Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/561FF8005C03415E4FBB365AC43A3BAA57B82416.mft
File:                     561FF8005C03415E4FBB365AC43A3BAA57B82416.mft (raw, json)
Hash identifier:          mRC+BYIS6uUXbGlmBE5yQThf7RbjV4mdNtT/FLt2S5k=
Subject key identifier:   CF:9C:44:08:B7:C3:05:15:A9:FF:67:72:8C:5F:56:3E:DD:09:10:80
Authority key identifier: 56:1F:F8:00:5C:03:41:5E:4F:BB:36:5A:C4:3A:3B:AA:57:B8:24:16
Certificate issuer:       /CN=561FF8005C03415E4FBB365AC43A3BAA57B82416
Certificate serial:       79ED868C7A5CE12DEABC1EFA30DA201EF9608806
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/561FF8005C03415E4FBB365AC43A3BAA57B82416.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/561FF8005C03415E4FBB365AC43A3BAA57B82416.mft
Manifest number:          06
Signing time:             Wed 17 Apr 2024 13:16:03 +0000
Manifest this update:     Wed 17 Apr 2024 13:11:03 +0000
Manifest next update:     Thu 18 Apr 2024 15:10:03 +0000
Files and hashes:         1: 561FF8005C03415E4FBB365AC43A3BAA57B82416.crl (hash: 3KeNaVeoZHLtSd2DtTQgTbVKDDuxCo3xBW2pDRkBDR0=)
                          2: 3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa (hash: YCBNAJ0M167XVDa1qWNRrwYv39wcBtQYnPr81StZoWg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ed:86:8c:7a:5c:e1:2d:ea:bc:1e:fa:30:da:20:1e:f9:60:88:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561FF8005C03415E4FBB365AC43A3BAA57B82416
        Validity
            Not Before: Apr 17 13:11:03 2024 GMT
            Not After : Apr 18 15:10:03 2024 GMT
        Subject: CN=CF9C4408B7C30515A9FF67728C5F563EDD091080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:8c:1e:c2:7f:86:e2:2e:0e:fd:18:97:36:
                    0d:ff:da:00:f7:d0:aa:3a:5e:44:7a:48:61:85:7c:
                    96:c5:2f:47:d1:11:8f:92:1f:e2:ee:bd:0f:ff:1e:
                    6c:e7:77:04:d9:3e:a9:5a:4a:15:5a:7b:ec:7e:92:
                    8b:21:24:4d:38:32:54:72:0f:b6:bd:a4:a7:67:41:
                    5f:67:d2:b5:f9:4a:0e:4f:d5:bb:b0:1f:ca:03:17:
                    31:fc:24:cc:d8:39:c0:74:57:2e:79:b9:2b:d8:7a:
                    ab:24:7a:d6:3d:26:0b:48:c3:a0:3f:bc:a3:8e:8e:
                    25:5b:6a:16:5c:78:e0:a6:00:5b:95:3b:ce:cb:58:
                    8b:9a:c2:09:e7:91:15:c3:19:bf:e3:4d:d4:8c:22:
                    e6:37:91:57:16:db:1e:e0:37:6a:60:4c:23:75:32:
                    5c:87:8a:b8:d8:a5:72:2b:09:b3:f8:c6:ad:49:e0:
                    d1:1a:27:37:02:64:e4:de:a7:5d:4f:4f:a8:dc:d9:
                    c3:b6:d3:9a:94:d5:df:e8:9b:9f:5a:a0:8f:c5:d8:
                    1b:86:59:b8:59:bb:6f:09:08:ff:b4:cd:2e:86:c8:
                    2c:bf:1c:4c:61:16:f5:40:20:da:93:19:aa:17:e5:
                    d4:82:ff:d0:5b:4e:1d:31:5a:a7:af:97:f5:96:4e:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:44:08:B7:C3:05:15:A9:FF:67:72:8C:5F:56:3E:DD:09:10:80
            X509v3 Authority Key Identifier:
                keyid:56:1F:F8:00:5C:03:41:5E:4F:BB:36:5A:C4:3A:3B:AA:57:B8:24:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/561FF8005C03415E4FBB365AC43A3BAA57B82416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/561FF8005C03415E4FBB365AC43A3BAA57B82416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/561FF8005C03415E4FBB365AC43A3BAA57B82416.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:af:9c:2e:5d:cf:33:04:24:5a:9c:a9:b7:13:f4:88:64:
         d5:01:b1:6d:2a:41:d8:dd:65:b3:fa:f7:31:e6:90:95:00:16:
         21:d6:ef:ba:7d:55:45:4b:d3:d7:e8:81:05:c9:6f:57:c0:6d:
         46:f0:74:ae:f8:69:20:0e:50:7b:a3:ab:4c:d3:76:a3:f8:f3:
         63:8a:07:1b:e1:9d:4f:dc:2e:c0:4c:a8:af:8e:64:90:86:ed:
         6e:08:16:0c:e0:ea:1a:d3:6f:5c:ed:56:3d:d5:bb:80:c5:d9:
         ea:d9:10:10:81:42:bd:45:d7:63:de:c5:31:b1:99:47:1f:5f:
         64:f2:04:9e:09:b4:34:ee:42:0e:e8:cc:d6:77:da:f0:c2:d4:
         09:55:85:fa:dc:a8:a5:8f:d0:05:b2:cd:b1:7e:00:36:87:e1:
         18:34:b2:c0:42:68:e8:e4:c7:9a:13:bd:da:cf:4d:6f:61:ea:
         26:8a:ef:96:97:22:c7:97:5e:7d:9c:5c:e7:0c:a1:53:df:df:
         5e:98:b9:17:c5:2c:73:56:9c:1b:24:7d:7d:cb:1c:a2:3d:76:
         01:cb:aa:4d:f6:f1:f9:52:5a:c7:4f:03:fe:90:91:c7:d9:78:
         b0:ea:8d:12:d3:f4:4c:c4:f9:77:44:73:d8:a2:82:c6:52:cd:
         85:c8:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----