Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/12/407A91CCA8009EA033757938D67BFAE4A8647D68.mft
File:                     407A91CCA8009EA033757938D67BFAE4A8647D68.mft (raw, json)
Hash identifier:          j7HGbvuzF/13gIrVVYOXJbXd1XjnR36W3ARcngXyCuo=
Subject key identifier:   5F:F9:FC:12:D2:4E:F7:C1:CE:45:7A:18:D0:C2:65:BE:F0:73:1B:15
Authority key identifier: 40:7A:91:CC:A8:00:9E:A0:33:75:79:38:D6:7B:FA:E4:A8:64:7D:68
Certificate issuer:       /CN=407a91cca8009ea033757938d67bfae4a8647d68
Certificate serial:       5DA802F71ADE30D8F0CCD297E9F4AEC92E632938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHqRzKgAnqAzdXk41nv65KhkfWg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/12/407A91CCA8009EA033757938D67BFAE4A8647D68.mft
Manifest number:          0224
Signing time:             Tue 17 Sep 2024 23:48:25 +0000
Manifest this update:     Tue 17 Sep 2024 23:43:25 +0000
Manifest next update:     Thu 19 Sep 2024 02:53:25 +0000
Files and hashes:         1: 407A91CCA8009EA033757938D67BFAE4A8647D68.crl (hash: UmqrpPaYZ4rJBkJXS6s79YyFFcMtXeCzw7lCUAI97p0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a8:02:f7:1a:de:30:d8:f0:cc:d2:97:e9:f4:ae:c9:2e:63:29:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407a91cca8009ea033757938d67bfae4a8647d68
        Validity
            Not Before: Sep 17 23:43:25 2024 GMT
            Not After : Sep 19 02:53:25 2024 GMT
        Subject: CN=5FF9FC12D24EF7C1CE457A18D0C265BEF0731B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:ab:fb:f0:a1:0f:20:06:74:49:88:f6:a8:
                    95:e1:fe:1a:ea:80:70:0e:6b:a2:aa:72:a0:7a:dd:
                    46:be:af:30:2a:10:b5:a8:2f:f9:d4:71:5c:3c:ad:
                    2a:83:0f:c5:8f:aa:98:2d:f9:39:77:4d:99:63:05:
                    d7:2f:84:3e:18:a0:b2:8b:53:e2:ac:e7:1e:1f:28:
                    a4:02:a9:74:84:d5:a5:ca:ae:89:82:53:db:57:cd:
                    07:26:99:78:1e:4d:a6:a7:e3:76:32:d2:01:4b:ca:
                    78:0e:a1:56:2f:7d:7f:3f:29:1a:26:62:d8:2c:47:
                    05:e2:10:ec:cc:4f:b7:5c:b4:c4:3f:88:a2:ce:67:
                    8c:a1:20:21:5b:d3:e6:0c:64:73:b2:76:eb:47:45:
                    7f:cb:b1:ad:a4:34:c2:df:36:d7:48:f8:83:97:1a:
                    84:27:57:6f:6e:dc:1d:7b:2f:a1:f9:de:2c:34:2c:
                    3c:8d:8c:aa:7e:9e:d6:f9:7f:1b:26:72:56:4b:11:
                    97:ab:62:a5:21:8f:1c:b1:7d:ee:70:e3:e5:5c:0f:
                    66:23:9e:b7:47:d3:ca:b7:90:bc:ef:47:1d:96:c8:
                    ed:b2:19:88:5a:c3:76:59:7a:bc:de:fa:de:2a:d7:
                    70:de:6f:65:ec:0e:e4:96:e1:eb:02:ec:c9:61:f5:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F9:FC:12:D2:4E:F7:C1:CE:45:7A:18:D0:C2:65:BE:F0:73:1B:15
            X509v3 Authority Key Identifier:
                keyid:40:7A:91:CC:A8:00:9E:A0:33:75:79:38:D6:7B:FA:E4:A8:64:7D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/12/407A91CCA8009EA033757938D67BFAE4A8647D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHqRzKgAnqAzdXk41nv65KhkfWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/12/407A91CCA8009EA033757938D67BFAE4A8647D68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:99:0e:95:e1:a4:96:2d:29:ee:de:40:12:69:b6:c4:95:
         d6:95:f8:e1:09:34:75:0b:ea:29:22:7d:ce:8a:dd:75:5c:fa:
         db:88:26:70:1c:34:38:fb:55:82:24:e9:a8:af:cb:50:23:60:
         d1:9b:90:d5:c4:11:6b:a0:ac:8f:f7:26:35:7f:a8:fe:80:57:
         2e:40:7a:13:7e:28:b5:db:f6:61:20:c6:88:68:a1:15:cb:9f:
         56:de:00:ac:de:7a:f2:a8:7f:07:15:fa:a8:30:b7:d4:f2:7c:
         68:8d:07:34:3a:c2:e2:b0:af:a9:0f:ac:dd:3e:21:06:8f:c8:
         c5:4a:a9:ed:d9:83:a9:3a:c4:76:dd:bf:1b:bd:59:8b:90:35:
         71:e7:1f:4b:6e:72:6d:2f:3d:a3:60:ef:0b:79:39:93:92:f9:
         cd:4b:c8:af:01:e6:41:3f:17:66:65:ab:98:7a:82:23:28:b3:
         cc:80:75:4d:f0:52:e1:77:13:63:7f:74:a3:5a:2b:9a:18:41:
         07:8c:48:fc:62:83:65:46:91:59:15:99:5a:d5:92:e4:5e:28:
         98:90:4c:20:5b:62:f8:0c:11:2c:3a:69:76:ec:4a:39:d9:6d:
         69:b9:c0:12:56:ae:21:3c:b3:fc:09:9b:b9:7f:62:01:c8:4a:
         92:51:97:8a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUXagC9xreMNjwzNKX6fSuyS5jKTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA3YTkxY2NhODAwOWVhMDMzNzU3OTM4ZDY3YmZhZTRh
ODY0N2Q2ODAeFw0yNDA5MTcyMzQzMjVaFw0yNDA5MTkwMjUzMjVaMDMxMTAvBgNV
BAMTKDVGRjlGQzEyRDI0RUY3QzFDRTQ1N0ExOEQwQzI2NUJFRjA3MzFCMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2av78KEPIAZ0SYj2qJXh/hrq
gHAOa6KqcqB63Ua+rzAqELWoL/nUcVw8rSqDD8WPqpgt+Tl3TZljBdcvhD4YoLKL
U+Ks5x4fKKQCqXSE1aXKromCU9tXzQcmmXgeTaan43Yy0gFLyngOoVYvfX8/KRom
YtgsRwXiEOzMT7dctMQ/iKLOZ4yhICFb0+YMZHOydutHRX/Lsa2kNMLfNtdI+IOX
GoQnV29u3B17L6H53iw0LDyNjKp+ntb5fxsmclZLEZerYqUhjxyxfe5w4+VcD2Yj
nrdH08q3kLzvRx2WyO2yGYhaw3ZZerze+t4q13Deb2XsDuSW4esC7Mlh9c5rAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUX/n8EtJO98HORXoY0MJlvvBzGxUwHwYDVR0j
BBgwFoAUQHqRzKgAnqAzdXk41nv65KhkfWgwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xMi80MDdBOTFDQ0E4MDA5RUEwMzM3NTc5MzhENjdCRkFFNEE4NjQ3RDY4
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUUhxUnpLZ0FucUF6ZFhrNDFudjY1
S2hrZldnLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVl
Yy0wOGJhLTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvMTIvNDA3QTkxQ0NBODAwOUVB
MDMzNzU3OTM4RDY3QkZBRTRBODY0N0Q2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG7bmQ6V4aSWLSnu
3kASabbEldaV+OEJNHUL6ikifc6K3XVc+tuIJnAcNDj7VYIk6aivy1AjYNGbkNXE
EWugrI/3JjV/qP6AVy5AehN+KLXb9mEgxohooRXLn1beAKzeevKofwcV+qgwt9Ty
fGiNBzQ6wuKwr6kPrN0+IQaPyMVKqe3Zg6k6xHbdvxu9WYuQNXHnH0tucm0vPaNg
7wt5OZOS+c1LyK8B5kE/F2Zlq5h6giMos8yAdU3wUuF3E2N/dKNaK5oYQQeMSPxi
g2VGkVkVmVrVkuReKJiQTCBbYvgMESw6aXbsSjnZbWm5wBJWriE8s/wJm7l/YgHI
SpJRl4o=
-----END CERTIFICATE-----