Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/522a88b8-4771-498f-b44c-36ae2f0ce5c4/1/2F091C9A956830560239ECE9A2112A24580088BA.mft
File:                     2F091C9A956830560239ECE9A2112A24580088BA.mft (raw, json)
Hash identifier:          Bj9q6034j8njhTm6xfOnK0e6UDaErUonn0GBYMPANE0=
Subject key identifier:   35:DB:97:E4:F3:FF:72:28:B9:F2:3F:21:6C:61:FB:61:3D:8A:0B:9F
Authority key identifier: 2F:09:1C:9A:95:68:30:56:02:39:EC:E9:A2:11:2A:24:58:00:88:BA
Certificate issuer:       /CN=2f091c9a956830560239ece9a2112a24580088ba
Certificate serial:       095B5FA0F6B3BEF6764BC3CBC8824C1B040787A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwkcmpVoMFYCOezpohEqJFgAiLo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/522a88b8-4771-498f-b44c-36ae2f0ce5c4/1/2F091C9A956830560239ECE9A2112A24580088BA.mft
Manifest number:          01
Signing time:             Mon 06 May 2024 19:21:08 +0000
Manifest this update:     Mon 06 May 2024 19:16:08 +0000
Manifest next update:     Tue 07 May 2024 23:02:08 +0000
Files and hashes:         1: 2F091C9A956830560239ECE9A2112A24580088BA.crl (hash: 4GqgKdmHW5sBgrKcyyJbaKsmKf9nw31yx+OVBwBxgcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5b:5f:a0:f6:b3:be:f6:76:4b:c3:cb:c8:82:4c:1b:04:07:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f091c9a956830560239ece9a2112a24580088ba
        Validity
            Not Before: May  6 19:16:08 2024 GMT
            Not After : May  7 23:02:08 2024 GMT
        Subject: CN=35DB97E4F3FF7228B9F23F216C61FB613D8A0B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:99:0e:95:d8:62:54:ce:d1:92:7b:93:60:
                    3d:5c:82:25:be:b9:bc:86:a0:19:02:c4:26:a1:7d:
                    4e:46:2c:4c:61:b2:67:19:85:08:84:58:2a:f5:34:
                    63:48:b6:4c:1e:b1:90:60:56:8f:46:f4:cd:32:b1:
                    7b:e7:6d:1b:cb:97:cd:3c:9c:50:9e:90:bd:ec:8f:
                    88:f5:37:3b:3d:c8:e8:0d:02:40:d0:a2:3d:7d:64:
                    0c:db:e3:a4:8f:88:d8:6e:a5:8f:a8:ed:d0:d7:80:
                    f5:85:40:24:2c:54:de:11:58:06:b0:88:6c:d0:0a:
                    1c:f6:39:b0:1c:e0:c6:e2:90:33:6b:33:35:af:70:
                    c0:25:27:86:48:f5:b6:af:ad:0e:90:1e:2f:51:8d:
                    ba:7a:24:6e:76:0b:83:3d:ce:01:80:1e:5d:6c:7f:
                    b5:e6:d3:59:f8:27:67:ce:c6:d9:28:82:5e:29:d1:
                    21:a2:b9:2a:de:7f:42:1d:b5:13:60:fe:0f:b5:ca:
                    02:4d:ad:97:87:05:fd:59:22:ed:f9:28:42:32:81:
                    c0:f3:05:5b:da:6d:09:7e:f5:8a:66:ef:e0:66:34:
                    ee:9d:08:78:3f:3e:f5:b6:1a:3e:24:e3:2c:00:d2:
                    c3:ef:fd:61:68:d3:0e:d4:da:10:6a:62:4f:9d:c1:
                    d4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DB:97:E4:F3:FF:72:28:B9:F2:3F:21:6C:61:FB:61:3D:8A:0B:9F
            X509v3 Authority Key Identifier:
                keyid:2F:09:1C:9A:95:68:30:56:02:39:EC:E9:A2:11:2A:24:58:00:88:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/522a88b8-4771-498f-b44c-36ae2f0ce5c4/1/2F091C9A956830560239ECE9A2112A24580088BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwkcmpVoMFYCOezpohEqJFgAiLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/522a88b8-4771-498f-b44c-36ae2f0ce5c4/1/2F091C9A956830560239ECE9A2112A24580088BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:4a:17:91:c3:bb:85:b5:73:10:db:17:cb:6f:82:1e:90:
         71:8a:a5:72:2f:c4:49:81:ce:70:bc:f5:7e:bc:ba:7d:03:32:
         c0:5d:5c:ab:ca:21:ee:e5:fb:ba:95:89:d2:29:36:61:be:72:
         bf:b9:94:2c:66:6d:d4:33:d9:91:6e:75:96:11:27:e9:df:08:
         70:9f:1f:02:fa:9f:ff:dd:1e:a8:3f:19:a6:49:89:22:c1:95:
         4b:28:54:18:65:e2:9b:4d:19:7e:cf:10:f8:10:f8:27:b2:df:
         69:3a:8e:b0:8c:94:28:74:9b:4b:30:d4:91:e8:a4:6c:57:ab:
         5e:c3:6b:90:96:04:88:c6:de:83:bf:60:0a:8e:dc:c8:67:dd:
         85:6a:38:bf:c6:60:21:fd:07:c5:7b:85:92:64:df:55:a0:39:
         bc:da:43:a3:22:48:04:5e:e0:b1:1e:e7:c2:e6:fd:cf:3e:63:
         58:a6:75:e0:ea:eb:92:13:af:b8:8c:2a:93:38:63:92:7d:4e:
         51:7c:e9:50:c6:ca:23:da:71:dd:6e:77:48:17:8d:91:66:5a:
         85:33:cc:df:eb:75:d7:74:91:66:4f:06:e1:58:29:2a:02:90:
         ee:90:fe:ed:d4:20:49:50:20:f9:d4:19:5a:9c:08:a5:80:1f:
         15:70:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org