Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e292649c-2f1e-4e3a-9731-5b4a6e276845/0/B2E4D3DDAFC4F7BFBA5DB607A033F362108CA850.mft
File:                     B2E4D3DDAFC4F7BFBA5DB607A033F362108CA850.mft (raw, json)
Hash identifier:          r8E1Ul3EiWkkmHoumCYLHzz1HghFv5W0trsxO+HurSY=
Subject key identifier:   29:3A:32:02:54:06:A7:BD:1E:30:DF:40:BD:46:AC:22:A0:32:D7:0B
Authority key identifier: B2:E4:D3:DD:AF:C4:F7:BF:BA:5D:B6:07:A0:33:F3:62:10:8C:A8:50
Certificate issuer:       /CN=b2e4d3ddafc4f7bfba5db607a033f362108ca850
Certificate serial:       17AB4DDDFFC4ED98A78DCE1F2DE563754B5C7EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suTT3a_E97-6XbYHoDPzYhCMqFA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e292649c-2f1e-4e3a-9731-5b4a6e276845/0/B2E4D3DDAFC4F7BFBA5DB607A033F362108CA850.mft
Manifest number:          01
Signing time:             Mon 07 Oct 2024 06:58:08 +0000
Manifest this update:     Mon 07 Oct 2024 06:53:08 +0000
Manifest next update:     Tue 08 Oct 2024 08:21:08 +0000
Files and hashes:         1: B2E4D3DDAFC4F7BFBA5DB607A033F362108CA850.crl (hash: NSjrKnpm/bf2ZAKh2hLIEeI2db3PevLvrBNU+jxy7Eo=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ab:4d:dd:ff:c4:ed:98:a7:8d:ce:1f:2d:e5:63:75:4b:5c:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2e4d3ddafc4f7bfba5db607a033f362108ca850
        Validity
            Not Before: Oct  7 06:53:08 2024 GMT
            Not After : Oct  8 08:21:08 2024 GMT
        Subject: CN=293A32025406A7BD1E30DF40BD46AC22A032D70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:3b:fa:4d:4a:71:2c:fd:01:49:01:9c:dd:
                    9c:7e:1b:54:0f:60:1d:ff:db:9a:5b:0c:27:8c:84:
                    d5:d7:29:21:fb:74:c6:b6:89:48:ff:72:d2:d3:1e:
                    42:93:c4:a8:ea:54:8a:dd:a0:e5:1d:4d:c4:fc:0d:
                    60:2d:ad:40:bb:84:b3:25:28:e5:97:f2:c4:d5:b9:
                    55:bc:e2:ab:96:32:52:1f:7f:45:06:5f:89:c6:3a:
                    77:9a:cb:a7:71:58:65:8a:cf:26:0a:9b:5f:28:20:
                    07:c4:22:ea:6d:67:7f:56:87:21:f2:6d:18:37:bc:
                    28:6b:b1:ad:73:56:2c:d8:f4:c8:b0:dd:f3:1e:a6:
                    70:7e:df:12:d3:32:c1:28:00:9c:6c:76:14:b6:fb:
                    41:e3:90:ec:eb:ac:10:c8:38:69:10:30:3e:c0:07:
                    aa:fc:77:d1:e4:ad:d5:bd:85:5d:6c:60:a7:ed:20:
                    4f:34:36:16:66:09:4a:dc:10:b5:01:1a:53:60:29:
                    3a:02:75:c0:bf:a8:63:04:5b:e4:7d:a7:7a:f2:9a:
                    fb:6e:29:9f:a8:de:ae:10:60:ae:84:30:13:3d:20:
                    bd:c8:19:1b:ff:76:70:4b:97:0b:b6:21:db:47:33:
                    f1:aa:67:5d:4e:24:60:18:01:0c:35:7f:fd:64:e2:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3A:32:02:54:06:A7:BD:1E:30:DF:40:BD:46:AC:22:A0:32:D7:0B
            X509v3 Authority Key Identifier:
                keyid:B2:E4:D3:DD:AF:C4:F7:BF:BA:5D:B6:07:A0:33:F3:62:10:8C:A8:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e292649c-2f1e-4e3a-9731-5b4a6e276845/0/B2E4D3DDAFC4F7BFBA5DB607A033F362108CA850.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suTT3a_E97-6XbYHoDPzYhCMqFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e292649c-2f1e-4e3a-9731-5b4a6e276845/0/B2E4D3DDAFC4F7BFBA5DB607A033F362108CA850.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:83:33:34:7d:77:48:93:e9:95:19:c9:31:26:0b:ba:41:
         a1:58:ac:7d:c0:74:3a:c0:92:a2:ef:a9:ed:d8:f7:93:1b:65:
         7c:03:79:31:c8:2e:db:c7:eb:4d:0c:99:75:86:53:93:bc:b9:
         d2:27:89:72:b5:7f:23:50:48:cc:60:48:62:75:70:c8:f4:76:
         dc:b0:df:46:6b:be:75:66:1a:b0:55:7f:3a:fb:d4:a4:56:6c:
         c3:dc:30:de:50:3a:0e:3c:ee:81:e0:8b:6f:2f:72:4e:ac:56:
         06:23:dd:c3:65:a1:6b:1d:eb:d8:02:b4:17:a8:b8:f0:c2:5a:
         60:ae:58:8c:ac:5f:ea:62:7b:9b:2a:a7:a7:48:18:2e:0a:c2:
         ae:65:b3:71:8b:e0:b9:5e:12:e6:a1:70:6a:8e:3a:33:63:ff:
         1f:3b:3a:29:ac:3b:6a:af:13:9f:34:49:e0:b4:78:da:ca:5f:
         a5:c1:49:df:42:a7:a9:d8:48:91:a2:80:07:b3:c2:4d:78:d1:
         35:1c:1d:1f:c0:2e:48:68:fa:58:9c:4b:64:08:0f:ad:da:1d:
         59:8c:2e:de:9a:8e:24:5b:ae:e8:7d:f6:14:88:a3:5d:cf:77:
         94:ef:b5:7f:dd:62:21:bf:a5:d4:a0:ce:e0:6e:89:c5:ec:23:
         23:15:b5:58
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUF6tN3f/E7Zinjc4fLeVjdUtcfqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjJlNGQzZGRhZmM0ZjdiZmJhNWRiNjA3YTAzM2YzNjIx
MDhjYTg1MDAeFw0yNDEwMDcwNjUzMDhaFw0yNDEwMDgwODIxMDhaMDMxMTAvBgNV
BAMTKDI5M0EzMjAyNTQwNkE3QkQxRTMwREY0MEJENDZBQzIyQTAzMkQ3MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4Dv6TUpxLP0BSQGc3Zx+G1QP
YB3/25pbDCeMhNXXKSH7dMa2iUj/ctLTHkKTxKjqVIrdoOUdTcT8DWAtrUC7hLMl
KOWX8sTVuVW84quWMlIff0UGX4nGOneay6dxWGWKzyYKm18oIAfEIuptZ39WhyHy
bRg3vChrsa1zVizY9Miw3fMepnB+3xLTMsEoAJxsdhS2+0HjkOzrrBDIOGkQMD7A
B6r8d9HkrdW9hV1sYKftIE80NhZmCUrcELUBGlNgKToCdcC/qGMEW+R9p3rymvtu
KZ+o3q4QYK6EMBM9IL3IGRv/dnBLlwu2IdtHM/GqZ11OJGAYAQw1f/1k4n+PAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKToyAlQGp70eMN9AvUasIqAy1wswHwYDVR0j
BBgwFoAUsuTT3a/E97+6XbYHoDPzYhCMqFAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTI5MjY0OWMtMmYxZS00ZTNhLTk3MzEtNWI0YTZlMjc2
ODQ1LzAvQjJFNEQzRERBRkM0RjdCRkJBNURCNjA3QTAzM0YzNjIxMDhDQTg1MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3N1VFQzYV9FOTctNlhiWUhvRFB6WWhD
TXFGQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjkyNjQ5Yy0y
ZjFlLTRlM2EtOTczMS01YjRhNmUyNzY4NDUvMC9CMkU0RDNEREFGQzRGN0JGQkE1
REI2MDdBMDMzRjM2MjEwOENBODUwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbaDMzR9d0iT6ZUZyTEm
C7pBoVisfcB0OsCSou+p7dj3kxtlfAN5Mcgu28frTQyZdYZTk7y50ieJcrV/I1BI
zGBIYnVwyPR23LDfRmu+dWYasFV/OvvUpFZsw9ww3lA6DjzugeCLby9yTqxWBiPd
w2Whax3r2AK0F6i48MJaYK5YjKxf6mJ7myqnp0gYLgrCrmWzcYvguV4S5qFwao46
M2P/Hzs6Kaw7aq8TnzRJ4LR42spfpcFJ30KnqdhIkaKAB7PCTXjRNRwdH8AuSGj6
WJxLZAgPrdodWYwu3pqOJFuu6H32FIijXc93lO+1f91iIb+l1KDO4G6JxewjIxW1
WA==
-----END CERTIFICATE-----