Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a21176fc-ff17-4600-9420-85e8bb01bc6c/0/F3DD5344EB589F4CABE907A6DF8D77764D9F3EB2.mft
File:                     F3DD5344EB589F4CABE907A6DF8D77764D9F3EB2.mft (raw, json)
Hash identifier:          6z7ktWLipe2SggSZt1BpJCq+5ZXE2NWKDwfGg/P82hY=
Subject key identifier:   89:5E:83:29:45:18:18:A2:7F:83:92:62:6E:05:93:77:A0:48:DF:25
Authority key identifier: F3:DD:53:44:EB:58:9F:4C:AB:E9:07:A6:DF:8D:77:76:4D:9F:3E:B2
Certificate issuer:       /CN=f3dd5344eb589f4cabe907a6df8d77764d9f3eb2
Certificate serial:       3DF84849994BDEB3BDE3DD295C3D7B5231794F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/891TROtYn0yr6Qem3413dk2fPrI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a21176fc-ff17-4600-9420-85e8bb01bc6c/0/F3DD5344EB589F4CABE907A6DF8D77764D9F3EB2.mft
Manifest number:          01
Signing time:             Thu 04 May 2023 19:24:42 +0000
Manifest this update:     Thu 04 May 2023 19:19:42 +0000
Manifest next update:     Fri 05 May 2023 21:04:42 +0000
Files and hashes:         1: F3DD5344EB589F4CABE907A6DF8D77764D9F3EB2.crl (hash: Ncj/osR+n4F+pGrgMX1jmPoW6C+xoY56PhitRbwHGuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f8:48:49:99:4b:de:b3:bd:e3:dd:29:5c:3d:7b:52:31:79:4f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3dd5344eb589f4cabe907a6df8d77764d9f3eb2
        Validity
            Not Before: May  4 19:19:42 2023 GMT
            Not After : May  5 21:04:42 2023 GMT
        Subject: CN=895E8329451818A27F8392626E059377A048DF25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:64:fc:4e:4b:a3:9b:21:9b:13:58:88:75:
                    31:f9:a3:cf:0d:f1:50:96:cd:a2:0b:bc:77:75:da:
                    e7:f7:94:a7:60:5c:5c:68:03:14:41:01:b8:18:e7:
                    6c:ed:aa:f0:b4:38:23:39:04:2b:77:a0:41:85:da:
                    c7:ad:1e:6d:a0:9c:ad:0b:0a:4c:6a:20:c4:d4:82:
                    24:0c:92:9f:35:b7:c2:5a:44:05:43:b4:1d:cd:20:
                    f4:c8:fb:31:f3:fe:8c:d2:d8:34:04:25:56:df:29:
                    2d:76:66:d9:5f:a4:89:c5:49:b4:08:20:6d:36:fe:
                    a6:62:4b:1f:e3:b1:d0:3c:35:cf:78:f3:4c:20:96:
                    59:f3:ae:d8:a8:0a:75:07:06:19:1a:e9:9e:02:a4:
                    47:1d:d6:3c:24:60:d3:94:15:07:12:bc:58:e0:76:
                    39:b5:f8:69:13:86:33:a7:c3:7a:62:c1:a9:9a:d5:
                    8b:71:1d:b2:91:5a:1d:58:7c:e6:0c:a3:60:5d:86:
                    5b:c5:93:ab:64:b2:1e:c9:e9:25:7e:00:73:c6:66:
                    b1:e0:17:c8:b0:8e:24:68:64:16:0a:b7:cd:3b:21:
                    4f:73:1d:5b:56:d1:e7:3b:87:94:a3:5f:25:26:b9:
                    31:0a:f6:43:c1:df:ce:92:05:0c:f1:c1:78:7f:b4:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5E:83:29:45:18:18:A2:7F:83:92:62:6E:05:93:77:A0:48:DF:25
            X509v3 Authority Key Identifier:
                keyid:F3:DD:53:44:EB:58:9F:4C:AB:E9:07:A6:DF:8D:77:76:4D:9F:3E:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a21176fc-ff17-4600-9420-85e8bb01bc6c/0/F3DD5344EB589F4CABE907A6DF8D77764D9F3EB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/891TROtYn0yr6Qem3413dk2fPrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a21176fc-ff17-4600-9420-85e8bb01bc6c/0/F3DD5344EB589F4CABE907A6DF8D77764D9F3EB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:ba:1a:6e:4b:54:22:25:d2:7e:11:bf:27:72:48:ad:6a:
         bd:98:5b:11:92:59:ad:6f:06:d8:9c:c8:97:c5:0b:7f:c9:4f:
         e8:96:b6:ac:c2:03:8f:9a:38:a4:4e:9f:cf:7c:85:24:20:e6:
         76:87:87:a2:4f:58:16:e8:75:eb:61:8b:68:4b:f6:64:68:3c:
         3f:c9:97:43:ed:ce:d9:06:c0:3d:7f:6f:c2:39:25:86:9a:b1:
         f5:54:7c:35:bb:2f:ba:1f:73:92:27:2f:e9:8e:b3:7c:da:4b:
         6f:6d:74:d0:80:17:73:21:aa:49:df:09:b7:c5:88:e7:09:48:
         9e:78:d6:9a:6b:53:0a:84:6a:37:b2:2d:f0:5a:4b:46:a7:3a:
         3b:b8:ce:b4:e6:f1:3c:f6:77:24:b7:c3:09:ff:58:52:6b:79:
         e4:3b:8d:08:5c:ff:f0:4a:41:f2:5d:32:bb:7f:79:3b:9e:12:
         fb:40:70:92:63:07:f3:bd:ea:41:2e:a1:ea:84:a9:21:82:d7:
         d2:c7:25:ae:dc:a0:17:a4:ff:43:4c:11:42:16:4b:25:c4:f4:
         ac:2e:0b:d8:e0:90:b4:f5:d6:3a:9f:f7:8a:60:8b:20:d9:2d:
         4c:b2:30:6c:9c:aa:86:f0:13:fb:83:c8:f3:86:89:f3:0b:c2:
         54:6a:cf:1e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPfhISZlL3rO9490pXD17UjF5T1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjNkZDUzNDRlYjU4OWY0Y2FiZTkwN2E2ZGY4ZDc3NzY0
ZDlmM2ViMjAeFw0yMzA1MDQxOTE5NDJaFw0yMzA1MDUyMTA0NDJaMDMxMTAvBgNV
BAMTKDg5NUU4MzI5NDUxODE4QTI3RjgzOTI2MjZFMDU5Mzc3QTA0OERGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt92T8TkujmyGbE1iIdTH5o88N
8VCWzaILvHd12uf3lKdgXFxoAxRBAbgY52ztqvC0OCM5BCt3oEGF2setHm2gnK0L
CkxqIMTUgiQMkp81t8JaRAVDtB3NIPTI+zHz/ozS2DQEJVbfKS12ZtlfpInFSbQI
IG02/qZiSx/jsdA8Nc9480wgllnzrtioCnUHBhka6Z4CpEcd1jwkYNOUFQcSvFjg
djm1+GkThjOnw3piwama1YtxHbKRWh1YfOYMo2BdhlvFk6tksh7J6SV+AHPGZrHg
F8iwjiRoZBYKt807IU9zHVtW0ec7h5SjXyUmuTEK9kPB386SBQzxwXh/tCkpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUiV6DKUUYGKJ/g5JibgWTd6BI3yUwHwYDVR0j
BBgwFoAU891TROtYn0yr6Qem3413dk2fPrIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTIxMTc2ZmMtZmYxNy00NjAwLTk0MjAtODVlOGJiMDFi
YzZjLzAvRjNERDUzNDRFQjU4OUY0Q0FCRTkwN0E2REY4RDc3NzY0RDlGM0VCMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5MVRST3RZbjB5cjZRZW0zNDEzZGsy
ZlBySS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMjExNzZmYy1m
ZjE3LTQ2MDAtOTQyMC04NWU4YmIwMWJjNmMvMC9GM0RENTM0NEVCNTg5RjRDQUJF
OTA3QTZERjhENzc3NjREOUYzRUIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegW6Gm5LVCIl0n4Rvydy
SK1qvZhbEZJZrW8G2JzIl8ULf8lP6Ja2rMIDj5o4pE6fz3yFJCDmdoeHok9YFuh1
62GLaEv2ZGg8P8mXQ+3O2QbAPX9vwjklhpqx9VR8Nbsvuh9zkicv6Y6zfNpLb210
0IAXcyGqSd8Jt8WI5wlInnjWmmtTCoRqN7It8FpLRqc6O7jOtObxPPZ3JLfDCf9Y
Umt55DuNCFz/8EpB8l0yu395O54S+0BwkmMH873qQS6h6oSpIYLX0sclrtygF6T/
Q0wRQhZLJcT0rC4L2OCQtPXWOp/3imCLINktTLIwbJyqhvAT+4PI84aJ8wvCVGrP
Hg==
-----END CERTIFICATE-----