Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
File:                     503177A5FC39DD005C41B770207D6705510713A8.mft (raw, json)
Hash identifier:          Iff/B5NVsWJhgTSkZorg8WruUHVwKsKfJIIaTqWH9gc=
Subject key identifier:   B5:CC:79:2F:D7:DB:B6:6A:EC:BA:EA:E5:3F:C8:19:B7:FA:0D:D0:50
Authority key identifier: 50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8
Certificate issuer:       /CN=503177A5FC39DD005C41B770207D6705510713A8
Certificate serial:       3DB4F7E349243BBB433FDC143BBB1BD148873D91
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
Manifest number:          09
Signing time:             Wed 26 Jun 2024 09:17:54 +0000
Manifest this update:     Wed 26 Jun 2024 09:12:54 +0000
Manifest next update:     Thu 27 Jun 2024 10:34:54 +0000
Files and hashes:         1: 503177A5FC39DD005C41B770207D6705510713A8.crl (hash: DnODyoBnZfQAFt9KlDXPbFV+iSFstSbxf5tzwwEkkoQ=)
                          2: 326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa (hash: hf0sTrKrDJ4boI08ZHhNaHWTmMq+esR34eLQdUrR3Dc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b4:f7:e3:49:24:3b:bb:43:3f:dc:14:3b:bb:1b:d1:48:87:3d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503177A5FC39DD005C41B770207D6705510713A8
        Validity
            Not Before: Jun 26 09:12:54 2024 GMT
            Not After : Jun 27 10:34:54 2024 GMT
        Subject: CN=B5CC792FD7DBB66AECBAEAE53FC819B7FA0DD050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:e4:fe:f4:86:4a:96:f6:51:8f:01:f0:de:
                    51:20:fa:a1:16:c8:6f:b4:96:f8:83:0d:c5:1c:6d:
                    81:fd:a7:3d:2f:8f:ca:6d:2e:cc:48:db:07:82:b1:
                    25:db:ac:0c:27:05:e3:78:12:ff:5f:35:d9:bd:1f:
                    ad:c2:60:06:da:a9:7b:01:b0:ed:92:dd:fa:be:68:
                    11:bb:24:23:56:fc:d9:5d:b8:23:21:ca:07:01:f0:
                    87:82:55:31:af:1c:1f:47:6f:95:95:69:57:9c:d6:
                    8e:60:48:0f:86:21:15:61:3c:34:7e:07:59:0b:8a:
                    91:6c:fc:b6:06:ce:ae:9f:42:c3:b3:41:79:c6:3e:
                    de:42:09:23:bb:bd:56:d8:ca:d8:f5:e9:ac:14:1f:
                    0e:28:d8:53:63:71:3c:f4:41:f1:cd:f0:d9:1a:d0:
                    8c:fe:4d:3a:7d:f4:ea:85:aa:a1:bd:8d:f8:11:71:
                    5e:cc:65:38:8b:17:ff:0b:7b:32:e9:14:7f:b6:f7:
                    c7:4a:b1:80:4c:38:01:7b:1a:4c:c2:cb:d0:57:b2:
                    99:01:87:fe:4e:67:2b:4f:62:91:de:fb:66:e5:46:
                    5c:83:a5:40:07:23:7b:83:fb:a6:74:dc:f9:bd:67:
                    72:04:fe:37:84:b4:6d:26:0b:da:21:9a:30:03:97:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CC:79:2F:D7:DB:B6:6A:EC:BA:EA:E5:3F:C8:19:B7:FA:0D:D0:50
            X509v3 Authority Key Identifier:
                keyid:50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ce:e1:69:4b:9b:d5:57:19:fd:b0:fc:e8:79:88:9b:76:50:
         2b:a0:e3:4e:c9:89:42:7d:e0:2d:d4:cb:37:38:d6:6f:26:87:
         24:97:63:07:5f:46:7e:9e:f1:fc:f6:95:e0:a6:a3:26:34:05:
         7f:b1:2a:c5:a8:84:be:6c:fa:5b:37:91:29:b9:d4:6b:b3:d4:
         1d:ad:20:51:36:d5:34:fd:a6:75:03:63:e3:14:12:df:80:21:
         7c:6f:4c:ba:50:7d:ae:64:2a:d0:88:86:89:50:d9:0d:c9:70:
         31:47:78:9c:9c:47:50:61:3c:45:f8:02:fc:a4:66:01:d0:d9:
         cd:e6:f6:b0:04:bc:d4:0e:eb:a8:ba:bb:d3:ab:03:14:35:5f:
         b5:4b:08:36:01:01:08:3f:a3:34:b1:12:27:d4:a2:6f:cd:ad:
         8b:ea:2e:14:bd:de:65:69:d7:f5:81:66:1d:81:ea:cc:15:18:
         fd:26:7a:f0:bb:b6:c2:e8:34:12:0e:d0:ce:9e:45:28:cc:a9:
         97:a7:fc:c6:94:51:16:3a:fb:e5:7d:fe:78:2a:c3:a9:a0:52:
         6d:bf:6b:33:d7:eb:4f:cd:62:6f:1a:07:7e:71:12:cf:c6:53:
         ef:7a:90:1a:91:45:fd:aa:bd:05:29:95:1d:24:62:94:a2:13:
         d2:98:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:15 2025 by rpki-client