Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft
File:                     0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft (raw, json)
Hash identifier:          4MbOnD4s2RuLovJeUsKo3NhR44GIL8d+/S/M1Q9mfI8=
Subject key identifier:   BE:42:B6:90:95:92:87:D3:08:5B:23:83:5C:85:3E:70:13:AC:9A:A0
Authority key identifier: 0E:CB:A3:2E:DA:D0:39:B9:46:AD:A5:10:80:D4:78:FB:75:DA:2C:B5
Certificate issuer:       /CN=0ecba32edad039b946ada51080d478fb75da2cb5
Certificate serial:       427FF27F24006536C74A84464F2F2D4B4C7B5EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsujLtrQOblGraUQgNR4-3XaLLU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft
Manifest number:          4C
Signing time:             Wed 10 Jan 2024 18:50:15 +0000
Manifest this update:     Wed 10 Jan 2024 18:45:15 +0000
Manifest next update:     Thu 11 Jan 2024 22:32:15 +0000
Files and hashes:         1: 0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.crl (hash: vChF7wGONchvjOX9x3zSGZxTvqpYzgeSF3O5YjRQocg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7f:f2:7f:24:00:65:36:c7:4a:84:46:4f:2f:2d:4b:4c:7b:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecba32edad039b946ada51080d478fb75da2cb5
        Validity
            Not Before: Jan 10 18:45:15 2024 GMT
            Not After : Jan 11 22:32:15 2024 GMT
        Subject: CN=BE42B690959287D3085B23835C853E7013AC9AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:d5:37:8a:08:59:10:26:f4:1a:fe:87:bf:
                    3e:c6:9c:04:bc:d6:f3:af:bb:55:0d:4d:88:29:03:
                    2c:6d:88:74:28:71:15:4f:a0:1e:0c:b9:71:10:5e:
                    4d:4c:1e:bc:1f:e3:0b:b8:84:9d:4e:45:b9:cf:7c:
                    3b:20:3f:a9:2e:d1:de:00:0f:40:46:74:98:0b:97:
                    69:21:26:fe:8a:4a:3d:a2:ab:89:bf:34:82:2c:44:
                    78:5f:c1:74:47:64:3a:29:9a:43:da:3d:2f:30:0f:
                    2b:6f:5a:cf:52:c6:79:73:b1:9d:ca:07:5a:ea:0c:
                    29:15:e3:4f:c6:38:45:07:5d:1c:13:af:af:b9:85:
                    5f:87:74:47:44:18:17:3c:e8:59:28:6f:47:4e:11:
                    3a:ab:bf:24:c7:4b:7a:23:13:28:18:dc:29:0c:4f:
                    27:75:e9:d5:49:2a:4f:fa:9e:6a:c4:66:b0:c9:47:
                    bd:2c:22:dc:db:11:91:e7:7f:11:2b:de:86:8c:00:
                    68:bb:82:73:67:37:8e:4b:86:ac:b9:c1:a1:1f:0f:
                    c8:a3:88:8f:54:c1:8f:80:5d:77:15:54:c5:9b:7c:
                    b6:c4:81:c0:c0:c1:90:0b:38:a9:e8:16:e4:c7:e6:
                    ad:9f:ac:11:5e:42:fd:0c:03:c8:2d:83:ff:1c:87:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:B6:90:95:92:87:D3:08:5B:23:83:5C:85:3E:70:13:AC:9A:A0
            X509v3 Authority Key Identifier:
                keyid:0E:CB:A3:2E:DA:D0:39:B9:46:AD:A5:10:80:D4:78:FB:75:DA:2C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsujLtrQOblGraUQgNR4-3XaLLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a0:da:7f:05:64:ff:84:5b:01:33:b8:0f:7f:4c:aa:20:cc:
         12:ed:ed:bb:5e:77:74:b6:5f:d8:ab:ab:b4:b1:9e:7a:19:c4:
         2f:8d:1c:d7:2d:e3:45:a5:96:a5:c0:ec:12:e6:a6:f4:b2:fe:
         e3:8e:62:61:90:42:1d:c0:2b:f0:3c:c6:8d:e7:61:06:66:39:
         f3:a0:62:02:60:9e:ad:a6:e1:16:cb:4f:75:ae:9f:64:84:b4:
         c5:50:1b:38:12:5d:60:31:9d:75:c3:a7:84:cf:de:1b:48:20:
         d4:73:01:81:f0:8a:93:01:49:87:4f:8e:8c:17:3d:3e:8e:8f:
         b0:f6:cc:37:47:7d:80:d4:53:5c:71:8e:21:75:8b:74:17:87:
         a5:1a:30:42:a8:b3:68:3b:e6:16:1a:d7:16:fa:99:9b:78:e7:
         2d:57:65:a1:4b:78:ad:cb:fc:86:b0:d2:c9:c6:08:22:a6:b7:
         8f:29:70:5b:f4:b8:f9:b1:1c:f8:31:b4:d3:a7:bd:0f:85:d4:
         9e:4c:78:77:d1:68:95:cb:21:7c:e8:51:29:79:fe:3b:c3:3b:
         92:91:6d:cf:8a:3c:6c:29:74:60:68:22:fd:ac:30:3a:66:da:
         79:56:d9:ac:08:d7:15:0e:55:75:e8:0e:4f:8e:0d:1f:17:c7:
         db:ce:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org