Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.mft
File:                     EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.mft (raw, json)
Hash identifier:          gVEfzI9Odb3Lt2jz/BSvmAI4bXZi5cWmV4cQTjmPmuc=
Subject key identifier:   F6:CD:27:12:9A:EE:A2:41:1F:84:82:BC:DA:93:AD:9D:81:94:1A:F9
Authority key identifier: EF:88:D7:BA:CD:28:A6:C3:93:BC:CC:11:DC:64:DD:E7:7B:7E:C4:9B
Certificate issuer:       /CN=ef88d7bacd28a6c393bccc11dc64dde77b7ec49b
Certificate serial:       1DA5F0F920F1D9CE9B718B4B076A636394C35558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74jXus0opsOTvMwR3GTd53t-xJs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.mft
Manifest number:          01
Signing time:             Fri 17 May 2024 08:07:22 +0000
Manifest this update:     Fri 17 May 2024 08:02:22 +0000
Manifest next update:     Sat 18 May 2024 09:51:22 +0000
Files and hashes:         1: EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.crl (hash: Rl/yPqhFrovrae0nURNYPh9KnISdpi+wxPNJV8MGyYo=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a5:f0:f9:20:f1:d9:ce:9b:71:8b:4b:07:6a:63:63:94:c3:55:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef88d7bacd28a6c393bccc11dc64dde77b7ec49b
        Validity
            Not Before: May 17 08:02:22 2024 GMT
            Not After : May 18 09:51:22 2024 GMT
        Subject: CN=F6CD27129AEEA2411F8482BCDA93AD9D81941AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:61:95:2a:1e:b9:ed:83:d1:5e:b2:35:d7:bf:
                    f9:89:66:c2:bd:b1:41:20:4b:31:7f:4b:1c:b1:73:
                    5e:49:e7:f5:64:e6:7e:2a:a2:56:2a:94:c2:b9:e5:
                    cd:73:91:be:d2:34:1b:e6:a1:12:d0:92:97:94:9a:
                    43:50:13:0d:e1:c2:91:86:37:e1:3e:22:f8:eb:87:
                    a9:92:5e:0f:c1:81:be:45:2b:dc:98:7b:91:c7:9c:
                    79:80:0c:0f:78:ac:b8:46:e9:22:c6:93:8b:f5:73:
                    d1:95:2b:00:b1:b7:42:75:d0:0c:82:de:09:ce:8c:
                    b9:e0:43:99:31:cb:a1:23:15:64:05:c3:9f:95:75:
                    e7:7c:97:7c:e2:f2:7d:b6:1e:8c:64:92:20:8f:f1:
                    5b:d4:a0:52:5a:10:34:3f:e3:48:79:88:12:3f:b8:
                    00:df:a5:31:fd:8d:e6:1a:46:1a:f4:2f:23:c8:d1:
                    3c:63:00:25:8d:7f:4d:ce:d8:54:55:14:66:57:40:
                    8e:bc:00:e4:de:11:7b:29:4c:8d:55:27:52:f7:26:
                    8b:65:ae:18:35:09:65:79:1e:94:82:cb:81:8c:1d:
                    40:fb:f8:b2:be:9e:a4:15:21:f9:bd:d1:6f:0f:6e:
                    5a:95:21:01:f3:ca:97:91:d3:96:94:a6:d0:e2:bb:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CD:27:12:9A:EE:A2:41:1F:84:82:BC:DA:93:AD:9D:81:94:1A:F9
            X509v3 Authority Key Identifier:
