Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/4/77659DA62CB45DCA8D08DF5273E511C90092A5DC.mft
File:                     77659DA62CB45DCA8D08DF5273E511C90092A5DC.mft (raw, json)
Hash identifier:          5YgoPwu5+esGjl61UI3SwgfNMXyt5lYIOkeRzHRlSgQ=
Subject key identifier:   4A:CB:4B:03:BA:9F:3B:FD:24:4D:FB:49:02:29:E8:34:7D:19:43:0A
Authority key identifier: 77:65:9D:A6:2C:B4:5D:CA:8D:08:DF:52:73:E5:11:C9:00:92:A5:DC
Certificate issuer:       /CN=200ae5435faaa2d4b83fbf01a5f873c76d0758f5453185f337
Certificate serial:       5FBED371C93C23FA4EA53C903968259E9A5CA6DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161/200ae5435faaa2d4b83fbf01a5f873c76d0758f5453185f337.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/4/77659DA62CB45DCA8D08DF5273E511C90092A5DC.mft
Manifest number:          08
Signing time:             Wed 22 May 2024 15:44:17 +0000
Manifest this update:     Wed 22 May 2024 15:39:17 +0000
Manifest next update:     Thu 23 May 2024 17:42:17 +0000
Files and hashes:         1: 77659DA62CB45DCA8D08DF5273E511C90092A5DC.crl (hash: 5dDNEJhs8GYFUVriSbZOcZuA6YhwF/b+VZVjXIrEuAA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:be:d3:71:c9:3c:23:fa:4e:a5:3c:90:39:68:25:9e:9a:5c:a6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200ae5435faaa2d4b83fbf01a5f873c76d0758f5453185f337
        Validity
            Not Before: May 22 15:39:17 2024 GMT
            Not After : May 23 17:42:17 2024 GMT
        Subject: CN=4ACB4B03BA9F3BFD244DFB490229E8347D19430A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:6a:25:fb:ed:d8:3d:7d:bf:d0:54:42:2f:
                    cf:a5:a0:ad:18:75:31:d8:b0:8b:67:6c:ec:19:e0:
                    44:09:7f:dd:35:ff:7d:54:59:11:0e:42:c2:e6:67:
                    3a:70:99:bd:20:e9:13:fd:22:5b:f3:ac:e2:08:a8:
                    69:79:82:23:23:28:cd:3e:b2:33:d6:cd:b3:c6:0d:
                    55:6a:f8:61:4c:b8:df:d5:33:03:5d:80:dc:d6:4e:
                    29:61:cc:2a:ee:a3:07:e9:a2:4e:a3:9d:dd:c1:0c:
                    bb:48:32:ab:36:3b:34:b2:2f:8c:d0:9c:8c:3d:2c:
                    3f:58:bf:51:7b:98:64:fc:95:43:09:47:6d:d6:d5:
                    cb:98:d3:00:9c:12:56:a2:83:45:8d:7f:f4:d7:a4:
                    38:be:d6:a5:30:ad:f9:7a:0d:a1:ae:9e:1d:36:26:
                    28:13:cb:9b:ab:37:7a:1f:8b:90:ba:71:67:ab:e4:
                    f1:40:da:fa:ac:eb:64:cc:76:b2:28:23:83:c5:6b:
                    78:7d:ed:95:ef:24:f6:dd:0c:e2:88:3e:0e:11:02:
                    53:37:7a:00:80:05:55:05:39:07:b6:b3:5a:63:08:
                    81:f1:bc:2b:0d:12:20:35:0a:cc:6f:8f:a0:e4:88:
                    43:75:2a:06:cc:3d:e1:04:ea:d9:47:b3:aa:30:76:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:4B:03:BA:9F:3B:FD:24:4D:FB:49:02:29:E8:34:7D:19:43:0A
            X509v3 Authority Key Identifier:
                keyid:77:65:9D:A6:2C:B4:5D:CA:8D:08:DF:52:73:E5:11:C9:00:92:A5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/4/77659DA62CB45DCA8D08DF5273E511C90092A5DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161/200ae5435faaa2d4b83fbf01a5f873c76d0758f5453185f337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/4/77659DA62CB45DCA8D08DF5273E511C90092A5DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:09:62:04:da:5f:71:28:06:37:76:b9:47:b8:7c:c2:2a:
         92:5d:fe:03:42:96:78:f7:65:12:19:05:ff:e4:28:06:4a:86:
         7c:47:09:12:f2:51:b9:9e:d8:9d:32:c5:8f:4b:ea:3b:81:ea:
         cd:bc:a2:44:2b:42:b8:d5:ce:d0:64:0b:a1:be:c1:cb:bc:a8:
         3b:dc:1b:f9:08:75:e6:8f:8c:14:32:39:52:ff:db:78:6f:6e:
         eb:2c:bc:8d:c6:89:06:13:3b:83:57:5a:18:c3:75:aa:89:56:
         72:f6:ed:db:06:8b:ad:a9:80:83:f8:07:01:65:25:9f:38:5e:
         78:a6:cf:f6:ba:99:4e:a7:a6:b2:f7:5b:af:2d:7b:04:f7:ee:
         a5:14:51:98:87:d3:78:e9:27:f8:43:1f:06:06:0c:f8:ef:12:
         90:ba:80:52:61:69:d7:d0:4f:a9:64:b5:75:59:d0:4f:fe:86:
         0a:64:47:e2:53:e3:1c:41:79:ab:5e:8e:1a:d8:11:75:d3:7c:
         40:79:97:ec:dd:f1:34:5b:7a:5c:f4:aa:31:c4:e2:1b:19:30:
         80:09:5f:c7:05:63:49:a0:40:6b:6d:1f:31:e0:44:09:9b:f0:
         aa:bf:fd:5f:72:e7:5d:d5:21:12:58:1c:92:f5:2d:40:69:ec:
         58:fc:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----