Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/749282E9AF88D3EC461A32FE84F0AEA353C62B66.mft
File:                     749282E9AF88D3EC461A32FE84F0AEA353C62B66.mft (raw, json)
Hash identifier:          yXgUmmSR5FZangSPs606exXkKVaJ3Ya6CeWNobtTbMo=
Subject key identifier:   82:C6:4D:F6:32:F2:64:9A:FE:2D:7B:D4:44:EA:FB:FD:0C:DC:10:0D
Authority key identifier: 74:92:82:E9:AF:88:D3:EC:46:1A:32:FE:84:F0:AE:A3:53:C6:2B:66
Certificate issuer:       /CN=749282E9AF88D3EC461A32FE84F0AEA353C62B66
Certificate serial:       3A0B07F602F06339EEE248B82621E47DEC89CBC0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/749282E9AF88D3EC461A32FE84F0AEA353C62B66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/749282E9AF88D3EC461A32FE84F0AEA353C62B66.mft
Manifest number:          4F
Signing time:             Mon 20 May 2024 22:04:20 +0000
Manifest this update:     Mon 20 May 2024 21:59:20 +0000
Manifest next update:     Tue 21 May 2024 23:42:20 +0000
Files and hashes:         1: 326131333a646638373a623830303a3a2f33382d3338203d3e20323136333630.roa (hash: TtPsUBqSSthwrWcJkbrIfBa7lLeNFhp4OtZNRLMKqdw=)
                          2: 749282E9AF88D3EC461A32FE84F0AEA353C62B66.crl (hash: sQaAREfP3Feq+3S+9caAO6T/kOHkFA8G75R4EhhVn/0=)
                          3: 326131333a646638373a373130303a3a2f34382d3438203d3e20323136303432.roa (hash: V74QbRN2l1WXYOCELCYFH6sbyNxSK2ODGTZfXDegDzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0b:07:f6:02:f0:63:39:ee:e2:48:b8:26:21:e4:7d:ec:89:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749282E9AF88D3EC461A32FE84F0AEA353C62B66
        Validity
            Not Before: May 20 21:59:20 2024 GMT
            Not After : May 21 23:42:20 2024 GMT
        Subject: CN=82C64DF632F2649AFE2D7BD444EAFBFD0CDC100D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:60:7e:7a:03:4d:5b:79:45:21:fe:37:0a:
                    04:89:50:df:58:75:92:a4:9c:8c:0b:fa:02:ce:62:
                    e5:37:7f:2e:6b:3d:6b:ed:5a:ac:f4:07:de:e2:5e:
                    5f:cd:54:ee:85:96:b3:74:95:84:e8:d6:85:ad:dc:
                    ac:fc:76:91:3c:d5:18:0d:1f:34:45:0b:98:67:ac:
                    06:59:6c:04:d1:4a:6f:fb:cb:37:df:00:c1:8b:0c:
                    23:56:61:85:e4:12:4e:39:03:ff:f0:60:49:b1:a7:
                    af:24:9f:f7:58:d5:8f:48:13:3b:97:41:44:31:0c:
                    21:44:ea:4a:50:fe:ba:35:ed:f9:2d:bc:7d:08:a7:
                    3f:7c:61:72:14:d6:a7:a8:49:7c:c4:64:84:46:f1:
                    fb:0b:2b:0a:30:5d:39:ed:5d:52:e0:66:6e:51:56:
                    99:13:9e:c7:e6:5e:20:66:ab:ad:9f:f2:ac:a0:08:
                    6c:1b:73:b9:10:e0:d2:c0:b4:97:ef:1b:79:f0:a0:
                    d0:00:ba:50:d5:62:db:33:c9:f2:b3:50:10:23:35:
                    a1:8d:f2:33:2f:49:90:1f:d2:e4:b6:82:ec:33:df:
                    25:c2:a1:e3:c6:ef:0e:94:5b:82:33:9d:19:59:34:
                    e1:46:1c:38:d6:f1:7f:79:0a:f0:84:60:5e:8f:42:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:4D:F6:32:F2:64:9A:FE:2D:7B:D4:44:EA:FB:FD:0C:DC:10:0D
