Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft
File:                     8D57D440906265349F6DEF98557AC28D0381C47E.mft (raw, json)
Hash identifier:          53O7hS/b3YKmj9+hDyRlo5dMUPkFp19ghIeGWeaNWSw=
Subject key identifier:   BA:3A:54:BC:67:8D:B3:AB:D4:E7:B6:2B:B5:09:55:15:5E:E7:51:62
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       29587B6BD8A6669BB452C6A3CCE29663DF7B6A3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft
Manifest number:          01E4
Signing time:             Thu 03 Oct 2024 14:58:45 +0000
Manifest this update:     Thu 03 Oct 2024 14:53:45 +0000
Manifest next update:     Fri 04 Oct 2024 17:08:45 +0000
Files and hashes:         1: 8D57D440906265349F6DEF98557AC28D0381C47E.crl (hash: JZ7JyBrdMH6K1lfNI/NxP/taafVzEZWGR3YsXfMsSfs=)
                          2: 326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa (hash: 2S9nufJWqUBEwgdnuiM+Cj+9Pd3783oZpFijFGx0758=)
                          3: 326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa (hash: zXAmC8wvvHuACSSZuy7al3hP8J3Tj6qOKDsK/M2pE+Y=)
                          4: 326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa (hash: Wq0EddndEQwRsWZU5YkqtBwM2UgP834fvVY7Cr7ewow=)
                          5: 326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa (hash: 7BTDMukd467KKImpSeoQucuCaSaHSsjWq/4cNHDzZBU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:58:7b:6b:d8:a6:66:9b:b4:52:c6:a3:cc:e2:96:63:df:7b:6a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: Oct  3 14:53:45 2024 GMT
            Not After : Oct  4 17:08:45 2024 GMT
        Subject: CN=BA3A54BC678DB3ABD4E7B62BB50955155EE75162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:e8:ab:42:8d:46:37:49:46:20:c0:a9:7b:
                    bb:2a:b2:87:fe:41:ed:db:ea:ba:2f:3e:3d:a7:fb:
                    ad:83:35:67:e0:09:f7:7e:79:b8:3b:da:cf:9e:c7:
                    cf:56:e1:22:e1:f8:b7:98:80:de:8e:b6:60:46:73:
                    7d:60:b4:c2:c7:ea:4a:85:40:35:f7:6b:fd:ca:15:
                    15:35:bb:bb:05:0a:bd:60:63:ce:a6:99:c8:cd:b7:
                    02:eb:4a:32:8b:df:ed:c2:11:e7:48:19:63:d4:f6:
                    3f:7f:be:2e:7a:41:9d:8a:0f:58:7e:28:06:f3:69:
                    99:84:0b:cb:95:89:0b:c2:88:5a:df:02:36:42:db:
                    75:b9:ea:de:77:fd:56:bf:f2:9c:66:f3:de:51:51:
                    7b:e6:39:3e:52:dd:cb:fc:5e:ef:55:f7:df:53:9a:
                    f6:f7:c3:bc:27:69:2b:3b:2a:00:76:f4:4e:3f:b0:
                    ac:45:4a:0d:29:72:51:4f:36:5b:a5:50:99:82:fb:
                    4d:52:e2:9f:84:0a:06:23:8d:9c:ec:57:48:01:09:
                    be:33:eb:8f:f5:00:fa:1d:8a:ff:3a:e4:42:17:51:
                    36:b6:5a:5c:72:c2:c7:df:fa:1a:e8:78:de:a6:96:
