Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/2/9E2E5F3EF655856733D372978557372B747B0B4E.mft
File:                     9E2E5F3EF655856733D372978557372B747B0B4E.mft (raw, json)
Hash identifier:          pMnkL/7/Vy2DCMfJo59BRAnF9AdZEFsD9BIBjlNdvzM=
Subject key identifier:   CF:CE:A3:C9:DE:1F:32:CF:24:A1:2D:E4:C6:87:AD:C0:B6:FA:13:D8
Authority key identifier: 9E:2E:5F:3E:F6:55:85:67:33:D3:72:97:85:57:37:2B:74:7B:0B:4E
Certificate issuer:       /CN=9e2e5f3ef655856733d372978557372b747b0b4e
Certificate serial:       181F9CFBD86995ED6E59CF59D0189C117458B2A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni5fPvZVhWcz03KXhVc3K3R7C04.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/2/9E2E5F3EF655856733D372978557372B747B0B4E.mft
Manifest number:          16
Signing time:             Sun 07 Jul 2024 17:57:05 +0000
Manifest this update:     Sun 07 Jul 2024 17:52:05 +0000
Manifest next update:     Mon 08 Jul 2024 19:32:05 +0000
Files and hashes:         1: 9E2E5F3EF655856733D372978557372B747B0B4E.crl (hash: fXShiVPGznRvuylVgdi8nWXrvlnW82QGsCwgLkoo1Y4=)
                          2: AS211244.asa (hash: 6C/aK2wY5CUXEziRbZUnrRBIIXR1CVHUhhLMlY1WXyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1f:9c:fb:d8:69:95:ed:6e:59:cf:59:d0:18:9c:11:74:58:b2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2e5f3ef655856733d372978557372b747b0b4e
        Validity
            Not Before: Jul  7 17:52:05 2024 GMT
            Not After : Jul  8 19:32:05 2024 GMT
        Subject: CN=CFCEA3C9DE1F32CF24A12DE4C687ADC0B6FA13D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:4f:5b:96:a5:60:8a:5d:0b:1a:4d:a3:49:
                    a2:c9:c2:2d:aa:92:97:52:50:02:53:cd:69:7b:00:
                    82:08:b4:1d:51:3f:b5:b5:89:3f:d5:15:9e:5a:d1:
                    7c:af:75:60:e9:f6:8c:1c:34:51:d3:af:e0:64:30:
                    85:2f:14:d4:7b:61:eb:91:17:7f:de:78:a9:11:9c:
                    a5:56:aa:e1:a0:b2:2a:b9:21:23:65:0e:7d:72:8f:
                    25:81:60:72:27:65:1c:42:79:ce:e2:db:4b:8b:24:
                    14:f5:6c:06:01:80:d8:08:61:e8:35:19:54:c4:ba:
                    b4:62:20:11:6f:6c:96:20:74:e4:b8:99:4d:89:42:
                    95:4e:ed:83:5d:8d:3e:0d:90:d5:39:3b:22:4b:19:
                    fa:3f:c6:81:ca:4f:33:74:f0:5d:b2:48:9a:a7:5d:
                    db:46:b6:ab:06:72:3f:08:dc:1b:37:be:81:79:14:
                    37:76:46:42:19:c2:c3:fb:0e:32:b7:cc:dc:41:08:
                    10:ee:47:ea:62:41:2a:67:ff:49:57:1b:2c:4e:1a:
                    cd:3c:20:b9:08:5e:f6:b5:e3:42:ba:c7:da:f3:f3:
                    b8:00:d6:14:1d:c5:b8:00:76:21:75:41:b5:a5:1d:
                    a8:96:2d:a6:35:f1:bc:5f:6b:2e:e6:d2:b8:54:0a:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CE:A3:C9:DE:1F:32:CF:24:A1:2D:E4:C6:87:AD:C0:B6:FA:13:D8
            X509v3 Authority Key Identifier:
                keyid:9E:2E:5F:3E:F6:55:85:67:33:D3:72:97:85:57:37:2B:74:7B:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/2/9E2E5F3EF655856733D372978557372B747B0B4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni5fPvZVhWcz03KXhVc3K3R7C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/2/9E2E5F3EF655856733D372978557372B747B0B4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:5b:02:3c:26:a1:55:5a:b8:4e:bf:d9:89:16:79:46:b3:
         9e:c7:ad:43:7a:30:03:ec:e9:66:af:f0:88:63:d0:c9:d8:74:
         f6:60:42:67:86:46:0e:13:44:a4:f2:a0:62:53:bc:0d:21:b5:
         3d:7b:a1:a6:c3:83:60:ed:b2:c5:20:19:01:2a:11:db:6a:4e:
         1b:b2:db:5f:78:1f:ea:6b:a3:bb:cb:ac:4c:bb:31:57:69:f6:
         ce:47:75:19:79:a7:eb:79:ce:84:5d:4b:6e:19:1e:37:b1:70:
         8d:1f:eb:1a:ed:fc:79:25:a5:51:59:cc:6b:19:c8:d9:f4:25:
         c6:2b:82:46:ed:21:56:e1:48:63:43:a3:5b:cf:50:d4:88:c2:
         8d:e1:27:5a:7a:2f:ab:7a:86:ed:be:ec:80:77:2a:6a:1f:b9:
         d4:e7:86:d1:db:25:56:49:0c:54:b9:73:05:b4:49:eb:b3:d8:
         4d:71:0e:96:6b:e2:26:11:ef:dc:64:94:68:be:ca:bf:fd:f5:
         90:b4:34:bc:ea:1e:1f:39:db:e2:70:0e:66:6a:1b:ff:4f:70:
         87:6c:34:50:a4:55:61:3e:7c:72:32:f1:6e:dc:0b:df:82:14:
         58:39:a7:4d:76:ee:57:78:23:1a:78:00:58:53:6a:16:1a:39:
         dd:9b:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----