Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72be7961-4e93-4508-b4f6-a10566d71ff1/0/FB4A37ED6EC1ECE49C5ABFC3DDF5A2DED80786EC.mft
File:                     FB4A37ED6EC1ECE49C5ABFC3DDF5A2DED80786EC.mft (raw, json)
Hash identifier:          TVTOmt1BWr32GrdTbkEHGEHUFlJliqov+VD61zOtm7Q=
Subject key identifier:   CA:05:7C:2B:B0:23:57:3A:61:F8:C1:5A:06:ED:96:57:0A:C5:89:AA
Authority key identifier: FB:4A:37:ED:6E:C1:EC:E4:9C:5A:BF:C3:DD:F5:A2:DE:D8:07:86:EC
Certificate issuer:       /CN=fb4a37ed6ec1ece49c5abfc3ddf5a2ded80786ec
Certificate serial:       7B7286DEF08C6788450D78B023B0F329E56F9F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0o37W7B7OScWr_D3fWi3tgHhuw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72be7961-4e93-4508-b4f6-a10566d71ff1/0/FB4A37ED6EC1ECE49C5ABFC3DDF5A2DED80786EC.mft
Manifest number:          15
Signing time:             Mon 21 Oct 2024 02:32:58 +0000
Manifest this update:     Mon 21 Oct 2024 02:27:58 +0000
Manifest next update:     Tue 22 Oct 2024 03:14:58 +0000
Files and hashes:         1: FB4A37ED6EC1ECE49C5ABFC3DDF5A2DED80786EC.crl (hash: SPyN7pF9sfpB+x9f9NCV5/MtUqOk4zfCHxwkEALvGjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:72:86:de:f0:8c:67:88:45:0d:78:b0:23:b0:f3:29:e5:6f:9f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4a37ed6ec1ece49c5abfc3ddf5a2ded80786ec
        Validity
            Not Before: Oct 21 02:27:58 2024 GMT
            Not After : Oct 22 03:14:58 2024 GMT
        Subject: CN=CA057C2BB023573A61F8C15A06ED96570AC589AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:7b:56:bb:68:ca:2f:77:4d:c2:8b:ac:c7:
                    99:8e:4b:89:09:74:f8:8b:49:e2:d3:0d:a4:59:75:
                    04:53:71:74:ba:3a:84:57:68:ea:73:be:bc:50:91:
                    34:65:2d:24:d2:8e:95:7d:f3:51:a5:94:9b:ac:b9:
                    e0:42:1b:d8:ee:46:60:84:15:0a:3c:7c:99:5f:1f:
                    fb:72:7d:f9:bc:8b:e6:63:44:86:ec:24:88:11:33:
                    ec:f1:7e:04:fa:90:9e:4a:a8:37:7d:63:d2:a9:91:
                    76:67:74:df:95:68:df:9f:04:4b:d1:35:1e:00:7d:
                    95:a9:f6:6c:05:ea:27:90:29:12:61:3f:59:cc:02:
                    52:63:af:bb:3d:31:36:02:73:64:46:fe:15:df:28:
                    fa:f2:05:76:d8:09:a8:a5:90:68:66:b7:6d:ac:07:
                    1a:5d:83:55:d4:18:52:56:cd:b5:ee:da:14:87:4e:
                    0f:34:d9:cd:c5:bd:22:bd:68:97:97:52:b8:36:46:
                    61:a7:ca:cf:4c:c7:a9:fd:3e:f7:75:b0:50:99:fa:
                    fe:19:61:14:10:2c:c6:12:ca:f6:ad:ce:36:3b:54:
                    97:25:f7:fe:27:fb:f6:9a:3b:41:ed:31:d6:4e:aa:
                    64:ae:02:46:4f:b6:6c:2f:ca:ac:5b:7d:7f:24:6a:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:05:7C:2B:B0:23:57:3A:61:F8:C1:5A:06:ED:96:57:0A:C5:89:AA
            X509v3 Authority Key Identifier:
                keyid:FB:4A:37:ED:6E:C1:EC:E4:9C:5A:BF:C3:DD:F5:A2:DE:D8:07:86:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72be7961-4e93-4508-b4f6-a10566d71ff1/0/FB4A37ED6EC1ECE49C5ABFC3DDF5A2DED80786EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0o37W7B7OScWr_D3fWi3tgHhuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72be7961-4e93-4508-b4f6-a10566d71ff1/0/FB4A37ED6EC1ECE49C5ABFC3DDF5A2DED80786EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:ed:8b:25:fb:cd:5f:99:41:39:d6:48:72:22:a8:8a:04:
         c9:93:bf:cf:9a:e1:c1:4a:91:4c:85:b0:2a:0c:47:70:8c:8d:
         65:48:d4:d4:06:3d:5a:bb:8d:85:0d:a3:1b:d8:ef:f0:3b:21:
         0f:e2:43:7f:2f:27:51:92:43:5d:a5:06:fb:2d:2a:d9:29:12:
         0f:f2:1b:35:64:94:50:09:67:5c:f2:6d:8b:68:92:c3:42:74:
         e6:0a:30:0e:08:65:fb:c8:61:f7:04:82:29:48:e8:14:15:e4:
         8e:82:76:27:6e:31:b8:0f:a8:3f:74:07:f8:58:ac:00:06:0e:
         17:46:a0:96:9d:75:d6:d7:43:5f:6f:00:f6:60:5e:27:5f:b9:
         12:d9:2b:f6:41:4d:e2:03:53:b8:12:74:fc:0c:2a:3e:88:89:
         dc:bc:7b:98:aa:ea:7a:bd:d5:a0:3c:aa:2e:c9:43:30:83:4a:
         62:96:f2:97:bc:64:f7:69:7a:bf:1a:e8:9c:a3:d0:2f:f7:5c:
         95:62:a7:03:3a:ad:41:5d:88:70:0e:53:9b:e7:5d:a1:ad:34:
         56:c6:43:b4:0e:d8:f6:aa:a6:76:a7:a4:f1:ba:61:dd:43:64:
         62:04:77:2a:94:49:45:f8:96:39:33:b9:a6:b4:fe:f9:82:6d:
         f2:7d:e1:eb
-----BEGIN CERTIFICATE-----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