                    06:fb:bd:91:f6:ef:b6:3a:bc:d9:3c:3b:ea:40:96:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3A:54:BC:67:8D:B3:AB:D4:E7:B6:2B:B5:09:55:15:5E:E7:51:62
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ee:1d:ca:63:91:00:50:4d:a2:fc:6c:bf:ba:21:54:10:bf:
         bf:22:ca:87:76:6a:67:ec:99:03:6b:71:55:cd:e4:f0:3f:13:
         f0:94:12:ed:55:b6:08:66:e1:c8:e7:b3:a8:dd:63:4c:a2:17:
         1c:58:d3:8f:16:30:a6:c4:7a:9b:93:e1:b1:58:9b:97:17:14:
         4d:0a:4e:20:c3:2b:77:b2:57:10:26:27:b9:f7:c7:39:85:5f:
         4f:6f:90:a5:ce:78:7a:09:6f:c0:59:0b:6d:ec:d2:6c:4b:74:
         98:2d:90:39:0a:12:10:74:5b:0b:cb:1d:8f:cd:d4:d2:38:e7:
         b7:72:9e:10:a6:6a:c1:4b:85:18:bd:73:0f:86:9c:e4:25:91:
         b5:a8:9f:e4:62:56:66:3c:00:f0:cb:dd:bd:af:89:76:82:3a:
         8a:59:fe:3b:e0:ef:dc:81:2c:19:1f:57:0a:23:f9:38:18:09:
         5c:21:dc:a0:c9:60:3a:f9:90:28:04:b3:14:7a:8c:a2:26:96:
         4d:cd:b4:ee:5e:52:55:fc:c3:95:ae:21:aa:8c:e4:b0:2e:ed:
         47:b3:6b:e2:f2:8c:13:2c:8e:69:a5:63:da:1e:ca:13:3a:a3:
         64:09:fc:39:31:f4:bd:ca:cd:6d:96:27:cc:ff:cd:ea:94:5a:
         e1:06:59:ff
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUKVh7a9imZpu0UsajzOKWY997ajswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ1N0Q0NDA5MDYyNjUzNDlGNkRFRjk4NTU3QUMyOEQw
MzgxQzQ3RTAeFw0yNDEwMDMxNDUzNDVaFw0yNDEwMDQxNzA4NDVaMDMxMTAvBgNV
BAMTKEJBM0E1NEJDNjc4REIzQUJENEU3QjYyQkI1MDk1NTE1NUVFNzUxNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiDOirQo1GN0lGIMCpe7sqsof+
Qe3b6rovPj2n+62DNWfgCfd+ebg72s+ex89W4SLh+LeYgN6OtmBGc31gtMLH6kqF
QDX3a/3KFRU1u7sFCr1gY86mmcjNtwLrSjKL3+3CEedIGWPU9j9/vi56QZ2KD1h+
KAbzaZmEC8uViQvCiFrfAjZC23W56t53/Va/8pxm895RUXvmOT5S3cv8Xu9V999T
mvb3w7wnaSs7KgB29E4/sKxFSg0pclFPNlulUJmC+01S4p+ECgYjjZzsV0gBCb4z
64/1APodiv865EIXUTa2Wlxywsff+hroeN6mlgb7vZH277Y6vNk8O+pAltXrAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUujpUvGeNs6vU57YrtQlVFV7nUWIwHwYDVR0j
BBgwFoAUjVfUQJBiZTSfbe+YVXrCjQOBxH4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzQvOEQ1N0Q0NDA5MDYyNjUzNDlGNkRFRjk4NTU3QUMyOEQwMzgxQzQ3RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNk
YmRlY2M0ZmE0LzEvOEQ1N0Q0NDA5MDYyNjUzNDlGNkRFRjk4NTU3QUMyOEQwMzgx
QzQ3RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h
Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvNC84RDU3RDQ0MDkwNjI2NTM0OUY2
REVGOTg1NTdBQzI4RDAzODFDNDdFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+4dymORAFBNovxsv7oh
VBC/vyLKh3ZqZ+yZA2txVc3k8D8T8JQS7VW2CGbhyOezqN1jTKIXHFjTjxYwpsR6
m5PhsViblxcUTQpOIMMrd7JXECYnuffHOYVfT2+Qpc54eglvwFkLbezSbEt0mC2Q
OQoSEHRbC8sdj83U0jjnt3KeEKZqwUuFGL1zD4ac5CWRtaif5GJWZjwA8Mvdva+J
doI6iln+O+Dv3IEsGR9XCiP5OBgJXCHcoMlgOvmQKASzFHqMoiaWTc207l5SVfzD
la4hqozksC7tR7Nr4vKMEyyOaaVj2h7KEzqjZAn8OTH0vcrNbZYnzP/N6pRa4QZZ
/w==
-----END CERTIFICATE-----
Generated at Thu Oct 3 23:36:10 2024 by rpki-client on console-fra.rpki-client.org