Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.mft
File:                     676EE1F9D8FDED2240A260E7257BA2A8CD20D787.mft (raw, json)
Hash identifier:          u53kRus7SybXzjoY5Hx9SyAcu/XQ62z5LmyDXBeZUHA=
Subject key identifier:   13:F2:DE:9A:AD:37:3D:D7:FC:E6:59:94:6C:0B:2D:44:4A:AB:E3:85
Authority key identifier: 67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87
Certificate issuer:       /CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
Certificate serial:       61729D6C4A6117CC7AF9A166C076A79F655EECE9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.mft
Manifest number:          C5
Signing time:             Mon 02 Jan 2023 23:33:47 +0000
Manifest this update:     Mon 02 Jan 2023 23:28:47 +0000
Manifest next update:     Tue 03 Jan 2023 23:50:47 +0000
Files and hashes:         1: 32332e3134322e32342e302f32322d3234203d3e203631313338.roa (hash: xDMDh8pabK7+hYO63eJIn3XCxQntav8uuwAT4Xm7xM4=)
                          2: 32332e3134322e32342e302f32342d3234203d3e203632313634.roa (hash: vORCtbPTStkrlH5qP6A3vuT6rAIXK2eOM9+Ao7GSzIQ=)
                          3: 676EE1F9D8FDED2240A260E7257BA2A8CD20D787.crl (hash: k8U/KNvIvAxlmWrWq27QFDKQ3kbUG9nTHh1P31mVSz8=)
                          4: 32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (hash: GOYf1TEzWXIte6JGxPq93VS6+hTlohK38ciy9qoHEVs=)
                          5: 32332e3134322e32352e302f32342d3234203d3e2037303138.roa (hash: Lb27XL8r3RHQ6rUjBPXxrnTB/NW2gSdaj/1Xn3oIVl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:9d:6c:4a:61:17:cc:7a:f9:a1:66:c0:76:a7:9f:65:5e:ec:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
        Validity
            Not Before: Jan  2 23:28:47 2023 GMT
            Not After : Jan  3 23:50:47 2023 GMT
        Subject: CN=13F2DE9AAD373DD7FCE659946C0B2D444AABE385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:f1:4e:a0:3c:17:cf:25:23:48:1b:08:72:
                    c3:9d:61:77:58:dd:c3:3c:f4:a9:f8:e8:bb:38:7f:
                    ec:09:7e:db:dc:db:e2:77:4f:45:f3:ed:dd:a6:40:
                    41:90:87:5d:ad:52:07:54:b4:79:01:94:8e:0d:ab:
                    51:bc:99:57:79:4e:2c:4c:b6:b9:d9:de:0e:61:10:
                    a9:f7:c5:c6:32:a7:46:86:f7:f5:8c:f9:de:40:c3:
                    0a:e8:df:8a:43:5d:85:2b:b5:9e:c1:a0:ac:77:2f:
                    93:5d:9a:53:f2:15:78:dc:53:b9:c2:3d:4d:df:a5:
                    64:5b:38:89:c0:67:4b:9c:ac:da:06:14:c1:eb:a5:
                    ef:e8:dc:97:8a:fc:45:c9:27:64:bc:4e:ea:5f:8f:
                    21:a6:24:56:9a:e3:38:79:26:77:3e:9a:c1:c8:ff:
                    d0:03:9b:93:72:38:3e:97:04:ee:d6:e5:2c:a9:6f:
                    bd:d7:fa:44:a2:c7:49:09:8d:e7:c4:cf:ae:49:83:
                    4b:74:4a:9f:d1:47:0b:8a:ff:19:f0:c6:aa:7b:5c:
                    d5:1b:3d:d0:4e:a4:60:ef:67:63:e5:a7:52:28:bd:
                    38:9c:a1:f2:56:03:47:4d:ff:41:5c:f0:b5:e1:5a:
                    d8:79:af:7a:36:79:75:a9:70:58:b1:8d:91:80:f6:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:DE:9A:AD:37:3D:D7:FC:E6:59:94:6C:0B:2D:44:4A:AB:E3:85
            X509v3 Authority Key Identifier:
                keyid:67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e3:13:fd:9d:7a:7f:19:b6:8f:44:64:a8:dd:31:d4:8d:5d:
         7c:7f:6f:b3:a9:1a:2a:95:e5:59:78:01:38:82:96:8d:6c:a7:
         60:72:09:d3:93:b1:14:b3:d6:b2:e3:d4:5e:8f:d8:a6:45:17:
         a2:a8:3a:4e:ac:d6:dd:59:20:9d:fc:04:18:33:8c:a1:34:85:
         e0:e1:ce:a8:79:f1:fa:67:26:cf:58:50:c7:bc:89:2a:24:12:
         dc:67:70:aa:1b:3f:ab:e2:c5:06:ab:bc:e0:62:e7:e3:f7:60:
         2e:9c:71:d3:a4:99:81:66:09:ab:71:8b:e8:0c:c3:51:fb:42:
         fc:db:85:09:bb:e5:ea:ba:81:ba:60:7d:ac:11:25:8a:fd:ea:
         38:dd:56:cd:c5:ae:86:c5:31:67:a9:b3:43:bf:8d:fd:bc:6a:
         e0:ce:6a:7b:63:d5:c7:28:83:b1:b0:12:d5:af:d9:e6:f3:3d:
         0b:bc:7b:71:16:57:f2:6a:82:71:62:de:03:6a:f2:77:bc:18:
         26:3e:d9:86:80:10:43:4e:42:be:fe:6e:5e:f7:93:a5:07:ef:
         81:e4:3f:80:64:df:58:77:52:96:50:0e:ee:36:e9:69:0e:01:
         f5:e1:f3:1d:03:7d:c6:38:f2:95:a3:ec:60:01:40:9e:e3:14:
         8b:98:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org