Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/0/C054E2DA0FB28BBEAE6243126C7E910263B0097E.mft
File:                     C054E2DA0FB28BBEAE6243126C7E910263B0097E.mft (raw, json)
Hash identifier:          y2mvkoLZVbZDLjaNvkIkf0wJz6RDtFD30pfIGZg1lEg=
Subject key identifier:   C6:40:BE:8C:1C:5B:8E:F7:41:45:2B:ED:DF:A7:74:0D:D5:C7:5F:17
Authority key identifier: C0:54:E2:DA:0F:B2:8B:BE:AE:62:43:12:6C:7E:91:02:63:B0:09:7E
Certificate issuer:       /CN=43729997156ac3f20e69f6e5f2aed115aeeeb2ba746622c050
Certificate serial:       0518C6194226F7955F9551E947364FA819D55157
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156ac3f20e69f6e5f2aed115aeeeb2ba746622c050.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/0/C054E2DA0FB28BBEAE6243126C7E910263B0097E.mft
Manifest number:          D7
Signing time:             Sun 12 Nov 2023 07:00:43 +0000
Manifest this update:     Sun 12 Nov 2023 06:55:43 +0000
Manifest next update:     Mon 13 Nov 2023 09:15:43 +0000
Files and hashes:         1: C054E2DA0FB28BBEAE6243126C7E910263B0097E.crl (hash: FYxpB09qXhTTDE9ntwZGCXV9B9f29voNxx3/lwdLecY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:18:c6:19:42:26:f7:95:5f:95:51:e9:47:36:4f:a8:19:d5:51:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997156ac3f20e69f6e5f2aed115aeeeb2ba746622c050
        Validity
            Not Before: Nov 12 06:55:43 2023 GMT
            Not After : Nov 13 09:15:43 2023 GMT
        Subject: CN=C640BE8C1C5B8EF741452BEDDFA7740DD5C75F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:df:62:24:d8:4e:a1:3d:18:da:b1:de:65:
                    93:a6:4a:fe:37:6f:8d:dc:4e:a0:e7:00:47:3b:72:
                    cf:a7:95:4f:be:24:db:07:2c:a0:20:7e:0a:d3:20:
                    8c:41:55:6b:be:36:88:c7:7b:49:5d:e7:34:77:44:
                    46:32:f6:30:1e:85:02:0b:ed:24:49:fc:d8:19:ea:
                    90:e2:ba:f5:ea:77:b0:fb:aa:de:50:39:da:50:ba:
                    a0:03:a0:f1:3c:4d:2f:28:f9:44:33:db:5e:e2:61:
                    55:5d:52:2b:93:33:2d:c7:e1:45:b0:58:d6:47:77:
                    3c:e9:54:f7:2a:bf:a1:a7:e4:24:05:f4:1d:2a:f9:
                    34:13:bb:c5:4a:32:2e:24:55:b4:36:41:2c:58:9c:
                    c1:ed:01:92:dd:7a:98:37:ea:52:d4:79:42:47:1f:
                    4e:a1:b0:2f:6c:70:78:7b:45:46:7f:e0:b3:0b:9d:
                    68:3c:02:84:8d:fa:c1:54:b3:9f:49:49:b1:3e:f1:
                    47:2a:a7:0e:63:cb:8b:6b:bc:f4:37:ba:f8:19:29:
                    94:61:5e:6d:e5:3b:d0:2e:a2:e6:1b:95:cf:f6:15:
                    a0:2d:4f:ea:9d:29:96:1b:50:ce:bb:57:68:4c:0e:
                    b6:75:79:9e:0d:2f:b0:68:d2:2b:dc:99:b6:e9:01:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:40:BE:8C:1C:5B:8E:F7:41:45:2B:ED:DF:A7:74:0D:D5:C7:5F:17
            X509v3 Authority Key Identifier:
                keyid:C0:54:E2:DA:0F:B2:8B:BE:AE:62:43:12:6C:7E:91:02:63:B0:09:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/0/C054E2DA0FB28BBEAE6243126C7E910263B0097E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156ac3f20e69f6e5f2aed115aeeeb2ba746622c050.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/0/C054E2DA0FB28BBEAE6243126C7E910263B0097E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d8:a4:63:5b:d4:af:44:c2:2b:0e:ae:20:24:40:ae:c0:4e:
         81:0c:f4:de:14:ea:e8:20:09:2a:6c:6a:ab:71:00:0c:a9:48:
         2c:73:fc:e2:d6:e0:fc:0f:ea:cf:b3:7e:36:c4:93:10:8d:58:
         8d:08:90:56:11:8e:ee:8f:dd:7e:87:b6:73:c0:11:60:67:6f:
         83:53:55:f7:14:40:f5:8f:ca:99:67:89:55:2d:2e:e7:54:1c:
         91:50:41:c9:c9:70:69:6a:6a:b1:16:91:a6:3f:e6:af:02:89:
         e3:5d:a7:f2:8c:95:23:b4:c8:5c:67:27:32:89:fb:98:13:a1:
         10:26:0f:05:39:e7:44:fb:3c:36:92:99:56:77:6d:31:5e:4f:
         ec:e2:a6:b6:42:7e:25:e3:31:0c:94:6b:a3:ef:db:77:b8:2f:
         12:75:ac:72:fa:a4:7f:4f:d9:0f:0c:10:39:ed:f9:3a:f6:98:
         22:a5:a2:1d:bd:55:30:94:51:bf:b6:a5:d3:ef:fc:11:36:00:
         24:68:fd:1c:ec:e0:01:7d:39:fe:b9:4a:2b:5d:be:f1:00:c7:
         7b:ce:11:c1:b3:b4:68:a8:a6:fa:e9:ca:a3:19:ba:85:c0:31:
         1e:82:aa:2d:5e:73:f8:ac:bd:bf:c0:f6:c3:02:6b:88:c0:fc:
         60:89:ed:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----