:5b:30:a5:84:b0:37:e2:f6:d4:
         32:12:53:1c:a6:08:94:50:ac:d2:9a:6e:74:5c:5c:34:c2:7f:
         2b:6e:2d:a7:51:53:96:9a:b8:bb:3b:97:2c:40:ad:77:86:7e:
         55:5f:06:98:48:d0:cb:45:d3:13:b3:b0:f4:0c:91:57:5b:44:
         84:f1:83:49:a3:e5:b7:3d:33:6b:72:48:05:c8:fd:97:4e:80:
         c0:72:7e:63:b4:0f:79:71:f4:01:fe:46:93:9e:ce:5b:d0:89:
         a9:63:d6:16:56:9f:bc:93:e5:65:1e:62:54:b9:af:97:5e:c7:
         9f:31:4b:a5:4e:fc:03:de:43:da:37:33:9b:f0:df:8a:e5:dc:
         d1:2c:2a:07
-----BEGIN CERTIFICATE-----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