Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft
File:                     D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft (raw, json)
Hash identifier:          YGsJ9xlNoOAnNN8CKiUACBMt087YyTURwqaf4oRt7n0=
Subject key identifier:   78:21:71:C8:5B:3C:95:11:6D:68:73:F4:77:C8:07:60:44:D2:3C:E4
Authority key identifier: D4:E7:16:3B:EE:1E:1A:41:7C:AD:66:58:2B:4E:72:81:30:91:F9:3B
Certificate issuer:       /CN=d4e7163bee1e1a417cad66582b4e72813091f93b
Certificate serial:       1008861DEA2CD40A5FF2ECF19E37922CBE6667C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OcWO-4eGkF8rWZYK05ygTCR-Ts.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft
Manifest number:          25
Signing time:             Fri 24 May 2024 08:33:56 +0000
Manifest this update:     Fri 24 May 2024 08:28:56 +0000
Manifest next update:     Sat 25 May 2024 11:38:56 +0000
Files and hashes:         1: D4E7163BEE1E1A417CAD66582B4E72813091F93B.crl (hash: VbHw1xIHDd61eQ1kWh6LTie7wtk1dVI7hrjEnQifhZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:08:86:1d:ea:2c:d4:0a:5f:f2:ec:f1:9e:37:92:2c:be:66:67:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e7163bee1e1a417cad66582b4e72813091f93b
        Validity
            Not Before: May 24 08:28:56 2024 GMT
            Not After : May 25 11:38:56 2024 GMT
        Subject: CN=782171C85B3C95116D6873F477C8076044D23CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:b7:86:64:04:81:3e:1a:5e:6a:e5:8e:8f:
                    f1:8e:ed:8e:f7:7e:4d:50:53:96:6c:27:eb:e0:ad:
                    55:d1:cf:c6:32:f9:29:fb:d7:d8:a1:1e:1a:82:ca:
                    ae:81:7f:60:12:7b:24:ef:a1:8d:ab:dc:a5:0e:d3:
                    29:7c:b2:4b:0d:25:43:97:c3:e2:40:9b:4f:b6:e4:
                    dc:72:a4:35:e7:a8:9b:27:68:72:02:fe:31:9f:e7:
                    c9:84:8a:90:4c:97:00:f2:31:ac:cd:4a:ee:48:66:
                    e5:a9:ef:d2:b6:90:c5:41:bb:2c:97:5c:60:1c:e6:
                    95:96:48:8b:86:ac:f7:e0:c5:ba:06:b3:09:3b:c9:
                    ca:61:3f:bd:2d:1a:49:9b:7b:ff:41:5a:36:7c:f3:
                    11:a5:7d:ca:d2:47:c1:82:5c:3b:00:fa:d0:82:39:
                    5a:24:76:23:af:bd:95:2d:22:70:37:19:f3:be:57:
                    b5:fa:e5:73:56:9f:d1:4c:88:f0:1e:65:13:37:f6:
                    93:fc:d6:cd:27:fb:20:f0:66:bc:30:72:ed:0d:08:
                    8f:df:df:1f:3b:0e:c6:c9:be:1f:bf:0a:e1:f0:62:
                    42:3f:ba:93:ba:a5:28:b8:eb:3c:0f:af:8a:57:fd:
                    71:2f:1a:6b:1f:3e:2a:e9:9d:09:46:39:8e:b6:2a:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:21:71:C8:5B:3C:95:11:6D:68:73:F4:77:C8:07:60:44:D2:3C:E4
            X509v3 Authority Key Identifier:
                keyid:D4:E7:16:3B:EE:1E:1A:41:7C:AD:66:58:2B:4E:72:81:30:91:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OcWO-4eGkF8rWZYK05ygTCR-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:50:dd:cc:70:4c:6a:a9:a2:6f:ed:f3:06:cb:13:db:3d:c6:
         70:cc:04:8e:11:d4:bf:d7:16:df:54:e2:a7:05:cc:ca:84:68:
         fd:3f:fd:09:fe:96:ab:cb:12:f4:2e:41:fd:1a:a5:dc:c1:99:
         93:96:35:20:7b:df:28:20:8f:0b:36:d2:af:cf:39:d5:f4:0f:
         83:54:23:39:c7:51:e3:5f:17:13:9e:c6:f2:47:60:d7:28:b4:
         f2:74:4d:44:34:62:56:78:bf:e9:9e:83:e7:ba:3a:70:a6:4a:
         09:8d:53:48:e5:27:b5:a2:a3:cb:3d:68:53:ca:13:2b:fd:00:
         84:34:ca:22:4a:ca:65:73:a9:9e:b9:97:fc:f9:07:41:d8:a1:
         ca:fa:1c:a8:62:dc:c3:f0:7a:73:19:a0:05:05:d2:40:1a:47:
         84:c5:47:cb:34:a4:1a:2f:31:cc:0b:c7:41:e9:7c:ef:d3:7e:
         55:8d:37:08:55:69:53:36:78:2c:34:5a:8c:ab:88:50:4c:cf:
         f5:de:4f:9c:cb:02:5e:50:d2:3e:8a:61:9f:97:ed:d0:2e:5a:
         51:80:c7:14:70:f4:3e:5b:eb:29:6b:88:48:0b:8c:ba:f5:9c:
         35:ce:a4:f6:84:04:e2:22:69:a1:19:4a:d3:9b:cf:79:8c:87:
         d0:76:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org