Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.mft
File:                     21CA65857C4339C6923CF5A9F8629948BF3A4B79.mft (raw, json)
Hash identifier:          kl/g7iWPPwkne5VPGKizpJWwh6BNA3MpZ4tU5X/ZaHM=
Subject key identifier:   93:8D:E2:AA:AC:F1:22:2B:16:C2:07:B8:B7:6A:47:56:5F:14:C0:72
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       373E8B83AB50F875540B3D32096A5402E26B4C4B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.mft
Manifest number:          39
Signing time:             Sat 25 Nov 2023 00:09:54 +0000
Manifest this update:     Sat 25 Nov 2023 00:04:54 +0000
Manifest next update:     Sun 26 Nov 2023 01:18:54 +0000
Files and hashes:         1: 326130613a363034343a623030623a3a2f34382d3438203d3e203530323234.roa (hash: JBbrNSs0c+NdqE9WVqyGy/xSBNyuYnziJbiL4x/pU/w=)
                          2: 326130613a363034343a623030623a3a2f34382d3438203d3e203630333130.roa (hash: Z0VuK2VtyX5gvY/Ng64/bq61QHHS8ARp2OtQ08WKs5c=)
                          3: 326130613a363034343a623030623a3a2f34382d3438203d3e203539363738.roa (hash: vejcMVDFYE5DrAotvWkl38ml2RRCmIUM7ZRvRpXE9kc=)
                          4: 326130613a363034343a623030623a3a2f34382d3438203d3e203537313130.roa (hash: JMLoG0hgh4btHefO2WqM2k7SLhSVXiL6JPbq9RhRMKc=)
                          5: 326130613a363034343a623030623a3a2f34382d3438203d3e20323030323432.roa (hash: nTgrYC2Ajs/Um4/fYnWEgqlU5Xyxv8BHEoAY3LUz8wI=)
                          6: 326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa (hash: OS48UVJ7IfQGcpHN1HlVa+jhKWqp2v9ZRxHPgXLV+BI=)
                          7: 326130613a363034343a623030623a3a2f34382d3438203d3e20323136313133.roa (hash: QtKOY3PVqnopnnhztWw2JJxKX38T+j192Jdi5lLNMqQ=)
                          8: 326130613a363034343a623030623a3a2f34382d3438203d3e20323035383438.roa (hash: GkIx9yYObMEWMiDtFkzmXAgd9Ng5vTh00rJfh+FjUAU=)
                          9: 326130613a363034343a623030623a3a2f34382d3438203d3e203437363839.roa (hash: 0hW2pyWmXPttv0NrWJ6r6zwkSyYFPyMZ7v2wZA+JKCQ=)
                          10: 326130613a363034343a623030623a3a2f34382d3438203d3e20323030393735.roa (hash: +HH847TwayEFa7UbM72tflsM/EqMZ3pn0NCgfaDyeEA=)
                          11: 326130613a363034343a623030623a3a2f34382d3438203d3e20323136323932.roa (hash: v4P1JrGVS0m0v2xxlrS1dxrvwzRX7j22RM2V3V5iGcc=)
                          12: 326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: 4VpF/9pX7wka9SOeAeuTZi24SiyUdRf3wJX1y3EXbw0=)
                          13: 326130613a363034343a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: zDVEcRiwVeTmDmTsUAzQViIystND86m21Vmi7QMLNVk=)
                          14: 326130613a363034343a623030623a3a2f34382d3438203d3e20313937353332.roa (hash: fVFDSyRXtLfz2LNDGJ4ZCmGiZzcYh/YeRDPovo1bAvE=)
                          15: 326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa (hash: mrRTZURnIE1qyTsZ3NmxsCg6guOCnMAzrQ4N18qJolk=)
                          16: 326130613a363034343a3230303a3a2f34302d3634203d3e203437323732.roa (hash: T7S0H9C2ySiZzRkVjkMZHSmP9CcKOIko4ZTvdzSbe0g=)
                          17: 326130613a363034343a3130303a3a2f34302d3634203d3e203437323732.roa (hash: Cq1Vy8mB1qhO7/+wmkOI3qP8gNKBy+F3mgPkPxmEG/Q=)
                          18: 21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl (hash: r8stHuTr9iJ/UKzm4q4zkuBhxuQ9w2Zfne4m2xWLFoc=)
                          19: 326130613a363034343a623030623a3a2f34382d3438203d3e20323130343735.roa (hash: G47d+7lHfxb86OrzcQ9WszZ/8G7Q77gUznr81dowbio=)
                          20: 326130613a363034343a623030623a3a2f34382d3438203d3e203438353831.roa (hash: glmE+EqmrN/1S6GRGaU2jO4Xvmo7GBNR3xnAELuAhOQ=)
