Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/C6BAF0564284FCCE58AB3B90CDF14312E715789C.mft
File:                     C6BAF0564284FCCE58AB3B90CDF14312E715789C.mft (raw, json)
Hash identifier:          /aAN0GM/lXdVYk3AVSQD3kitqkyJDKfinrYXJnLo40s=
Subject key identifier:   36:02:A0:55:F8:44:12:88:46:FC:F1:29:4F:41:4D:5A:D2:BA:D7:D8
Authority key identifier: C6:BA:F0:56:42:84:FC:CE:58:AB:3B:90:CD:F1:43:12:E7:15:78:9C
Certificate issuer:       /CN=6916ebca5819df145b7f4aa265a2c9ff5d48ab79d675308dd5
Certificate serial:       04D2F4D9F75DEFBB5D926041CA2D5D327713212F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5819df145b7f4aa265a2c9ff5d48ab79d675308dd5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/C6BAF0564284FCCE58AB3B90CDF14312E715789C.mft
Manifest number:          1C
Signing time:             Wed 21 Dec 2022 14:37:52 +0000
Manifest this update:     Wed 21 Dec 2022 14:32:52 +0000
Manifest next update:     Thu 22 Dec 2022 18:19:52 +0000
Files and hashes:         1: 32332e3134322e32342e302f32322d3234203d3e203631313338.roa (hash: NArbx5kypgthal9sukhQ5JIpEwgcOd/kt4SifPBuSoA=)
                          2: C6BAF0564284FCCE58AB3B90CDF14312E715789C.crl (hash: bkQ3YLVBM+NMA3vfgTdPvuBoGuy7mI907kLAejUXsg8=)
                          3: 32332e3134322e32352e302f32342d3234203d3e2037303138.roa (hash: zbALuFCG8+ShCJvNGicqndGWmrYTM8xaFNq3Uo/0GhI=)
                          4: 32332e3134322e32342e302f32342d3234203d3e203632313634.roa (hash: xD4eyf6sseARqI0UVnjTWYzvL180/t+9YhXUR1SQodI=)
                          5: 32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (hash: zHB6fKKi/RDoKHwQP8yamyTW4JV70IohIZIIvebp8fk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d2:f4:d9:f7:5d:ef:bb:5d:92:60:41:ca:2d:5d:32:77:13:21:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca5819df145b7f4aa265a2c9ff5d48ab79d675308dd5
        Validity
            Not Before: Dec 21 14:32:52 2022 GMT
            Not After : Dec 22 18:19:52 2022 GMT
        Subject: CN=3602A055F844128846FCF1294F414D5AD2BAD7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:0b:95:57:1c:8a:94:86:14:db:8d:e3:2a:
                    71:da:8a:a8:bf:15:0f:46:72:32:28:8d:89:be:12:
                    be:05:72:24:3f:c4:40:e6:71:61:5b:97:74:cd:b0:
                    9b:8f:95:4c:60:43:87:8b:2d:aa:11:18:a1:5a:4b:
                    a1:b6:34:8f:57:9a:b0:31:fd:6e:2c:09:fe:dd:00:
                    5b:73:ab:6f:61:e9:50:f6:2f:09:16:76:5d:f4:c8:
                    b5:02:73:ab:93:6d:2d:e7:37:07:60:cd:9c:ee:8a:
                    05:c6:03:66:3e:26:7a:73:ae:61:82:7e:82:51:72:
                    31:c4:04:aa:c7:9c:d2:40:f0:00:be:14:b9:e6:8d:
                    e3:3f:91:1c:63:7c:79:0b:da:7f:8e:c8:8a:7b:2a:
                    6b:86:a6:a5:df:8d:0f:59:b1:42:da:11:db:17:2a:
                    af:00:2d:9c:c1:f6:1e:28:c4:83:e4:98:66:52:71:
                    d6:8b:bc:fc:9f:db:cd:ee:35:75:c1:35:ce:fb:ed:
                    af:46:74:6b:97:99:5c:2f:4c:52:fc:ca:de:33:ff:
                    86:0a:b9:1b:4a:55:8a:9c:fa:fd:d0:e0:93:6c:05:
                    e6:d1:d2:d5:87:13:42:3b:f0:4f:57:89:92:54:03:
                    96:f1:f8:ad:ad:9c:12:83:8d:3a:37:70:10:bb:42:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:02:A0:55:F8:44:12:88:46:FC:F1:29:4F:41:4D:5A:D2:BA:D7:D8
