Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/2/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.mft
File:                     F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.mft (raw, json)
Hash identifier:          cqg1hxvwCqwonOwUb36PGIpQOVAvi9B9ypNxf6tDjn4=
Subject key identifier:   63:49:5A:D0:D4:5B:7E:93:7E:B5:E8:87:9A:30:5A:06:EF:35:F6:31
Authority key identifier: F9:45:AC:7B:0F:93:F1:E0:CE:16:B7:F9:C9:D8:4D:61:6F:73:EA:82
Certificate issuer:       /CN=F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82
Certificate serial:       051EF7D228CFCEDD0B9BC29522EBD2F6A3CA27A4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/2/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.mft
Manifest number:          09
Signing time:             Sat 22 Apr 2023 02:32:29 +0000
Manifest this update:     Sat 22 Apr 2023 02:27:29 +0000
Manifest next update:     Sun 23 Apr 2023 03:57:29 +0000
Files and hashes:         1: F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.crl (hash: J3gOaR+4BRoSEvnIFwd9RCifaCIgIQWAOv8xowy6Eng=)
                          2: 326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa (hash: v3ym2llYM/+crQtbJyklTy1oTHoYjDotbGnlyNEq4mM=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1e:f7:d2:28:cf:ce:dd:0b:9b:c2:95:22:eb:d2:f6:a3:ca:27:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82
        Validity
            Not Before: Apr 22 02:27:29 2023 GMT
            Not After : Apr 23 03:57:29 2023 GMT
        Subject: CN=63495AD0D45B7E937EB5E8879A305A06EF35F631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:82:e7:bd:cb:09:ed:56:92:c5:37:24:da:
                    e3:7f:ad:92:46:1a:f4:71:60:4c:6e:e1:73:4c:c6:
                    57:1e:75:89:74:0d:90:c2:2d:52:07:47:70:88:42:
                    6b:86:ac:2c:fa:80:d2:ae:ee:28:c5:cf:c1:7a:30:
                    9f:3d:fc:5f:56:85:a9:22:8c:af:03:c2:43:19:e4:
                    e4:76:b5:61:e8:36:81:d0:e5:f6:0f:0c:65:a5:4a:
                    8c:b3:30:c4:1b:0d:b1:5f:ef:f8:ce:5f:d9:7a:38:
                    46:76:31:02:34:2e:f5:d0:bf:5e:02:40:a0:ba:6c:
                    9d:e6:00:46:c9:d6:f8:ba:29:dc:45:47:0c:61:48:
                    3a:fe:d4:f2:c8:da:6a:27:bf:7b:5b:99:ff:e7:e7:
                    00:21:89:7f:45:38:fe:81:03:61:69:45:71:09:bf:
                    36:59:70:ac:e4:7a:0f:7e:44:4d:d4:29:b3:0f:e6:
                    92:9a:c8:35:fe:ee:72:68:c1:3b:24:e5:0e:17:8b:
                    90:ce:00:7a:97:3e:9b:29:dd:d5:ca:e4:f7:66:4b:
                    bf:09:b3:76:da:5b:83:c8:04:dd:d8:c8:0d:28:4e:
                    9c:97:49:50:a0:2c:ec:25:43:12:c5:6e:c7:e1:f2:
                    5f:1f:8e:9e:d3:51:d1:74:af:a4:1d:79:a9:02:3b:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:49:5A:D0:D4:5B:7E:93:7E:B5:E8:87:9A:30:5A:06:EF:35:F6:31
            X509v3 Authority Key Identifier:
