Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
File:                     974F44DCD416495219413C1B0D69A1F87F507288.mft (raw, json)
Hash identifier:          jTwM/0jAtgIiF0p5Hld3fl0LF/urFgTnSHfIjuLC07M=
Subject key identifier:   F7:83:20:87:C6:A7:E2:9D:F7:82:80:6D:F3:B6:34:1B:1D:23:C2:D8
Authority key identifier: 97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88
Certificate issuer:       /CN=974f44dcd416495219413c1b0d69a1f87f507288
Certificate serial:       3722B1F6DBFC847DE171494B385096F3DD2FDDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
Manifest number:          029F
Signing time:             Sun 30 Jun 2024 03:59:06 +0000
Manifest this update:     Sun 30 Jun 2024 03:54:06 +0000
Manifest next update:     Mon 01 Jul 2024 06:47:06 +0000
Files and hashes:         1: AS212245.asa (hash: ZYHS7bw/60aIF+HAe417yzc3y3QWiUxfEiwvjxJbGvk=)
                          2: 974F44DCD416495219413C1B0D69A1F87F507288.crl (hash: UQ9LMZExkSCpQwP2j1CSQXONQsiF+a+7MpWiyp2k25A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:22:b1:f6:db:fc:84:7d:e1:71:49:4b:38:50:96:f3:dd:2f:dd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974f44dcd416495219413c1b0d69a1f87f507288
        Validity
            Not Before: Jun 30 03:54:06 2024 GMT
            Not After : Jul  1 06:47:06 2024 GMT
        Subject: CN=F7832087C6A7E29DF782806DF3B6341B1D23C2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:2c:ac:d4:9d:92:fd:d9:2b:5d:86:f6:bd:
                    dc:02:fb:6b:1e:c7:fc:04:2a:9d:6e:ae:04:41:75:
                    c7:00:e9:95:c4:87:92:55:de:6c:1b:ee:e5:24:de:
                    4f:42:ce:f0:73:5f:2d:89:5c:35:fe:21:be:3c:cf:
                    2f:65:88:50:64:d3:51:3a:2b:b9:d4:48:c0:89:bd:
                    a8:2c:da:a1:df:f0:fc:5e:a5:a6:cb:53:eb:ac:7e:
                    a9:20:5e:c5:cf:28:5b:41:97:42:22:5a:0f:46:3f:
                    4c:25:6d:8a:93:cd:89:f2:7e:e5:d8:60:a1:55:7c:
                    99:22:e4:36:63:37:46:88:05:ae:fb:e0:13:73:7d:
                    06:27:8e:a6:5f:93:72:fb:7f:89:64:64:5c:c2:6b:
                    ad:62:4b:27:ce:79:1c:4b:a0:4a:c5:13:b5:c6:18:
                    85:61:bf:9e:33:e0:d4:f6:75:93:6c:28:58:8b:6d:
                    26:db:ac:39:78:ed:98:99:41:a9:5f:0d:5d:3f:13:
                    5e:33:46:c9:af:7b:61:10:79:fc:54:28:18:5b:bd:
                    f5:fc:39:89:e0:8d:cf:2f:f7:b3:ed:e2:81:27:da:
                    17:77:d8:98:ae:3f:b2:61:92:57:66:a9:9b:80:44:
                    d1:dd:f0:d4:64:51:09:7f:a1:eb:f4:dc:69:2b:59:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:83:20:87:C6:A7:E2:9D:F7:82:80:6D:F3:B6:34:1B:1D:23:C2:D8
            X509v3 Authority Key Identifier:
                keyid:97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:0b:14:15:20:88:bf:61:25:8c:c5:08:14:c3:f9:a4:62:
         82:1d:91:94:3a:fb:f1:49:c4:24:1b:9a:ca:fe:a6:c6:b2:9b:
         e8:db:4d:d2:85:c2:11:01:3f:48:c4:fb:aa:4f:d4:ca:99:f9:
         38:88:59:ff:44:8d:0f:1e:28:ce:09:7a:11:81:f7:0a:24:10:
         7a:35:3f:a8:6b:eb:e0:f9:f5:51:c5:90:f2:20:3c:de:15:d2:
         ad:b9:31:42:76:99:0f:f6:9c:e9:30:58:63:81:63:93:87:0a:
         ba:17:3c:6a:c0:be:62:45:5f:ec:cb:ae:78:56:2b:8e:3a:cd:
         fa:60:6f:08:9b:2b:b6:ca:0f:b8:dc:24:ac:b3:81:d9:7d:68:
         8e:00:e6:2f:fa:38:cf:b7:c7:85:a7:5e:88:f9:06:9a:da:75:
         68:80:70:d3:4a:f9:cd:bd:fb:0e:e2:f4:6a:4e:bb:44:ab:0f:
         f2:34:d5:5a:dd:d7:7b:be:0b:1f:10:fa:f9:0a:9d:e5:7a:69:
         34:6d:31:a0:0c:c6:4a:ec:18:b4:4e:94:bf:5a:75:17:5d:4b:
         94:83:f7:d2:16:cc:51:f4:88:7d:0d:54:38:d3:f1:84:eb:63:
         07:79:af:7b:be:c7:1e:d6:09:ef:01:7d:e7:7b:8e:ef:1a:a6:
         e6:b8:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----