Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/0/5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.mft
File:                     5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.mft (raw, json)
Hash identifier:          cQTayD2nb8J+5vGAYAO9htf49M05bkXUlK/YcHkVu8M=
Subject key identifier:   A7:FD:91:5E:76:07:F1:52:26:29:64:85:0F:B1:67:7E:1C:F9:F6:A8
Authority key identifier: 5A:16:7C:3F:9E:B9:84:FB:15:C8:F4:95:7E:17:F1:2C:5D:36:9D:B9
Certificate issuer:       /CN=5a167c3f9eb984fb15c8f4957e17f12c5d369db9
Certificate serial:       7DA2EEFC25A337BAC64FAE1C6863CFC54684284C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhZ8P565hPsVyPSVfhfxLF02nbk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/0/5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.mft
Manifest number:          25
Signing time:             Sun 25 Feb 2024 02:27:09 +0000
Manifest this update:     Sun 25 Feb 2024 02:22:09 +0000
Manifest next update:     Mon 26 Feb 2024 03:56:09 +0000
Files and hashes:         1: AS215828.asa (hash: Fxfwfr5n7GD1j53pOKpyaoup6ugjXTTvdRQBZlSKmow=)
                          2: 5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.crl (hash: fWuL+QhyRTYxf2Q/oK+/H3QJP4F7+l3btpjC2Dl3I4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a2:ee:fc:25:a3:37:ba:c6:4f:ae:1c:68:63:cf:c5:46:84:28:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a167c3f9eb984fb15c8f4957e17f12c5d369db9
        Validity
            Not Before: Feb 25 02:22:09 2024 GMT
            Not After : Feb 26 03:56:09 2024 GMT
        Subject: CN=A7FD915E7607F152262964850FB1677E1CF9F6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:17:a5:f7:c1:69:7d:24:77:ab:bf:e2:67:da:
                    c6:30:a1:e4:e4:bb:60:c6:ae:99:c2:82:9d:de:59:
                    c5:e5:7f:91:df:3d:74:0a:06:33:84:25:c4:3a:73:
                    86:bb:65:90:0d:3e:64:91:d2:80:17:ee:85:7f:4e:
                    ae:7c:41:08:7e:28:81:85:42:86:ce:c8:61:07:6c:
                    47:9d:95:96:c3:f9:e9:44:dc:39:1a:a4:56:4d:69:
                    e2:e6:98:02:62:3a:b9:f6:42:34:b3:c7:43:00:ed:
                    a9:d7:66:4f:78:0c:43:63:97:a6:54:83:55:75:e3:
                    5e:ae:f7:f8:99:e5:76:84:fd:ce:b4:30:0c:ca:39:
                    01:11:62:c4:fa:8f:05:c6:e4:27:c7:91:fb:77:60:
                    8b:1b:05:27:69:fc:e9:df:e6:c0:92:7e:99:84:4f:
                    2f:de:80:94:83:27:be:bd:d1:3e:c8:de:32:dc:62:
                    95:81:0e:98:74:88:11:02:d6:da:96:21:9f:66:46:
                    74:6f:95:83:2c:1e:92:d1:4b:c2:0b:fd:a5:ca:96:
                    72:fe:ad:10:f0:6d:b5:ec:e4:bb:a0:e7:5f:65:2f:
                    1d:18:44:76:19:8d:2e:eb:0c:cf:05:a9:86:f9:8d:
                    b6:b8:56:ee:b8:60:ae:9d:e6:60:b8:d5:67:fb:ac:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FD:91:5E:76:07:F1:52:26:29:64:85:0F:B1:67:7E:1C:F9:F6:A8
            X509v3 Authority Key Identifier:
                keyid:5A:16:7C:3F:9E:B9:84:FB:15:C8:F4:95:7E:17:F1:2C:5D:36:9D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/0/5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhZ8P565hPsVyPSVfhfxLF02nbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/0/5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:4b:aa:86:90:59:0b:26:c7:b4:93:31:8c:db:0f:ce:ab:6d:
         c1:3b:fc:9c:a4:5e:97:73:f3:45:f2:09:84:fe:e0:17:ba:3a:
         ac:61:d9:10:63:88:c6:c7:cc:9f:c5:b0:fb:cc:7a:20:6c:b7:
         d9:fd:fc:0a:7d:fe:5e:ff:f5:49:12:78:9a:d3:b1:7c:91:09:
         a8:42:0b:46:58:51:ca:ca:6a:16:07:77:e1:0a:2f:d5:95:ae:
         16:92:79:0b:09:fe:09:a0:99:98:79:2c:ac:9f:a3:8a:ea:6a:
         32:0e:b6:d1:21:66:70:91:60:81:8a:a9:37:72:aa:17:c3:68:
         c1:59:28:fb:a0:48:7e:4f:ec:c8:3a:9b:ee:15:f0:c5:e1:e9:
         a4:6d:a9:de:e0:e0:58:6c:bc:cb:95:31:09:93:34:e8:36:ab:
         b8:69:17:5a:79:c0:2b:bb:4c:60:a0:54:f1:04:6c:1a:a3:a0:
         c3:ad:42:c2:13:bd:bf:43:f2:e1:f0:60:d2:dc:48:07:a4:76:
         3d:67:a6:a6:a2:00:a8:ba:fa:d9:ae:b9:2f:ec:11:9c:f7:b7:
         99:e7:33:4d:a7:2e:08:13:15:0d:04:e8:10:12:64:33:31:44:
         1b:de:4d:6a:03:31:b1:fe:ba:91:f2:d5:71:5d:12:5a:00:2e:
         dc:64:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----