Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/6618F445AB9AF086BA560C01CCA4A1E2581111CE.mft
File:                     6618F445AB9AF086BA560C01CCA4A1E2581111CE.mft (raw, json)
Hash identifier:          I4QpF1dDHWxQV45tGQFtedq2Y9KgRaqOWgWsBLSTslk=
Subject key identifier:   71:80:D4:2A:0D:93:E0:1B:B0:C7:9B:08:88:49:B0:95:31:FE:E6:C5
Authority key identifier: 66:18:F4:45:AB:9A:F0:86:BA:56:0C:01:CC:A4:A1:E2:58:11:11:CE
Certificate issuer:       /CN=6618F445AB9AF086BA560C01CCA4A1E2581111CE
Certificate serial:       1895A50A5F7C0878605E90F6FFA50FBA582654CD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6618F445AB9AF086BA560C01CCA4A1E2581111CE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/6618F445AB9AF086BA560C01CCA4A1E2581111CE.mft
Manifest number:          2B
Signing time:             Thu 18 Apr 2024 15:42:16 +0000
Manifest this update:     Thu 18 Apr 2024 15:37:16 +0000
Manifest next update:     Fri 19 Apr 2024 16:19:16 +0000
Files and hashes:         1: 6618F445AB9AF086BA560C01CCA4A1E2581111CE.crl (hash: m6MwUY02i4CyFUv+aTNoCYxJFuXue4RM6NVYiXlz4AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:95:a5:0a:5f:7c:08:78:60:5e:90:f6:ff:a5:0f:ba:58:26:54:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6618F445AB9AF086BA560C01CCA4A1E2581111CE
        Validity
            Not Before: Apr 18 15:37:16 2024 GMT
            Not After : Apr 19 16:19:16 2024 GMT
        Subject: CN=7180D42A0D93E01BB0C79B088849B09531FEE6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:c4:0b:83:5b:a1:9c:bf:c5:f8:30:a1:23:
                    fa:d5:ac:b0:6c:3f:6e:09:1b:99:3f:8c:1f:a6:18:
                    c6:cc:99:cd:76:48:c4:45:76:13:19:41:65:09:0f:
                    6f:dd:81:f7:b3:c1:cf:b5:fc:14:e1:21:6e:52:ba:
                    28:2c:80:44:b8:65:e2:79:fc:82:6f:12:9f:17:24:
                    23:67:79:2c:3b:41:a8:39:21:b7:71:d3:e2:69:74:
                    74:f3:88:aa:24:98:dd:92:36:d8:27:c1:0d:e2:34:
                    1b:8e:b6:2e:02:a0:0a:55:f7:83:2d:5b:20:0a:b0:
                    74:84:13:a2:a1:8b:d0:8f:e8:9f:ec:fb:53:f4:75:
                    8c:5f:a2:39:f7:af:75:b3:c5:8b:cd:c6:00:1d:29:
                    89:c0:3e:1c:e9:91:3f:17:77:c7:67:c8:0d:31:2b:
                    03:7f:99:e8:a1:68:f2:e1:9c:bd:59:5d:5a:5d:25:
                    b2:f7:1f:c8:0f:40:b8:d7:a6:8c:9a:25:89:9d:81:
                    d4:02:88:52:89:bf:28:8e:7d:5f:75:0a:01:35:cb:
                    c7:6e:72:b4:dc:af:a3:41:90:3a:70:34:ad:b2:43:
                    63:5c:70:9e:42:3a:b7:7d:16:22:c6:38:5a:55:e6:
                    3e:d3:f3:b0:88:00:aa:03:bd:06:b5:a8:2e:b0:0d:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:80:D4:2A:0D:93:E0:1B:B0:C7:9B:08:88:49:B0:95:31:FE:E6:C5
            X509v3 Authority Key Identifier:
                keyid:66:18:F4:45:AB:9A:F0:86:BA:56:0C:01:CC:A4:A1:E2:58:11:11:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/6618F445AB9AF086BA560C01CCA4A1E2581111CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6618F445AB9AF086BA560C01CCA4A1E2581111CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/6618F445AB9AF086BA560C01CCA4A1E2581111CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:6e:73:81:2d:09:bb:d0:f8:80:d5:79:c8:60:3b:71:3a:
         aa:5e:7a:d3:ab:19:a2:b2:5a:b9:06:c9:ce:41:ea:bd:cc:3b:
         74:9b:9e:fc:4a:a7:ad:e8:5a:0e:0f:9e:7a:7e:b0:dc:98:f4:
         b4:ee:c0:69:9a:10:cb:40:97:6c:40:ea:8b:ab:27:5c:c8:35:
         c3:4f:3f:54:44:72:e9:ca:2c:45:3d:b8:4c:68:48:e7:22:83:
         bc:39:c3:94:2c:03:f8:85:ce:3d:be:7f:16:8a:c0:f9:55:44:
         fe:c1:d7:dd:23:9a:eb:eb:0f:f6:68:89:8e:92:ec:d8:99:57:
         78:c8:ff:65:f7:7a:1c:a2:39:9c:9c:0c:41:1f:f2:77:80:c6:
         1d:11:51:36:6d:ac:1a:cb:7d:0a:b3:6c:15:ea:b4:72:6d:6a:
         cc:71:65:0c:b2:4d:45:b2:fc:48:ae:12:e0:a8:7c:11:35:44:
         af:e7:ca:2e:4b:0e:ca:e6:c3:31:09:c6:c6:3c:d2:29:36:31:
         29:8b:7c:86:d4:f1:25:5a:90:a5:a0:dc:01:23:9c:e0:3d:bd:
         5e:7e:1b:0a:f2:bc:db:52:2e:6e:05:4d:5d:aa:df:7e:99:46:
         86:b5:47:68:c5:d2:02:c5:7a:c4:59:8a:a5:09:2f:29:79:18:
         3d:04:15:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----