                keyid:EF:88:D7:BA:CD:28:A6:C3:93:BC:CC:11:DC:64:DD:E7:7B:7E:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74jXus0opsOTvMwR3GTd53t-xJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:11:b6:23:20:00:18:9b:cc:fa:3d:3b:e5:7e:5f:46:57:b6:
         80:4c:df:04:7f:bf:8c:51:04:c1:6f:cd:44:83:4b:f2:6e:90:
         33:26:74:23:73:01:87:16:f5:ae:75:a6:ca:43:88:16:ae:ce:
         3d:bd:25:2e:8e:d6:a6:c6:20:8a:4b:d2:72:3a:72:bd:d6:cc:
         c0:fb:36:bb:67:80:04:ec:df:4f:cb:0d:a3:20:7b:90:3d:7a:
         b0:d2:bf:07:c4:de:ed:f4:68:6f:ab:11:0d:2d:71:d1:68:f7:
         59:bb:86:99:65:72:b2:1f:eb:59:8b:e6:0f:87:0a:a2:c2:9e:
         c0:73:2b:f4:45:fe:24:54:bf:11:17:bf:af:37:e7:1b:de:40:
         a5:77:49:4d:9d:57:60:2e:fc:6f:3d:d1:8a:0e:c9:5e:3c:90:
         bd:c8:49:74:a6:10:a1:20:4a:6d:5e:d7:4d:bf:fb:e2:73:50:
         17:ff:9b:3b:dd:94:53:74:1a:c9:ea:a9:ee:7c:45:e1:45:f0:
         b1:bf:42:5b:81:00:0b:35:39:9d:29:5e:32:5c:1d:72:91:7d:
         73:ec:ba:91:00:34:60:96:70:fe:07:7e:b4:a6:da:be:94:67:
         59:df:e7:e6:de:81:94:ed:6d:7d:1e:69:52:1f:f1:bd:8a:a3:
         67:f1:83:0c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHaXw+SDx2c6bcYtLB2pjY5TDVVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWY4OGQ3YmFjZDI4YTZjMzkzYmNjYzExZGM2NGRkZTc3
YjdlYzQ5YjAeFw0yNDA1MTcwODAyMjJaFw0yNDA1MTgwOTUxMjJaMDMxMTAvBgNV
BAMTKEY2Q0QyNzEyOUFFRUEyNDExRjg0ODJCQ0RBOTNBRDlEODE5NDFBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnYZUqHrntg9FesjXXv/mJZsK9
sUEgSzF/Sxyxc15J5/Vk5n4qolYqlMK55c1zkb7SNBvmoRLQkpeUmkNQEw3hwpGG
N+E+Ivjrh6mSXg/Bgb5FK9yYe5HHnHmADA94rLhG6SLGk4v1c9GVKwCxt0J10AyC
3gnOjLngQ5kxy6EjFWQFw5+Vded8l3zi8n22HoxkkiCP8VvUoFJaEDQ/40h5iBI/
uADfpTH9jeYaRhr0LyPI0TxjACWNf03O2FRVFGZXQI68AOTeEXspTI1VJ1L3Jotl
rhg1CWV5HpSCy4GMHUD7+LK+nqQVIfm90W8PblqVIQHzypeR05aUptDiu0l5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU9s0nEpruokEfhIK82pOtnYGUGvkwHwYDVR0j
BBgwFoAU74jXus0opsOTvMwR3GTd53t+xJswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTA5ZTQ0YTUtNzdmZi00NDI2LWE3ZmYtNDdhZWQ3NWM2
NTQ2LzAvRUY4OEQ3QkFDRDI4QTZDMzkzQkNDQzExREM2NERERTc3QjdFQzQ5Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0alh1czBvcHNPVHZNd1IzR1RkNTN0
LXhKcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MDllNDRhNS03
N2ZmLTQ0MjYtYTdmZi00N2FlZDc1YzY1NDYvMC9FRjg4RDdCQUNEMjhBNkMzOTNC
Q0NDMTFEQzY0RERFNzdCN0VDNDlCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBG2IyAAGJvM+j075X5f
Rle2gEzfBH+/jFEEwW/NRINL8m6QMyZ0I3MBhxb1rnWmykOIFq7OPb0lLo7WpsYg
ikvScjpyvdbMwPs2u2eABOzfT8sNoyB7kD16sNK/B8Te7fRob6sRDS1x0Wj3WbuG
mWVysh/rWYvmD4cKosKewHMr9EX+JFS/ERe/rzfnG95ApXdJTZ1XYC78bz3Rig7J
XjyQvchJdKYQoSBKbV7XTb/74nNQF/+bO92UU3Qayeqp7nxF4UXwsb9CW4EACzU5
nSleMlwdcpF9c+y6kQA0YJZw/gd+tKbavpRnWd/n5t6BlO1tfR5pUh/xvYqjZ/GD
DA==
-----END CERTIFICATE-----