Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3a224b13-9254-4669-9459-04698ac624a4/0/B94FD58785AD63D80164954186C24BEA7CDAA27C.mft
File:                     B94FD58785AD63D80164954186C24BEA7CDAA27C.mft (raw, json)
Hash identifier:          TKOQdS8hH5XTC84jjkr5OK7wkmNPCSHI2srJ+YJ3I+0=
Subject key identifier:   47:E7:A9:75:FC:B5:33:B6:82:1A:F0:F7:3A:C1:30:A9:65:3D:37:59
Authority key identifier: B9:4F:D5:87:85:AD:63:D8:01:64:95:41:86:C2:4B:EA:7C:DA:A2:7C
Certificate issuer:       /CN=b94fd58785ad63d80164954186c24bea7cdaa27c
Certificate serial:       3955B4B46BDB938669059A147FF46314CDAB9F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uU_Vh4WtY9gBZJVBhsJL6nzaonw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3a224b13-9254-4669-9459-04698ac624a4/0/B94FD58785AD63D80164954186C24BEA7CDAA27C.mft
Manifest number:          02
Signing time:             Fri 08 Sep 2023 09:00:08 +0000
Manifest this update:     Fri 08 Sep 2023 08:55:08 +0000
Manifest next update:     Sat 09 Sep 2023 12:43:08 +0000
Files and hashes:         1: B94FD58785AD63D80164954186C24BEA7CDAA27C.crl (hash: anl0GLd3czW7tma73G1YGCuOD3JAkNy44QWKxeWyDAs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:55:b4:b4:6b:db:93:86:69:05:9a:14:7f:f4:63:14:cd:ab:9f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94fd58785ad63d80164954186c24bea7cdaa27c
        Validity
            Not Before: Sep  8 08:55:08 2023 GMT
            Not After : Sep  9 12:43:08 2023 GMT
        Subject: CN=47E7A975FCB533B6821AF0F73AC130A9653D3759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:47:c4:0f:49:8e:db:34:3e:d3:e1:98:95:
                    2e:f2:28:d9:72:fe:31:7b:ca:f8:d9:40:f4:0c:7e:
                    26:d9:f1:bd:b8:61:57:6a:68:e8:e5:27:a6:cf:c7:
                    f8:d1:a0:1f:19:a7:f8:5f:c1:d9:fd:7a:26:80:e0:
                    7c:8b:71:cd:54:a5:b4:3b:b2:a5:09:a7:9c:06:7c:
                    cb:f1:64:60:55:f9:b6:3c:27:83:70:1c:78:22:fd:
                    9b:2e:69:63:47:ff:50:97:39:87:84:59:f5:1e:03:
                    00:a7:12:bc:2b:43:e6:a8:46:fc:53:68:6e:89:a2:
                    e4:eb:ff:ab:97:e2:10:de:80:6a:2e:85:51:80:86:
                    6a:3f:d7:81:6b:85:ea:8d:88:ff:2b:11:a5:1f:b4:
                    e3:2a:0a:45:ca:40:cd:97:29:ba:48:49:10:88:b9:
                    15:d8:a3:8d:98:bd:d2:ac:62:da:7d:c4:f6:9e:6a:
                    b0:86:6b:bf:85:8e:b7:ff:2e:05:d5:f4:7f:b0:df:
                    19:f6:10:e1:ea:57:5b:7b:f6:6d:44:70:94:b3:67:
                    d7:1f:53:44:38:b5:43:fb:05:3a:13:af:41:4c:26:
                    1b:ec:69:58:2a:5d:09:c6:37:84:fd:18:83:dd:11:
                    9f:ad:83:d2:6e:3d:b8:af:8d:59:b2:e4:b0:4a:42:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E7:A9:75:FC:B5:33:B6:82:1A:F0:F7:3A:C1:30:A9:65:3D:37:59
            X509v3 Authority Key Identifier:
