Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/1/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.mft
File:                     1D6BBF0C15777B10AC07F6453F434FB28C37A99A.mft (raw, json)
Hash identifier:          z9k2Ui5pgcLSMkMCy6H6j16PZjBAxMHgMKDhoNdh91g=
Subject key identifier:   90:B4:C4:13:E5:AF:A7:0C:60:00:6D:AC:29:72:3A:9E:FC:1D:69:ED
Authority key identifier: 1D:6B:BF:0C:15:77:7B:10:AC:07:F6:45:3F:43:4F:B2:8C:37:A9:9A
Certificate issuer:       /CN=1D6BBF0C15777B10AC07F6453F434FB28C37A99A
Certificate serial:       31D643BFDB6616A2C74AE861611875CB66C3A8AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/1/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.mft
Manifest number:          08
Signing time:             Fri 02 Aug 2024 09:07:39 +0000
Manifest this update:     Fri 02 Aug 2024 09:02:39 +0000
Manifest next update:     Sat 03 Aug 2024 12:29:39 +0000
Files and hashes:         1: 1D6BBF0C15777B10AC07F6453F434FB28C37A99A.crl (hash: Dqn2CmkOImqHqv9QubCI05RKXlvYsv2IAf7RTnQKzc0=)
                          2: 326130613a363034343a376530303a3a2f34302d3430203d3e20323134343836.roa (hash: 5mV02L4LoqW3tWyPp2iCMDGux7cqvYzyp21LdjuEPHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d6:43:bf:db:66:16:a2:c7:4a:e8:61:61:18:75:cb:66:c3:a8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6BBF0C15777B10AC07F6453F434FB28C37A99A
        Validity
            Not Before: Aug  2 09:02:39 2024 GMT
            Not After : Aug  3 12:29:39 2024 GMT
        Subject: CN=90B4C413E5AFA70C60006DAC29723A9EFC1D69ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:56:30:00:8d:73:d4:7a:fd:79:3f:bb:eb:
                    07:92:41:39:84:a2:d6:38:79:15:ca:2e:47:61:37:
                    57:97:94:f9:1e:91:a8:55:31:89:c5:ee:12:31:ae:
                    1c:8b:75:2a:3f:e6:5a:44:2b:5d:2b:4c:bf:0a:36:
                    8f:6a:c1:44:4c:45:52:27:52:76:99:70:fe:52:1c:
                    13:a7:0c:e5:98:c7:23:7a:5a:23:1b:1f:9a:cb:82:
                    b7:60:b3:73:49:6a:c4:1f:ab:e1:99:04:d9:41:ee:
                    16:42:5b:3a:53:ca:c4:d7:07:c6:fa:28:e0:e7:0a:
                    22:84:bf:f2:67:6a:2f:19:a2:62:e4:1e:c0:d0:63:
                    9c:7a:c2:0b:34:3d:2c:20:44:fc:97:61:f7:33:de:
                    a5:ac:f4:91:ea:6a:cb:de:9f:51:55:28:04:e3:f9:
                    85:77:03:9b:aa:d0:74:c2:42:d1:32:3f:ff:ca:53:
                    e4:65:9f:5a:d6:4c:f2:eb:12:29:56:49:0d:e1:26:
                    35:bc:2c:a7:31:36:2f:e9:b0:cd:3f:b0:0a:d8:d3:
                    91:9d:4d:6d:90:d5:1b:0c:ea:be:15:cf:8b:6a:9e:
                    06:22:01:4e:4e:67:9a:7e:50:c3:4a:a5:40:d0:7a:
                    e8:0b:c1:fc:db:4a:25:d2:ce:d3:5e:dc:07:4a:ec:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B4:C4:13:E5:AF:A7:0C:60:00:6D:AC:29:72:3A:9E:FC:1D:69:ED
            X509v3 Authority Key Identifier:
                keyid:1D:6B:BF:0C:15:77:7B:10:AC:07:F6:45:3F:43:4F:B2:8C:37:A9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/1/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/1/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:97:b6:62:9a:c0:0a:0e:f2:7c:86:6e:59:ec:cb:84:ba:af:
         d4:f5:30:68:4a:02:1d:97:66:13:79:8c:29:25:ef:f2:b8:f1:
         a5:2d:a4:af:6d:0e:ba:ac:55:2c:25:83:44:cc:e5:8d:98:3f:
         ec:80:d8:c8:eb:94:91:90:fb:43:8f:0b:de:29:1d:5c:5c:57:
         77:3f:d4:f6:6c:ba:9a:df:47:03:55:eb:16:5b:d3:45:d5:0e:
         c0:27:a8:75:b1:10:93:fa:73:08:7f:f9:02:bf:f6:47:2b:a6:
         cd:a8:62:33:1c:34:27:87:09:74:4e:42:b8:f3:a3:40:fe:06:
         e7:6f:3d:2b:4a:96:1e:a2:23:36:88:31:45:c9:7f:3b:bd:04:
         24:c1:53:65:46:04:37:8e:07:45:aa:1f:7e:20:99:b7:b0:8b:
         82:a8:cf:f4:29:ac:7a:dd:2f:ce:f6:d4:0f:9b:a9:61:9a:84:
         22:0e:b3:ba:59:3d:0d:6a:99:4f:ae:1d:b2:f0:f0:f2:bd:cf:
         fd:46:f0:56:c4:cb:a4:da:78:28:66:e0:80:d0:68:1c:13:10:
         02:e7:b6:6f:57:b7:50:34:3f:e8:fd:9f:82:d3:1a:f4:6d:9f:
         e1:fe:93:0e:b8:05:47:e2:c0:3d:e6:e2:32:f2:2c:ff:44:6b:
         24:74:ed:40
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUMdZDv9tmFqLHSuhhYRh1y2bDqK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2QkJGMEMxNTc3N0IxMEFDMDdGNjQ1M0Y0MzRGQjI4
QzM3QTk5QTAeFw0yNDA4MDIwOTAyMzlaFw0yNDA4MDMxMjI5MzlaMDMxMTAvBgNV
BAMTKDkwQjRDNDEzRTVBRkE3MEM2MDAwNkRBQzI5NzIzQTlFRkMxRDY5RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7VYwAI1z1Hr9eT+76weSQTmE
otY4eRXKLkdhN1eXlPkekahVMYnF7hIxrhyLdSo/5lpEK10rTL8KNo9qwURMRVIn
UnaZcP5SHBOnDOWYxyN6WiMbH5rLgrdgs3NJasQfq+GZBNlB7hZCWzpTysTXB8b6
KODnCiKEv/Jnai8ZomLkHsDQY5x6wgs0PSwgRPyXYfcz3qWs9JHqasven1FVKATj
+YV3A5uq0HTCQtEyP//KU+Rln1rWTPLrEilWSQ3hJjW8LKcxNi/psM0/sArY05Gd
TW2Q1RsM6r4Vz4tqngYiAU5OZ5p+UMNKpUDQeugLwfzbSiXSztNe3AdK7AF/AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUkLTEE+WvpwxgAG2sKXI6nvwdae0wHwYDVR0j
BBgwFoAUHWu/DBV3exCsB/ZFP0NPsow3qZowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh
YzQ5LzEvMUQ2QkJGMEMxNTc3N0IxMEFDMDdGNjQ1M0Y0MzRGQjI4QzM3QTk5QS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xRDZCQkYwQzE1Nzc3QjEwQUMwN0Y2NDUz
RjQzNEZCMjhDMzdBOTlBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS8xLzFENkJCRjBD
MTU3NzdCMTBBQzA3RjY0NTNGNDM0RkIyOEMzN0E5OUEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBol7Zi
msAKDvJ8hm5Z7MuEuq/U9TBoSgIdl2YTeYwpJe/yuPGlLaSvbQ66rFUsJYNEzOWN
mD/sgNjI65SRkPtDjwveKR1cXFd3P9T2bLqa30cDVesWW9NF1Q7AJ6h1sRCT+nMI
f/kCv/ZHK6bNqGIzHDQnhwl0TkK486NA/gbnbz0rSpYeoiM2iDFFyX87vQQkwVNl
RgQ3jgdFqh9+IJm3sIuCqM/0Kax63S/O9tQPm6lhmoQiDrO6WT0NaplPrh2y8PDy
vc/9RvBWxMuk2ngoZuCA0GgcExAC57ZvV7dQND/o/Z+C0xr0bZ/h/pMOuAVH4sA9
5uIy8iz/RGskdO1A
-----END CERTIFICATE-----
Generated at Fri Aug 2 13:49:47 2024 by rpki-client on console-fra.rpki-client.org