Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.mft
File:                     35E3043C2EDE0281F573512069C8CFAB837D4DCD.mft (raw, json)
Hash identifier:          mAEGilK900pHvBxAWbTZKcTmMqY60mAuXh64KgHHzjk=
Subject key identifier:   A4:EC:89:BD:98:4B:C8:A0:A7:73:0B:74:42:B0:86:FD:4B:EF:EB:9F
Authority key identifier: 35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
Certificate issuer:       /CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Certificate serial:       4814C3615DD1E29667DB44794B387D6148837A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.mft
Manifest number:          0A
Signing time:             Wed 05 Apr 2023 06:02:27 +0000
Manifest this update:     Wed 05 Apr 2023 05:57:27 +0000
Manifest next update:     Thu 06 Apr 2023 06:02:27 +0000
Files and hashes:         1: 34352e3133322e3231372e302f32342d3234203d3e2037303138.roa (hash: rhRgZg/hT6r7Ljsbj1eSt5u4OnoGJBjBGqzfgPD3FlM=)
                          2: 34352e3133322e3231382e302f32342d3234203d3e2037303138.roa (hash: YV1nkcJ3EVpWmtTKNmZT+mvo/ETS9Vh3d2mqf14vS6k=)
                          3: 34352e3133322e3231382e302f32342d3234203d3e203536393133.roa (hash: ZLZgjmY3XpG0NANJllc7MrceAViJ+q4Fc0dxoElNnxo=)
                          4: 34352e3133322e3231372e302f32342d3234203d3e203536393133.roa (hash: EaWmtTTarJ434gxXLDmitzL03H8VL5A+ttv5KGoplLQ=)
                          5: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: 6vkkwg5ZMpOJJZM6XZN4I3jxYPPDIRj7dT7IrYv8YIs=)
                          6: 34352e3133322e3231362e302f32342d3234203d3e203536393133.roa (hash: en1fQiUAaD1nco2UITrT+DQwPVqdGyZnpqDj4hALZh4=)
                          7: 35E3043C2EDE0281F573512069C8CFAB837D4DCD.crl (hash: iwtmI2ueT+lC4AHNozVSIrjSp2+9GvHy9Jqa5Wq85XU=)
                          8: 34352e3133322e3231362e302f32342d3234203d3e2037303138.roa (hash: j5FL69vfBphlPJ/z5dAMvCXx+PVpfVkaDvJP6U8c5Yg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:14:c3:61:5d:d1:e2:96:67:db:44:79:4b:38:7d:61:48:83:7a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e3043c2ede0281f573512069c8cfab837d4dcd
        Validity
            Not Before: Apr  5 05:57:27 2023 GMT
            Not After : Apr  6 06:02:27 2023 GMT
        Subject: CN=A4EC89BD984BC8A0A7730B7442B086FD4BEFEB9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:99:0a:1a:cd:b5:23:31:84:0f:88:45:af:
                    cf:ed:75:75:79:c3:a1:5b:a7:52:86:4b:c4:f3:b7:
                    70:df:df:c0:aa:04:f8:89:99:89:9d:65:aa:2c:4c:
                    a5:19:5c:f1:c4:cf:2c:40:54:d3:90:16:b1:30:23:
                    c3:ee:4d:ca:ed:c4:a1:ce:04:ef:ae:2c:e2:dc:78:
                    d6:ab:80:c2:03:6d:39:de:b5:ca:99:56:88:8f:82:
                    f7:f0:c4:28:d3:33:38:e5:87:3c:5b:54:aa:1c:db:
                    20:af:a7:fa:57:7a:31:c4:51:be:2e:10:29:29:f7:
                    88:f7:a4:ae:27:cc:52:69:0d:93:50:67:6b:5c:7e:
                    12:49:22:71:87:d9:0a:5d:3c:26:db:d7:9a:92:ab:
                    4f:29:05:f0:98:ed:4e:45:91:ba:dd:cb:a8:53:36:
                    1e:49:4b:60:a5:c8:a5:ab:32:17:5c:08:78:11:5f:
                    6a:2b:37:10:d7:40:9f:02:96:83:4e:7e:66:40:fc:
                    1e:57:7c:42:62:a4:16:9c:c2:ff:fb:0f:f2:71:c4:
                    7a:c9:09:7c:4c:5a:87:f1:c2:96:aa:b9:41:2b:96:
                    96:a2:60:10:90:22:8b:7b:8f:4e:c6:2a:ae:7a:df:
                    66:06:05:09:41:dc:31:d8:6c:d8:c8:01:31:d0:6d:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EC:89:BD:98:4B:C8:A0:A7:73:0B:74:42:B0:86:FD:4B:EF:EB:9F
            X509v3 Authority Key Identifier:
                keyid:35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:52:fb:b0:53:c0:3f:1a:28:c2:61:b5:83:b3:bf:60:e4:
         5a:ea:ff:32:f0:08:b2:1d:52:1a:ba:d3:c2:94:15:da:23:71:
         3b:6c:21:82:fc:23:1c:c6:89:4c:d5:a6:86:1e:45:9a:5f:02:
         2d:1b:e2:b1:b2:2e:4c:d5:5b:d7:35:c6:d6:f5:87:bc:43:40:
         d2:20:25:83:91:74:99:5f:50:57:07:b4:a7:15:d4:1a:70:e7:
         b9:87:51:4e:2f:e6:6f:65:84:ad:16:11:34:26:76:61:86:f7:
         3d:7e:ad:11:cb:d7:0c:10:5d:97:c6:09:1f:fa:50:88:78:c6:
         ff:19:dc:32:f0:6e:38:55:3f:6f:99:75:d2:1a:06:02:07:b7:
         bd:e9:c9:39:75:2e:8d:0b:20:8b:a7:e2:4e:c8:ab:27:2f:2b:
         2a:9e:92:de:7e:e3:6e:55:0b:a1:d5:03:7f:48:fe:a9:f5:08:
         c0:0f:7a:4e:9c:fe:dd:be:69:a1:48:3a:26:d5:5a:01:2d:f7:
         6b:56:c9:fd:3d:79:fe:3c:a0:e4:b1:32:65:f6:ea:1a:ba:a4:
         24:18:4b:29:10:61:21:f5:0f:00:61:63:61:f3:65:10:dd:01:
         22:85:1e:3c:af:0e:f9:8d:f1:35:a9:d3:26:49:de:45:32:03:
         5d:08:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org