Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft
File:                     AB1340E329CCD96287934FA706670D31B73C04E8.mft (raw, json)
Hash identifier:          FDbhBoEwOMr9j9walr/2cpczM0WZo7FYy+kq69x786w=
Subject key identifier:   32:0F:BC:E2:45:00:3B:3C:80:8D:48:B0:1A:C6:F4:D4:A1:20:B6:CF
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       510B308366A58D14E6E96ED4D7D8F2FF55466AAA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft
Manifest number:          8C
Signing time:             Sat 26 Oct 2024 04:59:53 +0000
Manifest this update:     Sat 26 Oct 2024 04:54:53 +0000
Manifest next update:     Sun 27 Oct 2024 06:58:53 +0000
Files and hashes:         1: 326131343a373538313a376130303a3a2f34342d3434203d3e20323135373331.roa (hash: +9ZBrsye/+7JcfQCN7LZ22z9A0AorbivM4NukTYuELA=)
                          2: 326131343a373538313a376130303a3a2f33392d3339203d3e203431303531.roa (hash: gjKJmUdyGSiubROOyDtzinRPjnlxeY9lwEKnz73F/m4=)
                          3: 326131343a373538313a373130303a3a2f34302d3430203d3e20313530333135.roa (hash: BDbySONHBTFHr4ZJ8R/TKKzKBUQAw/1H/W9cHf9/wlQ=)
                          4: AB1340E329CCD96287934FA706670D31B73C04E8.crl (hash: ZaPPTJO8QuH1N+Mb4T4DD8p9LOHBlCe1vh3ttGQSapI=)
                          5: 326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa (hash: 5RvQ11zqA87nSkgET1/LZB/8q01ICMdccwFzuDSJAMA=)
                          6: 326131343a373538313a376130623a3a2f34382d3438203d3e20323135313236.roa (hash: 1HVCCqG4gBoc72OP7Aul3nDfjDWfPvAXodWrVM42/EI=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0b:30:83:66:a5:8d:14:e6:e9:6e:d4:d7:d8:f2:ff:55:46:6a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: Oct 26 04:54:53 2024 GMT
            Not After : Oct 27 06:58:53 2024 GMT
        Subject: CN=320FBCE245003B3C808D48B01AC6F4D4A120B6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:2a:8d:57:7e:9d:ab:a1:51:f2:fe:87:08:
                    40:6b:b8:5d:c3:17:ee:a7:ba:dc:ec:b4:27:cf:d7:
                    d5:49:6d:26:b0:64:9f:5c:0d:1d:7a:81:cd:93:30:
                    70:83:f1:0e:59:70:f4:c7:77:57:f0:0b:3d:40:b2:
                    3d:6a:de:9c:10:e7:68:5d:7d:d4:a4:85:65:42:b1:
                    41:38:a0:42:08:a1:6b:42:67:18:0e:c8:56:09:8f:
                    58:91:17:4f:af:50:b6:e4:ed:d2:60:d3:31:36:12:
                    c1:5e:d8:a4:3d:af:dc:65:6e:c6:9e:e7:18:c9:b3:
                    74:65:d3:4d:e6:8f:b9:c0:c3:8e:f3:0e:22:f8:35:
                    06:fd:89:3a:5f:16:e3:5d:bd:19:77:bb:c1:fe:f3:
                    32:83:d2:f5:be:ca:1e:ac:83:f5:9d:cf:2a:c8:8e:
                    4f:85:81:97:af:a5:4c:5c:61:56:d6:24:c7:ec:75:
                    ef:40:df:b2:ad:ea:2d:b1:41:83:b0:42:f5:c6:4d:
                    26:3c:9f:7c:8a:2a:95:23:61:37:46:db:03:b3:7b:
                    3c:88:46:26:2d:af:8c:fa:83:13:5e:12:25:4e:1f:
                    a8:ef:08:97:78:d6:02:ac:26:4b:47:7a:47:18:d2:
                    01:ac:ff:15:c6:ec:ae:ea:e0:cc:fc:8f:42:ef:ce:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0F:BC:E2:45:00:3B:3C:80:8D:48:B0:1A:C6:F4:D4:A1:20:B6:CF
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:37:b3:fa:ac:b7:2f:8a:a3:10:2d:51:4b:1d:0f:ed:d7:95:
         1e:d5:0f:49:a1:c8:0a:e9:69:35:f5:fb:64:8f:7c:f7:72:70:
         14:0b:ed:da:4b:c6:3a:f3:1f:37:d0:98:e3:96:4a:4e:85:a9:
         23:22:02:a4:1c:cb:7f:36:c4:fb:e5:c9:76:d5:19:65:58:c1:
         23:da:87:e7:77:5c:26:4b:12:73:62:1a:be:11:33:2f:25:c1:
         5e:9f:fb:5c:59:77:51:4b:34:59:1b:10:08:9a:c8:f3:b8:d9:
         bb:b0:53:38:48:0b:74:e9:bf:df:55:38:af:7b:16:80:f0:9f:
         62:11:e0:32:86:8d:1a:26:08:29:39:9c:e0:08:23:7b:a4:6d:
         34:17:4f:f1:e8:fb:4f:de:a9:e9:1b:8a:5f:45:42:f3:78:37:
         e8:cd:f4:69:09:4f:81:aa:38:54:69:d0:dd:0a:5f:09:89:e3:
         8c:de:5d:37:85:c6:57:67:ba:00:d6:57:12:cc:61:4b:c1:ca:
         48:f8:34:4b:10:e2:31:e5:41:f0:88:ae:44:6a:8c:0b:04:3a:
         f3:c4:62:49:26:29:53:8b:62:63:a1:eb:ef:dc:91:49:07:08:
         1e:2c:e0:86:e6:53:3c:01:2f:cc:90:eb:3e:c3:f6:d0:bc:fa:
         f6:9c:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:33:55 2024 by rpki-client on console-ams.rpki-client.org