            X509v3 Authority Key Identifier:
                keyid:C6:BA:F0:56:42:84:FC:CE:58:AB:3B:90:CD:F1:43:12:E7:15:78:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/C6BAF0564284FCCE58AB3B90CDF14312E715789C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5819df145b7f4aa265a2c9ff5d48ab79d675308dd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/C6BAF0564284FCCE58AB3B90CDF14312E715789C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ad:91:2d:68:32:d9:40:61:07:fa:58:c6:b2:96:55:37:0a:
         63:f0:fe:4b:e2:3f:d8:dd:28:2c:77:a7:c1:c8:d8:8a:5a:1f:
         ad:3d:0c:df:cd:f5:f2:11:b6:8b:9c:48:7d:b8:83:b9:7e:20:
         7a:9f:35:3f:04:2d:0d:64:8a:4d:17:a8:d3:bf:48:a7:84:56:
         ef:e5:ac:3e:ef:12:8c:54:67:9d:41:97:f9:a3:e7:fa:07:3c:
         ea:a0:75:e9:68:92:9b:65:7c:2c:39:58:2f:6a:bb:82:d5:e6:
         99:31:5e:b3:bd:0c:ae:dd:74:12:0a:39:1a:be:b4:b7:53:f8:
         16:a2:8c:15:d6:af:86:09:cc:d6:6c:90:1b:de:fc:48:56:25:
         54:86:35:86:57:7f:06:c1:ab:43:69:89:48:e8:00:71:48:10:
         6a:aa:5f:23:49:f5:f8:fa:9a:cd:2e:82:da:cf:2a:cf:c5:b9:
         45:22:ef:46:3d:46:2b:72:7f:ed:c8:8a:02:66:f5:4c:37:14:
         3e:4a:f2:80:e6:20:08:bd:36:57:b0:79:70:8b:fd:49:5c:c7:
         7e:89:b6:1a:f4:e0:c3:ea:bc:aa:4c:2f:aa:23:c8:f0:62:54:
         88:8c:8e:50:4c:f6:18:3a:48:ae:e0:60:af:05:d6:44:12:30:
         72:6c:2d:c3
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUBNL02fdd77tdkmBByi1dMncTIS8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkxNmViY2E1ODE5ZGYxNDViN2Y0YWEyNjVhMmM5ZmY1
ZDQ4YWI3OWQ2NzUzMDhkZDUwHhcNMjIxMjIxMTQzMjUyWhcNMjIxMjIyMTgxOTUy
WjAzMTEwLwYDVQQDEygzNjAyQTA1NUY4NDQxMjg4NDZGQ0YxMjk0RjQxNEQ1QUQy
QkFEN0Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5QLlVccipSG
FNuN4ypx2oqovxUPRnIyKI2JvhK+BXIkP8RA5nFhW5d0zbCbj5VMYEOHiy2qERih
WkuhtjSPV5qwMf1uLAn+3QBbc6tvYelQ9i8JFnZd9Mi1AnOrk20t5zcHYM2c7ooF
xgNmPiZ6c65hgn6CUXIxxASqx5zSQPAAvhS55o3jP5EcY3x5C9p/jsiKeyprhqal
340PWbFC2hHbFyqvAC2cwfYeKMSD5JhmUnHWi7z8n9vN7jV1wTXO++2vRnRrl5lc
L0xS/MreM/+GCrkbSlWKnPr90OCTbAXm0dLVhxNCO/BPV4mSVAOW8fitrZwSg406
N3AQu0IPVwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDYCoFX4RBKIRvzxKU9BTVrS
utfYMB8GA1UdIwQYMBaAFMa68FZChPzOWKs7kM3xQxLnFXicMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1
LWJhMWU5YjMzNmQ2Mi8wL0M2QkFGMDU2NDI4NEZDQ0U1OEFCM0I5MENERjE0MzEy
RTcxNTc4OUMuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt
NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMDk4ZmMxNC0yOWM5LTQ5MTYtYjAzYS1h
ZTRhMmFmMTAxY2QvNjkxNmViY2E1ODE5ZGYxNDViN2Y0YWEyNjVhMmM5ZmY1ZDQ4
YWI3OWQ2NzUzMDhkZDUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2ZDYyLzAvQzZCQUYwNTY0
Mjg0RkNDRTU4QUIzQjkwQ0RGMTQzMTJFNzE1Nzg5Qy5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGCtkS1o
MtlAYQf6WMayllU3CmPw/kviP9jdKCx3p8HI2IpaH609DN/N9fIRtoucSH24g7l+
IHqfNT8ELQ1kik0XqNO/SKeEVu/lrD7vEoxUZ51Bl/mj5/oHPOqgdelokptlfCw5
WC9qu4LV5pkxXrO9DK7ddBIKORq+tLdT+BaijBXWr4YJzNZskBve/EhWJVSGNYZX
fwbBq0NpiUjoAHFIEGqqXyNJ9fj6ms0ugtrPKs/FuUUi70Y9Rityf+3IigJm9Uw3
FD5K8oDmIAi9NleweXCL/Ulcx36Jthr04MPqvKpML6ojyPBiVIiMjlBM9hg6SK7g
YK8F1kQSMHJsLcM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org