Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/4/C7CF1C210BFF704F46FAE347B903107BDC6369BB.mft
File:                     C7CF1C210BFF704F46FAE347B903107BDC6369BB.mft (raw, json)
Hash identifier:          PBkcAwE12X7RL70Lrm58BMPE4MkP2nt8+kXpsfV1zjk=
Subject key identifier:   C7:8F:38:67:66:17:DE:D4:5B:0A:0D:E5:40:56:1B:1C:0E:1B:0B:1A
Authority key identifier: C7:CF:1C:21:0B:FF:70:4F:46:FA:E3:47:B9:03:10:7B:DC:63:69:BB
Certificate issuer:       /CN=c7cf1c210bff704f46fae347b903107bdc6369bb
Certificate serial:       5D457AC9019DFB726EC63F2D9A204325CFB48BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x88cIQv_cE9G-uNHuQMQe9xjabs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/4/C7CF1C210BFF704F46FAE347B903107BDC6369BB.mft
Manifest number:          01
Signing time:             Sun 12 Nov 2023 08:23:20 +0000
Manifest this update:     Sun 12 Nov 2023 08:18:20 +0000
Manifest next update:     Mon 13 Nov 2023 09:29:20 +0000
Files and hashes:         1: C7CF1C210BFF704F46FAE347B903107BDC6369BB.crl (hash: oChbGixdeKagVB0QhTO85KZS/2OU1qYdD8w5ExeFEx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:45:7a:c9:01:9d:fb:72:6e:c6:3f:2d:9a:20:43:25:cf:b4:8b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7cf1c210bff704f46fae347b903107bdc6369bb
        Validity
            Not Before: Nov 12 08:18:20 2023 GMT
            Not After : Nov 13 09:29:20 2023 GMT
        Subject: CN=C78F38676617DED45B0A0DE540561B1C0E1B0B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:8d:70:93:99:f6:7e:01:41:aa:67:a4:30:
                    27:17:03:c1:2c:34:3a:37:95:f6:84:76:44:ab:d8:
                    13:85:29:5a:b6:9c:24:d5:24:26:a8:ce:79:49:2f:
                    a3:3c:5b:a2:cc:0a:b2:13:00:8d:f0:3a:b5:61:45:
                    c7:1f:a6:d4:22:d6:8b:5c:b8:84:84:a6:de:a1:b9:
                    e3:e9:a1:a3:ef:44:99:34:7f:2d:8c:8d:d3:c6:c8:
                    d9:db:6f:e4:a5:53:04:84:5b:a2:79:09:1b:62:4a:
                    ae:f8:43:4d:a4:b5:4d:45:eb:69:52:13:a5:3c:c6:
                    d1:4f:84:68:7e:f4:ab:66:74:ee:93:31:1f:8e:f5:
                    0b:c6:2a:ac:f0:95:1d:7e:c0:6b:f8:32:25:39:c1:
                    cd:8f:96:e0:2c:4c:32:08:88:38:98:0f:8f:fb:3c:
                    b3:b9:f4:ea:00:b2:ed:10:20:e7:40:d7:8b:2c:63:
                    5d:73:34:24:fc:2e:78:62:14:f7:f2:46:3b:76:9a:
                    3d:b1:7e:8c:35:54:dd:67:9e:23:32:1d:b8:74:73:
                    2a:8c:f7:b1:ad:91:bd:ac:90:e0:c6:d2:df:0f:2d:
                    05:70:6f:39:27:a8:0a:d1:bf:78:90:19:86:0d:e6:
                    f9:39:05:3c:83:68:4f:0b:82:d9:55:3f:ef:b0:b1:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8F:38:67:66:17:DE:D4:5B:0A:0D:E5:40:56:1B:1C:0E:1B:0B:1A
            X509v3 Authority Key Identifier:
                keyid:C7:CF:1C:21:0B:FF:70:4F:46:FA:E3:47:B9:03:10:7B:DC:63:69:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/4/C7CF1C210BFF704F46FAE347B903107BDC6369BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x88cIQv_cE9G-uNHuQMQe9xjabs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/4/C7CF1C210BFF704F46FAE347B903107BDC6369BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d3:19:00:8c:25:11:c2:a0:02:43:92:a4:cb:ca:dd:af:48:
         96:94:b5:52:cb:4b:24:c3:2f:8f:cc:5f:ca:e1:81:64:00:90:
         e7:99:1d:2b:03:d2:c8:3c:b4:4d:73:66:31:6a:67:7e:26:88:
         7c:5d:3a:34:6e:e7:19:10:2c:d9:fe:53:a1:77:ae:c3:fc:31:
         e7:de:f3:d4:db:e1:a3:70:63:d9:17:bc:e7:19:86:24:c7:54:
         ea:ca:97:4b:55:1d:2d:06:b9:6c:18:4b:2f:07:18:7b:05:c2:
         f2:c2:49:c0:5c:78:41:e2:76:a7:84:9d:53:79:21:f8:9c:22:
         c5:4f:de:a8:0d:1b:f2:78:01:2b:e8:3a:9e:3c:34:59:bc:50:
         f0:16:29:27:73:06:5b:7d:5f:2a:ca:25:7f:9c:19:ea:cb:a4:
         1e:fd:18:5a:03:68:c1:ea:ae:83:8a:43:ae:68:5c:b3:fd:c2:
         45:d3:9e:77:8c:2f:76:49:a8:b2:f7:0a:dd:4a:15:2c:ec:7a:
         3e:a6:a5:e5:6d:10:2b:8d:4c:f1:47:77:0e:c6:25:16:49:a6:
         9d:97:49:bf:6b:d2:55:52:c4:98:7e:7d:21:83:b9:a9:df:07:
         08:5a:31:4c:b1:dc:26:2d:53:7f:aa:f9:c6:22:67:c9:ed:dc:
         06:08:f7:64
-----BEGIN CERTIFICATE-----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