                keyid:B9:4F:D5:87:85:AD:63:D8:01:64:95:41:86:C2:4B:EA:7C:DA:A2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3a224b13-9254-4669-9459-04698ac624a4/0/B94FD58785AD63D80164954186C24BEA7CDAA27C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU_Vh4WtY9gBZJVBhsJL6nzaonw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a224b13-9254-4669-9459-04698ac624a4/0/B94FD58785AD63D80164954186C24BEA7CDAA27C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:d2:66:d1:d0:a2:20:c5:0c:ec:bb:c6:66:8e:53:02:8e:
         8d:4f:16:fb:ab:96:b8:58:17:40:b4:27:39:62:5e:d7:50:bb:
         c9:76:cb:cb:ae:45:31:23:73:0a:fa:a3:35:76:08:ce:9e:c4:
         ca:36:ec:26:cc:24:b2:2e:d9:b0:01:03:9a:07:8f:96:93:15:
         8f:f0:89:8c:ac:23:2d:53:30:1c:be:7b:7a:21:ba:4d:fa:be:
         8f:81:f1:7b:d7:7b:7e:f6:dc:d0:27:c9:a2:96:04:aa:db:a8:
         51:9a:4e:f3:e4:37:5f:23:bf:f8:38:b4:67:dd:15:30:36:a7:
         fa:c8:50:bd:aa:11:72:dc:93:4c:f0:1a:97:9b:5a:22:a3:c8:
         97:48:22:02:6a:e8:81:d4:0d:97:b8:2c:a0:d4:af:9b:cb:b0:
         c8:fb:73:09:e9:91:b6:7a:3b:7d:8b:ec:0d:a8:d6:8d:8a:48:
         44:61:d9:de:6a:d6:f4:4a:17:96:cd:73:17:fd:5a:02:7d:1c:
         1e:a4:54:c9:06:78:8c:4a:0e:c7:c2:c8:1c:d5:77:30:15:21:
         16:67:df:42:1e:65:7a:77:74:26:c1:36:31:b2:50:51:c0:15:
         8b:1c:d8:ca:e2:d2:15:84:2e:4f:60:0f:29:3f:3f:38:60:ac:
         68:f5:a5:59
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOVW0tGvbk4ZpBZoUf/RjFM2rn0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjk0ZmQ1ODc4NWFkNjNkODAxNjQ5NTQxODZjMjRiZWE3
Y2RhYTI3YzAeFw0yMzA5MDgwODU1MDhaFw0yMzA5MDkxMjQzMDhaMDMxMTAvBgNV
BAMTKDQ3RTdBOTc1RkNCNTMzQjY4MjFBRjBGNzNBQzEzMEE5NjUzRDM3NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR2EfED0mO2zQ+0+GYlS7yKNly
/jF7yvjZQPQMfibZ8b24YVdqaOjlJ6bPx/jRoB8Zp/hfwdn9eiaA4HyLcc1UpbQ7
sqUJp5wGfMvxZGBV+bY8J4NwHHgi/ZsuaWNH/1CXOYeEWfUeAwCnErwrQ+aoRvxT
aG6JouTr/6uX4hDegGouhVGAhmo/14FrheqNiP8rEaUftOMqCkXKQM2XKbpISRCI
uRXYo42YvdKsYtp9xPaearCGa7+Fjrf/LgXV9H+w3xn2EOHqV1t79m1EcJSzZ9cf
U0Q4tUP7BToTr0FMJhvsaVgqXQnGN4T9GIPdEZ+tg9JuPbivjVmy5LBKQrprAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUR+epdfy1M7aCGvD3OsEwqWU9N1kwHwYDVR0j
BBgwFoAUuU/Vh4WtY9gBZJVBhsJL6nzaonwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2EyMjRiMTMtOTI1NC00NjY5LTk0NTktMDQ2OThhYzYy
NGE0LzAvQjk0RkQ1ODc4NUFENjNEODAxNjQ5NTQxODZDMjRCRUE3Q0RBQTI3Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3VVX1ZoNFd0WTlnQlpKVkJoc0pMNm56
YW9udy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zYTIyNGIxMy05
MjU0LTQ2NjktOTQ1OS0wNDY5OGFjNjI0YTQvMC9COTRGRDU4Nzg1QUQ2M0Q4MDE2
NDk1NDE4NkMyNEJFQTdDREFBMjdDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfDSZtHQoiDFDOy7xmaO
UwKOjU8W+6uWuFgXQLQnOWJe11C7yXbLy65FMSNzCvqjNXYIzp7EyjbsJswksi7Z
sAEDmgePlpMVj/CJjKwjLVMwHL57eiG6Tfq+j4Hxe9d7fvbc0CfJopYEqtuoUZpO
8+Q3XyO/+Di0Z90VMDan+shQvaoRctyTTPAal5taIqPIl0giAmrogdQNl7gsoNSv
m8uwyPtzCemRtno7fYvsDajWjYpIRGHZ3mrW9EoXls1zF/1aAn0cHqRUyQZ4jEoO
x8LIHNV3MBUhFmffQh5lend0JsE2MbJQUcAVixzYyuLSFYQuT2APKT8/OGCsaPWl
WQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:26 2025 by rpki-client