Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/5/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.mft
File:                     28FA507C2092BDD1BBD1B0816C9D71CD4681096C.mft (raw, json)
Hash identifier:          Ct26tw/GmHDR93sraTSW9aKdDIgKqUxl0ZWvB6RsYAU=
Subject key identifier:   E1:58:DE:BC:20:47:10:8C:D0:0E:49:8C:5F:F5:E4:71:2D:87:4D:B0
Authority key identifier: 28:FA:50:7C:20:92:BD:D1:BB:D1:B0:81:6C:9D:71:CD:46:81:09:6C
Certificate issuer:       /CN=28FA507C2092BDD1BBD1B0816C9D71CD4681096C
Certificate serial:       2565DAF3F24E9DA3CDD51E48365468D8FD4822A6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/5/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.mft
Manifest number:          7C
Signing time:             Fri 12 Jul 2024 12:00:42 +0000
Manifest this update:     Fri 12 Jul 2024 11:55:42 +0000
Manifest next update:     Sat 13 Jul 2024 14:59:42 +0000
Files and hashes:         1: 326130373a323438363a6664303a3a2f34342d3438203d3e20313938393233.roa (hash: kkorToFhEET+0ZUe5GV5ZC40NiAugo+kFaHz0/99qtk=)
                          2: 326130373a323438373a3a2f33322d3438203d3e20323135383238.roa (hash: xk7l1owCzIrdzsG7TbvX2HYnTLvHPNo+ynDFSI4bcJA=)
                          3: 326130373a323438363a3a2f34382d3438203d3e20323135383238.roa (hash: AtEXC7Xj3VFBrg8EM4kvYh4q19lVhremPLr8T3SoB2k=)
                          4: 28FA507C2092BDD1BBD1B0816C9D71CD4681096C.crl (hash: CtJHMoEJE+bNTOIk3E1hkczY1BABGLcW0OVjnVkhPiU=)
                          5: 326130373a323438363a313a3a2f34382d3438203d3e20323135383238.roa (hash: xiPLQLnJuHQPDVuXLoa43JUgSDfVhnW7vvYUAwHf3BI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:65:da:f3:f2:4e:9d:a3:cd:d5:1e:48:36:54:68:d8:fd:48:22:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FA507C2092BDD1BBD1B0816C9D71CD4681096C
        Validity
            Not Before: Jul 12 11:55:42 2024 GMT
            Not After : Jul 13 14:59:42 2024 GMT
        Subject: CN=E158DEBC2047108CD00E498C5FF5E4712D874DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d3:d0:17:69:ec:9c:69:71:25:e0:49:17:87:
                    b0:a1:3e:af:42:b9:e5:37:8e:ce:b5:a1:30:68:b2:
                    06:26:e8:4f:a2:f3:2c:81:e2:96:25:f5:e4:be:53:
                    ec:be:7f:92:89:ac:83:bf:29:cf:10:cf:73:e3:1a:
                    1a:3f:52:3b:38:a1:f5:9a:bc:b1:c5:7b:f8:8a:40:
                    39:53:7a:7d:7a:5f:e1:18:38:bf:9d:52:da:93:85:
                    7f:08:c8:53:38:e3:31:6d:cf:ab:d7:2f:c5:0a:e9:
                    03:7f:30:f0:ef:37:63:54:44:60:5d:a0:f6:0f:88:
                    e7:36:10:53:48:d8:dd:fd:a6:dc:2e:66:ff:77:ac:
                    0f:74:a3:ad:b2:9c:3a:d0:4e:a9:d9:7e:ea:a5:29:
                    53:22:d1:37:f9:46:26:c5:d5:5d:b4:4c:b4:ac:6e:
                    c0:5b:c3:13:f0:3d:54:63:69:c1:a6:26:a2:5e:8d:
                    d6:e5:32:c1:a8:09:f5:85:68:b5:70:3f:cf:bc:27:
                    3f:84:5c:c2:41:88:bb:52:21:ca:d8:aa:33:d5:26:
                    b1:c7:5f:fa:13:24:2f:e5:51:fd:a2:54:98:cb:01:
                    22:e9:a6:77:b9:5d:90:90:ca:60:b5:6e:02:05:37:
                    9a:0c:af:76:96:8a:cc:7e:16:3e:23:b9:a6:da:42:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:58:DE:BC:20:47:10:8C:D0:0E:49:8C:5F:F5:E4:71:2D:87:4D:B0
            X509v3 Authority Key Identifier:
                keyid:28:FA:50:7C:20:92:BD:D1:BB:D1:B0:81:6C:9D:71:CD:46:81:09:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/5/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/5/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:3a:8e:25:37:be:fd:5d:36:21:88:dc:5d:a8:99:d0:a9:
         c5:cb:78:81:94:fa:97:3b:8a:86:ce:59:2a:a8:cc:5c:17:40:
         1b:a8:d6:10:7a:8d:d0:7a:30:f5:d1:eb:eb:ab:f7:4b:96:f5:
         df:36:a2:20:45:91:03:d4:80:40:04:e2:62:0e:fa:ee:1c:3f:
         84:2c:ff:ba:23:14:34:18:30:22:67:66:2a:57:ad:7b:6b:41:
         aa:42:65:32:0b:51:77:1c:88:11:d4:ef:8f:d7:19:2b:be:39:
         08:67:2f:a9:45:43:0b:68:13:46:cd:73:c0:c6:33:7f:b6:7e:
         8e:b4:70:2f:13:80:f2:aa:6c:d8:83:a0:a4:af:aa:f8:fd:91:
         17:52:cc:7d:01:e5:36:58:ed:1f:f4:aa:6a:8d:de:8e:6e:88:
         54:f1:67:e7:59:93:36:2a:d1:19:64:f6:b2:a2:20:16:06:33:
         43:82:26:63:b0:1b:84:c7:5d:cf:66:8d:45:dd:10:db:4d:80:
         a8:e3:ce:0f:6d:9d:8b:f5:2f:21:53:f3:c6:84:44:11:0a:97:
         d9:a5:61:e1:41:32:0b:19:7e:f1:cf:fd:1b:a7:4b:d6:92:ce:
         ca:3e:bc:34:92:6d:8d:4b:7c:7a:6a:ef:70:85:2e:85:97:ce:
         45:aa:bf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----