Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.mft
File:                     CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.mft (raw, json)
Hash identifier:          KA/AmzeZ3VkM29mXEGD6FTtAVrBLtq1FKUKhfWr53R8=
Subject key identifier:   C8:4F:55:DF:EA:92:09:B7:BB:33:65:C3:76:10:14:89:40:40:81:39
Authority key identifier: CC:AF:87:3E:18:E4:A5:50:0D:BF:80:19:4F:6F:BD:99:FB:26:63:EE
Certificate issuer:       /CN=ccaf873e18e4a5500dbf80194f6fbd99fb2663ee
Certificate serial:       639C74208CE76A37AFFB2B98BFE93E7D91EFF88B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zK-HPhjkpVANv4AZT2-9mfsmY-4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.mft
Manifest number:          05
Signing time:             Fri 12 Jan 2024 08:48:59 +0000
Manifest this update:     Fri 12 Jan 2024 08:43:59 +0000
Manifest next update:     Sat 13 Jan 2024 11:07:59 +0000
Files and hashes:         1: CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.crl (hash: O8VyFYsltghQZdQRmeAA28dNmZzzsug6X4HE/x2IpeA=)
                          2: 3138352e3231352e3134302e302f32322d3234203d3e20323032333834.roa (hash: V6TmPji2dvpyf4vqQcNQtHNi7MDa9qIgzZQrK+jPYOs=)
                          3: 34352e38352e31362e302f32322d3234203d3e20323032333834.roa (hash: c96Co1IZZ0Ns40+XMg4kwnkqkluCrq1r2OB78wTWeSk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9c:74:20:8c:e7:6a:37:af:fb:2b:98:bf:e9:3e:7d:91:ef:f8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaf873e18e4a5500dbf80194f6fbd99fb2663ee
        Validity
            Not Before: Jan 12 08:43:59 2024 GMT
            Not After : Jan 13 11:07:59 2024 GMT
        Subject: CN=C84F55DFEA9209B7BB3365C37610148940408139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9d:eb:26:0b:26:07:ba:43:3d:56:49:14:e5:
                    f6:ad:48:91:19:05:c8:48:bf:48:70:73:93:66:ec:
                    38:96:0b:99:ed:64:ab:85:c9:c3:a8:47:db:e7:b5:
                    21:5e:e9:f8:75:66:fe:5d:62:8c:ca:84:e0:26:bc:
                    c6:14:3b:f3:4a:ef:3b:9d:6e:6c:dd:45:3e:c0:c9:
                    65:52:ea:d1:a1:cf:64:3f:17:48:8a:4b:0d:f7:b7:
                    94:6a:ea:89:89:5c:9a:12:80:5f:86:fb:5b:70:aa:
                    90:38:66:e1:fa:7f:9e:fe:05:77:d4:a7:c7:44:67:
                    7b:02:ee:3e:c7:2c:77:07:4e:da:c6:da:62:c7:4c:
                    05:66:94:dd:ed:35:b6:22:b7:ea:41:23:d9:3c:1a:
                    4b:23:3b:e4:d0:73:cc:d1:f6:5e:83:9e:24:4a:dd:
                    ea:5f:2d:2a:9d:d9:80:6c:e4:0b:68:ee:ee:41:0f:
                    33:67:35:d7:79:9d:e6:f0:79:60:66:4e:81:5a:ca:
                    03:f0:62:cc:02:aa:e0:d4:ad:4c:d8:38:2d:c3:02:
                    8e:15:09:46:38:b1:ef:9e:ef:e6:5b:33:3c:7c:86:
                    09:5a:7f:9d:1a:76:f1:f2:36:bb:87:13:ae:07:25:
                    5b:ce:f4:a4:34:50:6e:e4:39:f6:e4:e6:51:ad:6a:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4F:55:DF:EA:92:09:B7:BB:33:65:C3:76:10:14:89:40:40:81:39
