Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft
File:                     18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft (raw, json)
Hash identifier:          d+pZ9XBClXNnNpggpEQPjC2E8Ibnp5exm37gLbML6TY=
Subject key identifier:   15:7C:8F:98:53:8D:63:62:87:47:8F:CB:D8:C6:3E:C4:29:13:DC:2E
Authority key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Certificate issuer:       /CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Certificate serial:       735075D350F8C573508031FF04F6F58C800FE77F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft
Manifest number:          20
Signing time:             Wed 06 Mar 2024 21:39:18 +0000
Manifest this update:     Wed 06 Mar 2024 21:34:18 +0000
Manifest next update:     Thu 07 Mar 2024 22:34:18 +0000
Files and hashes:         1: AS43607.asa (hash: 6vAs+LA+IgAm/mwHm3fUIPjB8OEGOXCGu9hyqc8nVM4=)
                          2: 18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl (hash: 2sJzkgfNiwLfDeU4+3LMTXCqyZ0stEvo4JDYkEDlA0c=)
                          3: AS215569.asa (hash: QuBPrTm22fzpsR1YgfT48f8aAqm3b1n/C/8UybzJdUc=)
                          4: 326130373a323438303a3a2f33322d3332203d3e203433363037.roa (hash: GebQaNqzCtdrXzNUpCWbrzmOx02SEpA8l4oUUbBXZYI=)
                          5: 3139332e31372e322e302f32342d3234203d3e203433363037.roa (hash: EdvsLAgty2YLvHeCmOyNGvwDfRacke6SNmV0IqDu3q8=)
                          6: 326130373a323438373a3a2f33322d3332203d3e20323135383238.roa (hash: u7xfU8N6OEMUWrGlScdQvVeRu6Mz9Ky2b2nV9fyqyfs=)
                          7: 326130373a323438363a6666303a3a2f34342d3434203d3e20323136333930.roa (hash: SwfFJcx0OoI8pri4+dUTHUn9mK0eTTFgmDjxTZRL2+k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:50:75:d3:50:f8:c5:73:50:80:31:ff:04:f6:f5:8c:80:0f:e7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
        Validity
            Not Before: Mar  6 21:34:18 2024 GMT
            Not After : Mar  7 22:34:18 2024 GMT
        Subject: CN=157C8F98538D636287478FCBD8C63EC42913DC2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:5f:eb:41:ca:17:cc:ab:3e:14:57:15:16:
                    ef:03:8d:e1:28:df:f0:c0:0e:a0:3c:7c:9d:ff:75:
                    67:cc:81:bf:34:2f:59:ca:2d:7b:6a:25:68:2b:2f:
                    a6:13:40:c7:38:f9:f4:7a:7f:5c:7d:e1:d6:b6:b1:
                    1a:26:68:3c:8a:f8:18:f3:f7:ce:8c:dd:b3:3a:3e:
                    54:41:b4:2b:30:c3:12:78:aa:99:e1:2f:b6:3a:ca:
                    67:50:21:f7:7c:d0:10:3a:1c:d5:66:af:de:6a:b0:
                    b3:e6:8a:88:6d:f0:a1:1a:30:67:50:c7:17:89:91:
                    c0:57:a8:1a:75:62:ca:98:51:eb:a2:9a:9e:84:73:
                    25:cd:f8:4a:3b:2a:2b:21:8c:7a:dd:6c:95:e4:04:
                    8c:4d:1a:06:c4:e5:d6:7c:29:1b:c5:26:38:c3:e8:
                    f3:e3:4d:40:96:3b:7f:10:a8:46:04:9d:17:5e:dc:
                    eb:37:23:29:33:0c:03:79:ab:98:92:9c:3e:70:cd:
                    ad:30:74:75:fd:04:6d:d6:ad:5c:be:08:27:a0:04:
                    45:a4:ae:1b:28:fa:d9:a1:33:63:b3:b9:67:8b:c8:
                    c4:c5:e0:06:32:db:3e:03:4d:0c:ef:60:5f:41:19:
                    4f:12:18:97:c3:4f:f1:15:0d:b2:d1:f3:53:7c:94:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7C:8F:98:53:8D:63:62:87:47:8F:CB:D8:C6:3E:C4:29:13:DC:2E
            X509v3 Authority Key Identifier:
                keyid:18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3f:42:ee:e0:a1:cd:8c:d3:ef:2d:53:69:38:82:8d:e7:fc:
         44:7a:b0:64:7b:33:ac:e7:d8:30:cc:3a:ca:b1:31:e2:28:4e:
         a6:e1:b8:86:e1:42:36:a0:ad:80:1b:56:cd:f4:c1:8c:0e:ff:
         ca:7f:35:03:35:ef:b4:f1:ac:82:e3:e2:25:d8:af:7a:1e:52:
         c7:51:4e:7a:5e:bd:f4:81:11:01:f1:1d:09:92:c6:8c:41:50:
         1d:d6:73:0e:7a:c5:46:26:da:39:b2:91:d4:68:31:94:36:23:
         e5:a0:a7:9b:45:ed:c5:64:4c:6f:e3:97:36:5d:47:98:16:75:
         c8:25:1d:a6:db:8d:1e:84:5f:c6:44:4b:5f:bf:88:77:14:89:
         98:97:c5:47:0c:2d:8a:33:f6:c8:e5:a9:44:15:db:43:5e:65:
         ac:a4:b2:b0:f7:78:ad:8b:98:dd:69:6f:69:2a:20:54:94:22:
         76:38:09:bd:d6:24:a4:45:e8:a5:64:78:a9:71:e3:54:60:46:
         ba:a9:9a:a3:c4:a7:4b:c7:77:d3:94:60:79:e1:58:00:a9:78:
         6e:ba:67:64:4d:cf:63:23:be:b4:d1:23:04:55:1a:07:85:ea:
         fb:73:92:79:5e:3d:23:49:95:80:4f:26:8f:ec:23:c3:de:27:
         2d:cb:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 01:10:35 2024 by rpki-client on console-ams.rpki-client.org