                          21: 326130613a363034343a623030623a3a2f34382d3438203d3e20323130313532.roa (hash: gNbbvmCDEGWhLCyKHe47thY9uHbQ87EvNr9M9ODxnE8=)
                          22: 326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa (hash: 7ubuYFHyfB0j9tgmByYURtgMlH30LxK5tPJxJL81mMQ=)
                          23: 326130613a363034343a623030623a3a2f34382d3438203d3e203536373632.roa (hash: bMrIpUAbAaxomW//OvLM2f3ny7Mv09gdpB1/OkxFIj4=)
                          24: 326130613a363034343a623030623a3a2f34382d3438203d3e203530373535.roa (hash: lseETH3NzhWu+TwNs3QN0rktaukgVVE9Lu89vgT4EOg=)
                          25: 326130613a363034343a623030623a3a2f34382d3438203d3e20323030363930.roa (hash: oQiQdAK/xtvSkzPcIl+/Bm+QCSGDpUGu66SzRs00LHY=)
                          26: 326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa (hash: CPZ9F6IFu7lQkQB4wpOmHclYtl9UtH+l0ih0MGuncbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3e:8b:83:ab:50:f8:75:54:0b:3d:32:09:6a:54:02:e2:6b:4c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 25 00:04:54 2023 GMT
            Not After : Nov 26 01:18:54 2023 GMT
        Subject: CN=938DE2AAACF1222B16C207B8B76A47565F14C072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:93:ae:99:e3:9b:15:a0:05:80:0b:97:c8:
                    25:e0:41:e5:ec:49:5d:4f:69:b5:eb:06:56:c6:0c:
                    bb:42:ce:05:14:5f:ca:2f:37:a3:44:03:ed:2a:05:
                    fb:84:d2:fc:05:7d:40:61:95:77:4e:75:1e:db:b9:
                    44:64:39:d0:37:f8:ed:00:43:26:38:92:d9:9d:a4:
                    88:20:05:72:2f:c3:90:e9:d5:0d:c9:7a:95:58:55:
                    e1:98:14:8f:84:3b:d5:70:dd:9f:2e:70:65:28:c2:
                    68:fb:27:7b:2d:c0:e2:19:03:8a:a1:03:ac:e4:c8:
                    22:1c:e1:86:bc:fd:2c:cd:34:dd:f6:d7:5d:71:4b:
                    57:99:9b:5e:6a:e4:32:34:c9:ac:cb:0d:95:a0:99:
                    3b:cc:90:5a:37:93:4a:73:1c:e9:69:a1:5d:0e:28:
                    14:a1:53:b6:bd:92:0c:a2:82:eb:f0:62:41:a4:c6:
                    53:e9:5b:e0:4c:69:34:46:c2:d0:b0:37:87:fa:d5:
                    51:49:45:08:4f:bf:1f:78:86:36:2d:6f:4b:f8:21:
                    a2:e5:43:c0:e2:46:7d:ab:92:79:aa:a8:2c:66:42:
                    7f:26:00:5e:5b:e7:be:b5:c6:56:94:89:21:74:08:
                    47:80:2e:fe:b1:7e:8a:64:fa:5d:1c:32:db:76:40:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:E2:AA:AC:F1:22:2B:16:C2:07:B8:B7:6A:47:56:5F:14:C0:72
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:30:6b:59:24:8e:ee:35:92:c9:2c:10:f6:3a:f9:1b:ed:
         d3:b1:ff:f4:10:fd:c8:65:f9:8f:50:59:6f:38:5f:7e:ce:9e:
         14:75:13:2c:4c:85:53:0c:5c:b8:0c:33:da:48:f5:a7:7d:cd:
         db:75:e9:07:c8:e4:72:13:5f:8b:6c:86:af:14:01:a1:e4:d5:
         42:80:03:10:7c:2e:ef:c0:4a:06:11:36:49:b1:7c:52:86:88:
         05:da:92:f9:1f:f4:7a:a4:f4:64:2b:81:81:42:4c:c9:67:b7:
         8b:bd:6c:2b:2e:72:6a:ea:9a:e4:8a:5d:58:4f:e7:02:27:80:
         ce:4a:d6:5e:2b:2e:0f:a5:56:92:e4:80:da:59:c1:1e:f2:75:
         4f:6e:6e:54:22:73:34:30:2d:90:e7:92:fe:03:0a:40:81:77:
         e3:c7:17:83:a8:8e:a5:91:05:df:a7:0b:5c:d8:72:07:24:86:
         e4:9a:9c:fb:82:5b:89:56:61:fa:01:2e:62:80:3f:42:a4:b3:
         89:fb:c4:f3:30:69:8a:68:3a:3e:09:93:94:3e:0e:73:3a:b4:
         93:ab:f5:06:49:52:da:4a:2b:1f:54:cb:9f:2d:d9:e7:a7:cb:
         92:e9:8d:3b:2f:3b:f3:37:e6:2e:98:2b:d4:6c:78:05:bf:2e:
         a2:d5:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 08:12:04 2023 by rpki-client on console-ams.rpki-client.org