            X509v3 Authority Key Identifier:
                keyid:74:92:82:E9:AF:88:D3:EC:46:1A:32:FE:84:F0:AE:A3:53:C6:2B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/749282E9AF88D3EC461A32FE84F0AEA353C62B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/749282E9AF88D3EC461A32FE84F0AEA353C62B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/749282E9AF88D3EC461A32FE84F0AEA353C62B66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:e7:c8:92:1d:1f:c4:15:40:7b:65:ff:71:ab:5d:b1:92:
         d5:40:b7:65:06:86:7d:74:d7:1c:09:35:5d:19:4d:86:e2:12:
         3f:48:86:b3:48:7f:07:7e:3c:62:51:b8:b1:15:67:6b:4b:78:
         7d:15:16:c8:58:e8:d1:dd:13:a0:e9:83:bb:59:96:9f:44:9e:
         1c:83:df:1f:dc:4c:f7:90:46:a7:12:88:4a:e2:a2:14:a4:75:
         62:f0:6a:13:54:4c:3a:9f:85:a8:3f:96:0d:dd:93:a5:37:fd:
         ca:b4:83:9f:ed:a0:aa:65:16:87:cb:15:f6:4c:fb:69:64:36:
         4a:9f:2a:c4:f2:b3:48:1d:0a:d1:e9:4d:2d:64:2f:d3:c7:08:
         0b:25:44:5f:70:9c:2d:6b:36:35:af:4f:d5:5b:00:ef:41:71:
         90:d5:ba:d3:43:c5:bf:9f:24:31:b7:ab:43:19:42:3e:1b:67:
         bd:13:73:b6:d2:a0:58:0b:9f:ca:74:bb:5d:09:8f:c9:0a:87:
         14:50:17:dd:97:9f:63:a0:10:10:63:84:d9:07:26:8a:2c:a2:
         80:32:31:4f:53:fe:63:08:3a:45:4c:9c:d8:e3:5e:c0:45:e9:
         6f:7d:13:d8:be:10:17:31:b6:a8:d9:d2:c3:f2:43:2e:ee:3c:
         cf:25:8f:0c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUOgsH9gLwYznu4ki4JiHkfeyJy8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ5MjgyRTlBRjg4RDNFQzQ2MUEzMkZFODRGMEFFQTM1
M0M2MkI2NjAeFw0yNDA1MjAyMTU5MjBaFw0yNDA1MjEyMzQyMjBaMDMxMTAvBgNV
BAMTKDgyQzY0REY2MzJGMjY0OUFGRTJEN0JENDQ0RUFGQkZEMENEQzEwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSGB+egNNW3lFIf43CgSJUN9Y
dZKknIwL+gLOYuU3fy5rPWvtWqz0B97iXl/NVO6FlrN0lYTo1oWt3Kz8dpE81RgN
HzRFC5hnrAZZbATRSm/7yzffAMGLDCNWYYXkEk45A//wYEmxp68kn/dY1Y9IEzuX
QUQxDCFE6kpQ/ro17fktvH0Ipz98YXIU1qeoSXzEZIRG8fsLKwowXTntXVLgZm5R
VpkTnsfmXiBmq62f8qygCGwbc7kQ4NLAtJfvG3nwoNAAulDVYtszyfKzUBAjNaGN
8jMvSZAf0uS2guwz3yXCoePG7w6UW4IznRlZNOFGHDjW8X95CvCEYF6PQmdJAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUgsZN9jLyZJr+LXvUROr7/QzcEA0wHwYDVR0j
BBgwFoAUdJKC6a+I0+xGGjL+hPCuo1PGK2YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjUzNmExZTQtM2JmMC00MzUyLTkwNjEtNjY2OTRkMmJj
YmQzLzIvNzQ5MjgyRTlBRjg4RDNFQzQ2MUEzMkZFODRGMEFFQTM1M0M2MkI2Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC83NDkyODJFOUFGODhEM0VDNDYxQTMyRkU4
NEYwQUVBMzUzQzYyQjY2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y1MzZhMWU0LTNiZjAtNDM1Mi05MDYxLTY2Njk0ZDJiY2JkMy8yLzc0OTI4MkU5
QUY4OEQzRUM0NjFBMzJGRTg0RjBBRUEzNTNDNjJCNjYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCw0OfI
kh0fxBVAe2X/catdsZLVQLdlBoZ9dNccCTVdGU2G4hI/SIazSH8HfjxiUbixFWdr
S3h9FRbIWOjR3ROg6YO7WZafRJ4cg98f3Ez3kEanEohK4qIUpHVi8GoTVEw6n4Wo
P5YN3ZOlN/3KtIOf7aCqZRaHyxX2TPtpZDZKnyrE8rNIHQrR6U0tZC/TxwgLJURf
cJwtazY1r0/VWwDvQXGQ1brTQ8W/nyQxt6tDGUI+G2e9E3O20qBYC5/KdLtdCY/J
CocUUBfdl59joBAQY4TZByaKLKKAMjFPU/5jCDpFTJzY417ARelvfRPYvhAXMbao
2dLD8kMu7jzPJY8M
-----END CERTIFICATE-----