Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/19/07D9165AF9441043EBDEA8C571C0A1F8B6416BBC.mft
File:                     07D9165AF9441043EBDEA8C571C0A1F8B6416BBC.mft (raw, json)
Hash identifier:          uU5NpPfi/u0lnDh4GhZ7bU3TbnyBUnJy/RmFJfgWGDE=
Subject key identifier:   33:1F:B3:70:C2:81:22:7E:66:F8:A1:87:FA:9A:77:A4:2B:68:1C:C9
Authority key identifier: 07:D9:16:5A:F9:44:10:43:EB:DE:A8:C5:71:C0:A1:F8:B6:41:6B:BC
Certificate issuer:       /CN=07d9165af9441043ebdea8c571c0a1f8b6416bbc
Certificate serial:       17D514F2A9133C37C8BD1033F1CC2E451AC1205F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9kWWvlEEEPr3qjFccCh-LZBa7w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/19/07D9165AF9441043EBDEA8C571C0A1F8B6416BBC.mft
Manifest number:          16
Signing time:             Fri 09 Feb 2024 06:38:31 +0000
Manifest this update:     Fri 09 Feb 2024 06:33:31 +0000
Manifest next update:     Sat 10 Feb 2024 08:45:31 +0000
Files and hashes:         1: 326130373a663838303a3a2f32392d3438203d3e203539393933.roa (hash: wMQSqEm1C5z1nsv6thKeX5gFF1W64cXFpC4DBf5lNtc=)
                          2: 07D9165AF9441043EBDEA8C571C0A1F8B6416BBC.crl (hash: SZBGQ0cc3THHNYMG7pCeJo/jETM+GJSxA8jfpmPctWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d5:14:f2:a9:13:3c:37:c8:bd:10:33:f1:cc:2e:45:1a:c1:20:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d9165af9441043ebdea8c571c0a1f8b6416bbc
        Validity
            Not Before: Feb  9 06:33:31 2024 GMT
            Not After : Feb 10 08:45:31 2024 GMT
        Subject: CN=331FB370C281227E66F8A187FA9A77A42B681CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:e2:6f:31:9b:ab:58:f9:f2:32:40:ed:0e:
                    21:0c:0a:48:68:84:ec:2d:07:6f:68:9a:45:16:04:
                    9b:05:d3:59:c1:60:ee:22:1d:3d:13:94:ea:cb:db:
                    3a:a6:e3:a0:8a:e9:cf:ab:bc:96:10:a8:3e:29:78:
                    42:10:04:88:ca:08:d3:c8:ec:30:79:71:ca:0b:ed:
                    02:43:99:ce:39:19:b8:4c:e0:fa:08:ee:9a:08:c7:
                    40:1a:48:f8:1a:31:9c:4c:6a:ea:90:c3:b4:e2:bf:
                    0a:cd:63:41:5d:77:be:5b:f4:e4:e4:03:45:95:29:
                    71:99:4f:59:02:19:65:2b:41:d1:93:a5:66:2f:a1:
                    c0:4c:d5:f1:50:b1:bc:a8:f8:ec:64:2f:c4:dc:c7:
                    f2:8a:9f:17:be:25:55:99:73:a0:aa:05:58:f4:7e:
                    b2:2e:61:2d:61:f2:4e:c0:4b:f0:61:3b:27:6e:56:
                    0b:84:e7:0d:b3:aa:80:f0:d7:c8:10:46:97:bd:49:
                    05:18:d2:57:f1:53:56:0d:6f:87:da:fe:f8:a5:e3:
                    37:45:de:5e:70:44:a7:6b:f1:3d:2e:8a:ef:36:30:
                    09:8b:80:2e:89:2c:16:77:12:b0:af:8b:46:9a:ea:
                    37:80:36:9c:ee:cb:c3:66:5e:51:a8:db:61:87:f1:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1F:B3:70:C2:81:22:7E:66:F8:A1:87:FA:9A:77:A4:2B:68:1C:C9
            X509v3 Authority Key Identifier:
                keyid:07:D9:16:5A:F9:44:10:43:EB:DE:A8:C5:71:C0:A1:F8:B6:41:6B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/19/07D9165AF9441043EBDEA8C571C0A1F8B6416BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9kWWvlEEEPr3qjFccCh-LZBa7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/19/07D9165AF9441043EBDEA8C571C0A1F8B6416BBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d7:d5:8b:eb:21:cb:8c:52:2a:6e:c6:a5:03:91:76:f4:dc:
         41:e6:01:57:7f:28:60:2a:9b:f9:ee:f1:a8:c4:31:c9:e0:22:
         12:31:fd:c5:8a:33:86:ad:32:be:06:ac:31:61:81:b1:89:8c:
         b8:d8:b9:56:ad:46:e4:03:12:2d:49:48:c3:4d:f9:a9:42:f7:
         c3:5e:7f:a9:0e:24:e3:ed:69:ac:87:55:f3:31:bf:b5:d9:5c:
         83:4e:1d:21:33:31:25:fc:6c:78:2f:da:3c:8c:2a:b2:86:fd:
         32:53:69:25:e7:d0:91:74:42:77:b2:fc:79:5d:ee:d9:cd:35:
         46:c5:98:1e:55:53:5b:dc:ca:f0:7c:61:34:39:6c:c8:07:ad:
         ab:5d:a2:65:e2:f6:f4:30:31:32:0a:cf:80:12:c7:3d:92:d4:
         9b:07:05:8f:6f:f2:ad:e3:96:ee:52:bc:27:b4:05:13:e7:30:
         24:73:ca:f9:c4:ba:f6:30:80:0f:f0:d3:46:ed:a6:88:de:5e:
         50:f6:be:84:4c:70:9a:c4:6f:df:75:83:95:b3:7d:f6:e8:8d:
         db:33:5b:da:39:5f:b0:84:0a:13:fa:43:9a:91:a0:d1:80:cb:
         8b:3e:10:dd:ad:88:8c:a0:57:c8:3c:2c:56:de:db:74:86:a6:
         d2:22:26:cf
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUF9UU8qkTPDfIvRAz8cwuRRrBIF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdkOTE2NWFmOTQ0MTA0M2ViZGVhOGM1NzFjMGExZjhi
NjQxNmJiYzAeFw0yNDAyMDkwNjMzMzFaFw0yNDAyMTAwODQ1MzFaMDMxMTAvBgNV
BAMTKDMzMUZCMzcwQzI4MTIyN0U2NkY4QTE4N0ZBOUE3N0E0MkI2ODFDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcROJvMZurWPnyMkDtDiEMCkho
hOwtB29omkUWBJsF01nBYO4iHT0TlOrL2zqm46CK6c+rvJYQqD4peEIQBIjKCNPI
7DB5ccoL7QJDmc45GbhM4PoI7poIx0AaSPgaMZxMauqQw7TivwrNY0Fdd75b9OTk
A0WVKXGZT1kCGWUrQdGTpWYvocBM1fFQsbyo+OxkL8Tcx/KKnxe+JVWZc6CqBVj0
frIuYS1h8k7AS/BhOyduVguE5w2zqoDw18gQRpe9SQUY0lfxU1YNb4fa/vil4zdF
3l5wRKdr8T0uiu82MAmLgC6JLBZ3ErCvi0aa6jeANpzuy8NmXlGo22GH8dGlAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUMx+zcMKBIn5m+KGH+pp3pCtoHMkwHwYDVR0j
BBgwFoAUB9kWWvlEEEPr3qjFccCh+LZBa7wwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xOS8wN0Q5MTY1QUY5NDQxMDQzRUJERUE4QzU3MUMwQTFGOEI2NDE2QkJD
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQjlrV1d2bEVFRVByM3FqRmNjQ2gt
TFpCYTd3LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVl
Yy0wOGJhLTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvMTkvMDdEOTE2NUFGOTQ0MTA0
M0VCREVBOEM1NzFDMEExRjhCNjQxNkJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEjX1YvrIcuMUipu
xqUDkXb03EHmAVd/KGAqm/nu8ajEMcngIhIx/cWKM4atMr4GrDFhgbGJjLjYuVat
RuQDEi1JSMNN+alC98Nef6kOJOPtaayHVfMxv7XZXINOHSEzMSX8bHgv2jyMKrKG
/TJTaSXn0JF0Qney/Hld7tnNNUbFmB5VU1vcyvB8YTQ5bMgHratdomXi9vQwMTIK
z4ASxz2S1JsHBY9v8q3jlu5SvCe0BRPnMCRzyvnEuvYwgA/w00btpojeXlD2voRM
cJrEb991g5WzffbojdszW9o5X7CEChP6Q5qRoNGAy4s+EN2tiIygV8g8LFbe23SG
ptIiJs8=
-----END CERTIFICATE-----
Generated at Fri Feb 9 15:35:15 2024 by rpki-client on console-fra.rpki-client.org