Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.mft
File:                     1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.mft (raw, json)
Hash identifier:          vpr8pXE15ED48E174acwEYwkOQA5k15cwpvJB0gVtrQ=
Subject key identifier:   03:8D:9F:D0:5C:51:60:22:42:D1:EF:C7:7A:DB:63:74:43:1B:0E:57
Authority key identifier: 17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C
Certificate issuer:       /CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
Certificate serial:       0FB4E2978E5A01D86BFFDC95453FCF568BEFEEE1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.mft
Manifest number:          95
Signing time:             Tue 21 May 2024 01:18:17 +0000
Manifest this update:     Tue 21 May 2024 01:13:17 +0000
Manifest next update:     Wed 22 May 2024 02:44:17 +0000
Files and hashes:         1: 1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.crl (hash: t3TBdgnKElMkrLMDvI1nXj+BbTil3HRmq9wzg1crODY=)
                          2: 326131333a646638303a396461313a3a2f34382d3438203d3e20323135373435.roa (hash: Hw0skpL+uOF/VjaexM0pe2xqMNxmfXtd8/HUhxyp//k=)
                          3: 326131333a646638303a396430303a3a2f34382d3438203d3e20323135373931.roa (hash: +XJWSPIgR33u6Qrj8t++P0SwF5Jm2dI40rT2ymX0BbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b4:e2:97:8e:5a:01:d8:6b:ff:dc:95:45:3f:cf:56:8b:ef:ee:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
        Validity
            Not Before: May 21 01:13:17 2024 GMT
            Not After : May 22 02:44:17 2024 GMT
        Subject: CN=038D9FD05C51602242D1EFC77ADB6374431B0E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:50:cf:1f:6e:e3:8f:5a:8b:a9:ad:5e:be:
                    94:b0:00:dd:cb:51:1a:e3:4c:b1:a5:06:0a:ba:dc:
                    02:8e:9e:58:9b:ea:2b:65:67:c7:ad:61:78:c4:5a:
                    ce:1c:ac:b9:92:52:6c:7c:c6:3c:31:6c:a2:1a:db:
                    f4:ba:76:0d:d0:12:0e:a8:38:fa:6e:73:ab:4c:2f:
                    36:6e:2b:c0:c4:e9:9f:e0:ec:33:94:d6:25:f5:cd:
                    6a:46:7c:a9:13:22:33:d0:5d:59:45:5e:39:9c:24:
                    cc:4f:5c:d8:27:9c:cd:ea:6d:a2:c2:fa:f7:b1:71:
                    0b:46:ae:60:90:6e:c1:d4:da:09:db:df:e9:17:d9:
                    27:7b:ea:af:fd:63:7d:d2:6e:ee:31:2b:4e:15:59:
                    76:2f:9b:06:4b:b7:0c:23:81:16:06:8f:78:72:95:
                    61:d5:db:71:a0:ae:cc:8e:dd:2e:6f:27:92:ef:3d:
                    c1:b4:43:f6:c8:b7:d1:2d:10:5c:82:ee:39:cc:46:
                    d6:bf:ce:be:e1:3f:5e:3e:d8:5c:03:1f:29:ae:96:
                    3a:37:5c:d1:d7:51:e0:27:b9:53:0c:76:1e:82:d0:
                    a5:e7:bd:8f:77:0a:05:17:5f:64:bb:06:4f:06:e2:
                    ac:34:6a:a5:06:ba:10:65:6c:60:6f:b7:d4:32:8b:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:9F:D0:5C:51:60:22:42:D1:EF:C7:7A:DB:63:74:43:1B:0E:57
            X509v3 Authority Key Identifier:
                keyid:17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f8:af:83:0c:34:3e:10:e3:3a:c7:08:0f:fa:75:ce:35:9f:
         b3:36:5e:df:27:3b:ba:a6:dd:13:32:19:89:1f:c2:45:ed:56:
         02:d4:ad:ed:a8:5c:29:0a:14:df:cc:74:e1:4d:28:71:d7:7d:
         62:79:b5:a6:be:60:1c:00:7f:18:2d:a5:89:bb:c9:8c:c3:35:
         fb:cb:94:b2:51:1f:49:a7:a2:19:6d:7f:eb:4c:8f:33:20:9f:
         66:d9:2a:4f:c4:c6:71:46:b2:41:eb:d9:04:27:31:6b:a2:10:
         8c:03:a3:63:2e:40:ef:b2:92:dd:d0:0a:ba:be:7a:9a:0c:bb:
         72:6f:92:0f:cc:37:87:4d:dd:41:fe:96:2d:62:47:fa:96:4c:
         23:39:14:76:a7:c6:b0:d1:44:c1:a9:72:cb:89:a9:15:58:11:
         00:9d:e9:ff:47:89:6e:1a:22:e3:b4:58:f9:a8:bc:2d:5e:6f:
         1c:0a:20:fe:08:0a:37:ea:24:88:17:1b:57:e7:c1:6a:ad:e9:
         71:a8:ae:dd:04:9e:4e:bf:83:1c:b8:63:29:d8:2f:9f:48:d6:
         0d:1d:5a:c3:b0:b3:3d:70:54:f8:dd:13:95:d5:64:22:48:7d:
         89:81:dc:a8:b5:18:52:61:8a:cb:4b:d8:94:e5:77:52:7d:cb:
         6f:fe:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----