                keyid:F9:45:AC:7B:0F:93:F1:E0:CE:16:B7:F9:C9:D8:4D:61:6F:73:EA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/2/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/2/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:51:8e:87:d1:a7:72:d8:2b:a8:24:bc:ad:56:17:fa:1a:86:
         5f:88:0c:e1:8b:fc:6d:8d:23:a9:c5:1c:e9:22:23:b8:4b:3b:
         5b:1b:3c:1a:65:b4:c3:74:ef:b5:67:2c:6f:b1:d7:02:3d:a4:
         ff:95:68:1b:6f:2a:b9:b4:77:5e:c7:64:44:01:f5:ec:9e:47:
         67:b1:7a:c4:a1:47:2e:08:e4:7e:73:af:89:fa:c7:6c:4f:e4:
         40:0a:c8:03:94:3a:81:f5:34:93:f3:b5:df:75:1a:60:2d:ef:
         bc:5c:f7:e9:d2:61:a9:21:a8:4c:49:96:39:de:5a:48:af:2a:
         e1:a2:24:25:ce:78:dd:02:89:e7:e0:00:17:28:ce:c8:b0:16:
         21:fe:70:9a:6b:50:32:6f:8f:d0:34:1d:c6:7a:46:5c:27:3e:
         b1:25:b1:b6:31:16:c6:41:75:af:84:42:17:d0:21:b6:81:4e:
         95:bf:84:79:b0:d5:9b:a5:75:6b:59:5f:20:d3:71:ab:ed:a2:
         8b:57:6b:07:e7:a2:bf:71:54:cd:62:7f:39:68:10:39:fe:2e:
         50:9b:c9:c3:ff:31:24:ac:cd:1d:87:16:77:1d:02:59:40:a0:
         9f:71:15:56:41:62:be:ad:83:4c:a1:95:01:20:f2:23:1f:1a:
         66:82:40:5a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUBR730ijPzt0Lm8KVIuvS9qPKJ6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0NUFDN0IwRjkzRjFFMENFMTZCN0Y5QzlEODRENjE2
RjczRUE4MjAeFw0yMzA0MjIwMjI3MjlaFw0yMzA0MjMwMzU3MjlaMDMxMTAvBgNV
BAMTKDYzNDk1QUQwRDQ1QjdFOTM3RUI1RTg4NzlBMzA1QTA2RUYzNUY2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wYLnvcsJ7VaSxTck2uN/rZJG
GvRxYExu4XNMxlcedYl0DZDCLVIHR3CIQmuGrCz6gNKu7ijFz8F6MJ89/F9Whaki
jK8DwkMZ5OR2tWHoNoHQ5fYPDGWlSoyzMMQbDbFf7/jOX9l6OEZ2MQI0LvXQv14C
QKC6bJ3mAEbJ1vi6KdxFRwxhSDr+1PLI2monv3tbmf/n5wAhiX9FOP6BA2FpRXEJ
vzZZcKzkeg9+RE3UKbMP5pKayDX+7nJowTsk5Q4Xi5DOAHqXPpsp3dXK5PdmS78J
s3baW4PIBN3YyA0oTpyXSVCgLOwlQxLFbsfh8l8fjp7TUdF0r6QdeakCOyEVAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUY0la0NRbfpN+teiHmjBaBu819jEwHwYDVR0j
BBgwFoAU+UWsew+T8eDOFrf5ydhNYW9z6oIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTIyM2JkYTUtMWY5NC00MzE5LWI0NDgtODNkYjcxODYx
Njk1LzIvRjk0NUFDN0IwRjkzRjFFMENFMTZCN0Y5QzlEODRENjE2RjczRUE4Mi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQxMWQ2Yi0zNjE1LTRh
ODYtODY3My0zNDBjZTJmMjI2ZWUvMS9GOTQ1QUM3QjBGOTNGMUUwQ0UxNkI3RjlD
OUQ4NEQ2MTZGNzNFQTgyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2UyMjNiZGE1LTFmOTQtNDMxOS1iNDQ4LTgzZGI3MTg2MTY5NS8yL0Y5NDVBQzdC
MEY5M0YxRTBDRTE2QjdGOUM5RDg0RDYxNkY3M0VBODIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOUY6H
0ady2CuoJLytVhf6GoZfiAzhi/xtjSOpxRzpIiO4SztbGzwaZbTDdO+1ZyxvsdcC
PaT/lWgbbyq5tHdex2REAfXsnkdnsXrEoUcuCOR+c6+J+sdsT+RACsgDlDqB9TST
87XfdRpgLe+8XPfp0mGpIahMSZY53lpIryrhoiQlznjdAonn4AAXKM7IsBYh/nCa
a1Ayb4/QNB3GekZcJz6xJbG2MRbGQXWvhEIX0CG2gU6Vv4R5sNWbpXVrWV8g03Gr
7aKLV2sH56K/cVTNYn85aBA5/i5Qm8nD/zEkrM0dhxZ3HQJZQKCfcRVWQWK+rYNM
oZUBIPIjHxpmgkBa
-----END CERTIFICATE-----