Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
File:                     5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft (raw, json)
Hash identifier:          YQemOS0hyZdQ0e5lJCkY912pwQ40HidkcP5HN4r0G58=
Subject key identifier:   22:35:FC:BE:09:8E:40:69:80:D4:61:21:5C:C7:3F:79:8E:3B:47:00
Authority key identifier: 5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B
Certificate issuer:       /CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
Certificate serial:       7CC04AD8488151D297ACE2817DC2E72FA4EE13E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
Manifest number:          0AD4
Signing time:             Thu 19 Dec 2024 01:54:25 +0000
Manifest this update:     Thu 19 Dec 2024 01:49:25 +0000
Manifest next update:     Fri 20 Dec 2024 03:35:25 +0000
Files and hashes:         1: 33312e32342e38342e302f32342d3234203d3e20313336373837.roa (hash: +xv4HQvE2izBfWSwUxF6zCYpXi1N3jphq4kcXafcSys=)
                          2: 5A2F2699BA5359EA7F3702C46D4A048219E1A64B.crl (hash: DFseVCeYYy8leKBjPhg+Ev/9hVPMRTWINcGvZebURz4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:4a:d8:48:81:51:d2:97:ac:e2:81:7d:c2:e7:2f:a4:ee:13:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
        Validity
            Not Before: Dec 19 01:49:25 2024 GMT
            Not After : Dec 20 03:35:25 2024 GMT
        Subject: CN=2235FCBE098E406980D461215CC73F798E3B4700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:1d:f7:19:9b:26:79:91:ac:8a:1e:a6:2e:
                    fc:8f:68:ae:fe:87:86:e2:76:b8:f1:af:07:0c:83:
                    ce:1a:9f:18:0c:13:6f:5e:65:6b:c2:1c:d5:25:08:
                    ba:18:4b:8f:c1:7b:47:32:b9:8c:db:85:2b:c0:43:
                    d8:bf:38:01:c5:87:72:31:83:71:95:98:7d:8c:39:
                    d0:1e:ca:c6:5d:8c:86:91:50:5e:3d:62:5f:f2:88:
                    fb:5c:c1:51:00:40:0f:f5:71:7a:9b:19:64:84:cd:
                    60:92:68:88:6b:69:e5:9a:e1:59:85:ad:4d:16:7d:
                    55:d7:12:71:bf:ff:1c:fa:08:e3:cc:9f:14:4f:cf:
                    84:3c:16:79:80:5b:91:42:33:0d:34:e5:1c:8b:47:
                    bd:f3:d3:d7:b9:fc:2f:83:70:87:9b:22:c0:2c:d2:
                    e7:0b:ab:41:72:6a:02:92:a1:36:0a:2c:33:44:a6:
                    96:3e:97:7b:1a:16:24:8d:ab:cf:4f:91:3c:56:4a:
                    d4:85:9b:78:18:7f:5b:20:04:83:33:b9:ca:ec:6b:
                    5b:ac:3c:f0:df:00:15:de:a1:e6:7f:af:c8:13:f4:
                    cd:a3:b2:3a:6e:e3:75:c1:50:a3:26:15:07:fb:4b:
                    55:50:63:24:d4:32:ab:8d:67:99:79:fe:ba:d2:e0:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:35:FC:BE:09:8E:40:69:80:D4:61:21:5C:C7:3F:79:8E:3B:47:00
            X509v3 Authority Key Identifier:
                keyid:5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:68:b6:cf:68:3b:97:7f:20:ad:40:7b:bb:8f:ef:e1:10:77:
         13:d9:db:09:17:04:fe:28:5e:04:db:c5:50:88:19:f4:f8:32:
         28:b9:6c:a7:a7:1f:14:a4:45:f3:b8:d9:31:7a:89:0f:f3:29:
         9d:0b:3e:12:fc:3a:59:9d:6d:cf:07:75:57:2a:ee:ee:99:1a:
         13:82:74:3b:b4:8c:6e:fd:70:08:c5:97:69:ab:63:c1:f4:6b:
         83:31:a8:27:56:59:c4:fa:6e:c9:c8:be:ca:15:0e:60:64:13:
         61:e3:5f:c0:54:4c:bc:e7:4e:fb:d2:57:af:7b:b3:04:44:9c:
         9f:ee:74:d0:af:08:1b:45:93:60:76:ef:02:f3:c3:0e:da:d5:
         06:6a:84:ac:a6:3e:c1:cc:90:09:7e:70:90:0e:82:7d:4f:93:
         b9:04:89:17:52:1c:c9:2f:54:91:e6:77:ec:a5:03:0f:ad:61:
         06:e2:35:a4:20:2a:37:40:ea:e0:89:c8:97:84:58:9a:45:0b:
         89:de:47:33:54:99:0f:cc:79:76:6c:39:30:a0:cb:ce:85:90:
         6a:05:68:b2:c5:94:43:49:8d:6a:8b:c5:43:e8:d3:cd:8a:7e:
         9c:8f:26:29:71:ea:71:1a:fe:22:9c:cc:0e:b8:db:78:57:8f:
         6e:39:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----