Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/15/8940788569C637D13B936A2072BB13FCFECE9E32.mft
File:                     8940788569C637D13B936A2072BB13FCFECE9E32.mft (raw, json)
Hash identifier:          xbeufKr6OgX1nTLtKo/Nk9HMVz+7NGuq1c9DQcCsgbk=
Subject key identifier:   D9:CF:94:A8:E1:0C:42:3C:AF:49:D3:40:F9:49:0E:F8:42:08:98:36
Authority key identifier: 89:40:78:85:69:C6:37:D1:3B:93:6A:20:72:BB:13:FC:FE:CE:9E:32
Certificate issuer:       /CN=8940788569c637d13b936a2072bb13fcfece9e32
Certificate serial:       4E1D2BA62EE9A54D7984CD5CD04D830ACBA1A9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iUB4hWnGN9E7k2ogcrsT_P7OnjI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/15/8940788569C637D13B936A2072BB13FCFECE9E32.mft
Manifest number:          16
Signing time:             Sun 07 Jul 2024 17:57:04 +0000
Manifest this update:     Sun 07 Jul 2024 17:52:04 +0000
Manifest next update:     Mon 08 Jul 2024 20:24:04 +0000
Files and hashes:         1: 8940788569C637D13B936A2072BB13FCFECE9E32.crl (hash: RsNz+U4nyB5Ow49zk80VajMSLac85l+0uXXMT6LsyOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:2b:a6:2e:e9:a5:4d:79:84:cd:5c:d0:4d:83:0a:cb:a1:a9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8940788569c637d13b936a2072bb13fcfece9e32
        Validity
            Not Before: Jul  7 17:52:04 2024 GMT
            Not After : Jul  8 20:24:04 2024 GMT
        Subject: CN=D9CF94A8E10C423CAF49D340F9490EF842089836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:61:da:0c:8f:60:12:01:d4:55:67:e1:9a:
                    9e:ba:9b:a9:ec:70:85:e5:fc:e3:a0:dc:58:88:f3:
                    27:af:3f:8f:03:a3:25:8d:f7:2a:26:6d:86:8c:44:
                    72:76:cc:de:de:41:a8:96:ff:49:f3:8e:e5:36:29:
                    d9:45:23:8c:f4:fa:1f:45:22:02:db:9d:ea:ae:05:
                    2c:de:d4:f0:03:3f:6d:32:bf:f0:c3:b0:0e:ce:f9:
                    f5:08:ab:33:38:fe:14:78:0b:07:d2:57:b6:19:8c:
                    3c:77:95:f9:1f:d0:60:6d:64:e6:f6:8b:2d:9d:c6:
                    86:92:84:7e:8b:1e:61:43:5f:d7:22:e8:8a:20:8b:
                    3d:e4:c4:2d:81:50:08:f3:2d:dc:df:fa:e5:7e:a4:
                    50:55:34:dd:a7:85:95:5e:c1:25:73:46:00:0c:13:
                    89:6a:a6:5b:40:38:13:81:9e:47:ee:7c:69:32:24:
                    fe:6d:53:03:3d:21:6b:a2:c9:81:60:bf:23:0a:64:
                    e1:02:b6:d0:e2:4b:87:fa:ad:ff:a5:62:18:21:77:
                    1c:0e:4c:78:f3:8f:ef:93:dc:c9:fe:47:ab:ef:1b:
                    fc:34:a4:6d:7c:91:5f:72:bb:83:75:b6:54:50:43:
                    43:ef:5b:98:5c:60:ac:d2:dd:64:84:76:90:73:e4:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CF:94:A8:E1:0C:42:3C:AF:49:D3:40:F9:49:0E:F8:42:08:98:36
            X509v3 Authority Key Identifier:
                keyid:89:40:78:85:69:C6:37:D1:3B:93:6A:20:72:BB:13:FC:FE:CE:9E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/15/8940788569C637D13B936A2072BB13FCFECE9E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUB4hWnGN9E7k2ogcrsT_P7OnjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/15/8940788569C637D13B936A2072BB13FCFECE9E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7b:b2:20:69:63:15:42:84:37:8e:1b:95:c7:dc:c4:1a:e2:
         96:38:99:71:a6:4f:46:f4:0c:1a:a7:37:62:9e:ba:2b:b6:82:
         b0:f2:26:d5:11:9d:70:b8:99:25:45:38:d7:2b:1e:9f:38:c3:
         75:fd:ce:5b:f2:12:3e:ba:1a:0b:21:45:e1:73:84:c1:8e:86:
         8d:82:9f:18:d3:43:54:b8:a9:a3:e4:84:ec:a1:5e:01:c6:96:
         ea:ab:b5:79:b7:f5:5f:94:55:a7:18:4d:36:b6:d2:3b:7b:7a:
         e8:a2:12:12:f6:bf:d8:9e:c4:0e:a9:73:dd:93:1f:b3:73:c3:
         73:62:61:f5:3f:96:5c:fb:71:32:a8:2c:50:07:29:50:24:ff:
         6c:78:44:ab:b8:f9:62:89:82:a8:56:ff:ab:4f:bc:ed:72:04:
         f8:70:cc:0c:5d:89:5a:73:32:30:17:ac:b9:a3:9f:73:3e:14:
         fb:3d:3a:5c:22:5e:83:17:f7:cd:2c:b0:6a:85:ce:97:46:0e:
         81:5c:13:c8:b9:5e:67:c3:fe:8f:70:cf:1a:62:23:91:61:74:
         8b:74:21:00:15:a5:7e:45:62:56:bd:cd:0a:4d:c3:87:12:2a:
         e5:a2:48:f4:4a:16:a1:58:4f:6c:6b:ff:5c:3d:fb:3e:10:7c:
         f9:e0:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----