Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.mft
File:                     AD660E4B7C1D34B525CE765D04229D17310E71C7.mft (raw, json)
Hash identifier:          xUc8BKxxRcfm9MNw4PlC9GVAQHoaDWQq9lBsUzDQJ2s=
Subject key identifier:   D4:93:1D:19:32:53:97:A1:4E:B6:6D:23:68:92:28:10:2E:28:F5:5F
Authority key identifier: AD:66:0E:4B:7C:1D:34:B5:25:CE:76:5D:04:22:9D:17:31:0E:71:C7
Certificate issuer:       /CN=ad660e4b7c1d34b525ce765d04229d17310e71c7
Certificate serial:       3EB23B276E478971E37617F704A806E6D84098D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rWYOS3wdNLUlznZdBCKdFzEOccc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.mft
Manifest number:          E2
Signing time:             Sun 23 Jun 2024 12:13:49 +0000
Manifest this update:     Sun 23 Jun 2024 12:08:49 +0000
Manifest next update:     Mon 24 Jun 2024 15:43:49 +0000
Files and hashes:         1: AD660E4B7C1D34B525CE765D04229D17310E71C7.crl (hash: O7VU5Vi+vIrdGO0RvVlOhTccmynvQRgN1fLZYRlAQdM=)
                          2: AS200242.asa (hash: bRxOHp5Rf6AfXuxGcQsgl9n8MxpI5/CSzqAJrXV8ZvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b2:3b:27:6e:47:89:71:e3:76:17:f7:04:a8:06:e6:d8:40:98:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad660e4b7c1d34b525ce765d04229d17310e71c7
        Validity
            Not Before: Jun 23 12:08:49 2024 GMT
            Not After : Jun 24 15:43:49 2024 GMT
        Subject: CN=D4931D19325397A14EB66D23689228102E28F55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:e5:5e:b5:c7:2d:d7:24:c5:4a:d8:08:c8:
                    49:7c:95:cd:c7:d4:05:d9:46:6a:8e:46:88:c4:bc:
                    10:c0:43:58:17:7c:1d:a2:2f:e9:84:e4:b6:55:7f:
                    35:7b:6b:41:9b:f1:00:0a:e8:e3:f6:38:0e:c9:bb:
                    41:06:b2:69:fd:07:63:31:6a:94:a3:fe:33:a1:39:
                    e8:a8:1b:15:48:66:a9:7a:eb:36:e5:1a:60:73:e8:
                    8c:c1:b0:14:96:7e:27:22:09:1a:30:56:9b:e9:cd:
                    e9:4e:6e:11:6f:41:38:e8:6f:30:87:bc:ed:20:ac:
                    5d:ab:de:67:ba:d7:4b:e5:27:29:08:fb:12:4b:8f:
                    8b:91:db:6d:9f:4d:14:a0:f3:da:14:12:88:a9:bc:
                    e9:05:91:e6:93:4a:c8:bf:19:4d:24:fb:13:8e:6c:
                    fd:1b:71:a4:ab:14:22:66:cb:5d:a1:fb:2b:09:d2:
                    59:42:1b:95:2a:c9:f9:17:95:da:34:0a:9a:f0:fb:
                    a2:df:25:65:76:da:f1:84:40:3a:ed:d2:c7:0f:bd:
                    53:8f:4c:4c:05:fd:31:19:18:08:d3:6f:c9:6c:0e:
                    89:be:ff:2a:f7:bd:01:68:53:87:42:e2:fb:08:5b:
                    f6:0a:c8:b8:1f:49:72:78:7a:38:19:60:cc:55:c5:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:93:1D:19:32:53:97:A1:4E:B6:6D:23:68:92:28:10:2E:28:F5:5F
            X509v3 Authority Key Identifier:
                keyid:AD:66:0E:4B:7C:1D:34:B5:25:CE:76:5D:04:22:9D:17:31:0E:71:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWYOS3wdNLUlznZdBCKdFzEOccc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5f:11:fa:b9:ab:e8:21:44:f0:96:b1:46:fd:bf:03:ae:83:
         c4:53:f9:23:36:b5:ae:84:7d:20:dd:9a:23:0e:6b:05:ed:50:
         f2:3e:98:3d:40:d3:0a:d8:d6:15:ba:94:28:b5:52:63:ad:70:
         87:20:fe:0c:ca:28:5f:c2:99:02:85:c5:4b:3a:5c:a1:25:d3:
         f5:95:74:28:28:05:3a:19:f8:55:4a:d8:19:44:81:21:c6:cc:
         30:b4:3c:ee:91:90:55:09:86:d8:e7:06:e8:1b:38:58:83:45:
         e1:b8:df:1f:d9:fd:1f:7c:b0:99:16:a7:56:3e:3a:74:cd:27:
         fa:99:86:96:b5:8f:84:30:f0:18:17:43:df:fb:8c:85:78:71:
         df:cf:c6:65:03:72:cf:38:c7:2f:67:a1:34:a2:a8:68:f5:02:
         88:cc:43:11:fe:71:d8:37:15:4c:18:03:4a:e2:46:96:ae:18:
         a6:71:f3:e2:44:08:98:fd:6a:bf:5d:ea:a0:62:a1:12:87:89:
         b8:d2:9a:2a:c6:6d:68:9a:3a:33:20:08:c4:49:08:9c:34:09:
         1c:b8:87:a3:bc:ca:9b:92:ad:fc:9a:4d:69:ef:6f:b4:1f:e7:
         65:93:7c:b9:b0:45:4b:f2:79:78:30:e9:2d:d9:b0:ec:a5:dd:
         23:5e:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----