            X509v3 Authority Key Identifier:
                keyid:CC:AF:87:3E:18:E4:A5:50:0D:BF:80:19:4F:6F:BD:99:FB:26:63:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK-HPhjkpVANv4AZT2-9mfsmY-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:31:e0:f2:68:12:b4:48:48:d7:4b:d1:42:2c:51:98:f3:69:
         5c:8b:ef:db:ae:b9:a3:b2:af:b9:8b:2d:ae:d9:4a:1c:08:d2:
         50:71:dc:58:7f:dc:d1:b0:68:19:56:ee:e8:1c:89:b4:15:2f:
         03:41:fb:48:64:bb:65:2d:f3:48:33:d1:31:c7:5d:2b:7d:e3:
         30:4c:9f:a6:f6:8c:b4:ad:08:bd:7b:9e:e0:b9:b2:a5:97:59:
         41:f0:71:88:c1:59:6d:ab:dc:d1:2f:e0:a6:c4:8d:31:cc:0c:
         76:49:69:ec:f9:05:9c:e9:7c:46:13:0c:c9:b6:bc:59:54:96:
         f6:33:dd:c4:a5:52:d8:39:67:cd:e9:c4:b2:eb:47:eb:56:c2:
         be:83:36:7f:30:98:bd:28:42:04:2c:8c:fb:04:3c:68:33:f9:
         2e:b1:4d:46:23:1f:e8:4b:72:76:0e:15:81:a0:cd:e7:3a:d7:
         6a:ac:1d:15:f0:84:c4:5d:43:fb:00:22:3e:59:45:27:cf:bc:
         f5:dd:7d:ea:29:e4:6d:3c:52:ce:d8:da:d1:4d:48:0a:a8:2a:
         13:37:9e:fa:f3:f8:3b:f9:66:e1:af:cf:d8:73:29:54:a5:48:
         66:84:01:5f:19:e9:e7:59:31:9e:a5:1d:9c:da:2b:db:3c:ac:
         27:2d:41:c9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUY5x0IIznajev+yuYv+k+fZHv+IswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2NhZjg3M2UxOGU0YTU1MDBkYmY4MDE5NGY2ZmJkOTlm
YjI2NjNlZTAeFw0yNDAxMTIwODQzNTlaFw0yNDAxMTMxMTA3NTlaMDMxMTAvBgNV
BAMTKEM4NEY1NURGRUE5MjA5QjdCQjMzNjVDMzc2MTAxNDg5NDA0MDgxMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0nesmCyYHukM9VkkU5fatSJEZ
BchIv0hwc5Nm7DiWC5ntZKuFycOoR9vntSFe6fh1Zv5dYozKhOAmvMYUO/NK7zud
bmzdRT7AyWVS6tGhz2Q/F0iKSw33t5Rq6omJXJoSgF+G+1twqpA4ZuH6f57+BXfU
p8dEZ3sC7j7HLHcHTtrG2mLHTAVmlN3tNbYit+pBI9k8GksjO+TQc8zR9l6DniRK
3epfLSqd2YBs5Ato7u5BDzNnNdd5nebweWBmToFaygPwYswCquDUrUzYOC3DAo4V
CUY4se+e7+ZbMzx8hglaf50advHyNruHE64HJVvO9KQ0UG7kOfbk5lGtak5PAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUyE9V3+qSCbe7M2XDdhAUiUBAgTkwHwYDVR0j
BBgwFoAUzK+HPhjkpVANv4AZT2+9mfsmY+4wDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y5MjM1MDU1LTE5MDQtNDRiNC05OThiLWZmMWM5ZTMx
MWM0OS8xMy9DQ0FGODczRTE4RTRBNTUwMERCRjgwMTk0RjZGQkQ5OUZCMjY2M0VF
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvekstSFBoamtwVkFOdjRBWlQyLTlt
ZnNtWS00LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOTIzNTA1
NS0xOTA0LTQ0YjQtOTk4Yi1mZjFjOWUzMTFjNDkvMTMvQ0NBRjg3M0UxOEU0QTU1
MDBEQkY4MDE5NEY2RkJEOTlGQjI2NjNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAox4PJoErRISNdL
0UIsUZjzaVyL79uuuaOyr7mLLa7ZShwI0lBx3Fh/3NGwaBlW7ugcibQVLwNB+0hk
u2Ut80gz0THHXSt94zBMn6b2jLStCL17nuC5sqWXWUHwcYjBWW2r3NEv4KbEjTHM
DHZJaez5BZzpfEYTDMm2vFlUlvYz3cSlUtg5Z83pxLLrR+tWwr6DNn8wmL0oQgQs
jPsEPGgz+S6xTUYjH+hLcnYOFYGgzec612qsHRXwhMRdQ/sAIj5ZRSfPvPXdfeop
5G08Us7Y2tFNSAqoKhM3nvrz+Dv5ZuGvz9hzKVSlSGaEAV8Z6edZMZ6lHZzaK9s8
rCctQck=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:35 2025 by rpki-client