Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/1/984218D72412FC74C811343E999889105497A2C6.mft
File:                     984218D72412FC74C811343E999889105497A2C6.mft (raw, json)
Hash identifier:          jjPaAbOntiKPIxXzrQs48Y2SA3ktVPgAFW12jJ37HqE=
Subject key identifier:   5C:AF:0D:28:DB:A7:61:3F:DF:07:78:0D:03:49:3F:B0:D1:21:C9:DC
Authority key identifier: 98:42:18:D7:24:12:FC:74:C8:11:34:3E:99:98:89:10:54:97:A2:C6
Certificate issuer:       /CN=984218D72412FC74C811343E999889105497A2C6
Certificate serial:       5A259DB99C493C7719AA7207D0FF87E350635CDC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/984218D72412FC74C811343E999889105497A2C6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/1/984218D72412FC74C811343E999889105497A2C6.mft
Manifest number:          01
Signing time:             Fri 14 Jun 2024 02:02:53 +0000
Manifest this update:     Fri 14 Jun 2024 01:57:53 +0000
Manifest next update:     Sat 15 Jun 2024 05:58:53 +0000
Files and hashes:         1: 984218D72412FC74C811343E999889105497A2C6.crl (hash: 4BakJJKVM86Ahz3IIXlGYxUjclJ4ebBb2oxjtnRh0Rc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:25:9d:b9:9c:49:3c:77:19:aa:72:07:d0:ff:87:e3:50:63:5c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984218D72412FC74C811343E999889105497A2C6
        Validity
            Not Before: Jun 14 01:57:53 2024 GMT
            Not After : Jun 15 05:58:53 2024 GMT
        Subject: CN=5CAF0D28DBA7613FDF07780D03493FB0D121C9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:16:99:37:03:1f:73:e1:1b:18:ca:6b:72:
                    86:4e:ae:37:4c:d2:d5:ef:d2:d7:ab:51:dc:7e:d6:
                    2b:1f:65:18:aa:19:b5:26:b2:c8:fb:53:c2:b7:34:
                    29:0d:00:47:de:e9:0a:c6:e3:50:d8:51:b3:56:03:
                    88:79:ef:05:56:a4:f7:2b:e7:48:da:f4:6b:87:5e:
                    ee:25:a4:0a:af:ae:79:bf:4a:17:5b:23:8e:dc:82:
                    92:f8:4a:c7:73:73:96:cf:12:55:28:4a:f8:c6:61:
                    b2:86:d3:7d:62:3a:5b:92:f8:f6:85:02:56:b6:bc:
                    79:52:c0:bd:ac:17:b1:c6:f4:3c:7f:2b:29:c5:f4:
                    a9:83:74:75:63:c2:d5:95:4b:2c:5e:0b:33:17:32:
                    db:56:e2:7a:8f:00:0a:55:b8:61:09:38:38:c5:97:
                    03:5c:82:82:87:db:33:32:58:6d:7f:c8:0b:42:db:
                    da:7d:fa:42:25:d8:0c:a2:93:4a:66:de:8e:76:8a:
                    c0:7c:d6:42:d5:dd:24:10:22:2c:70:31:86:02:2a:
                    db:95:13:9d:2d:04:9a:9d:90:1f:fa:d2:53:90:22:
                    05:37:a9:d6:84:a3:d3:60:d6:fc:35:7a:fd:ff:d1:
                    55:f7:11:5b:a4:0d:61:de:8d:72:9d:42:d4:9f:df:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AF:0D:28:DB:A7:61:3F:DF:07:78:0D:03:49:3F:B0:D1:21:C9:DC
            X509v3 Authority Key Identifier:
                keyid:98:42:18:D7:24:12:FC:74:C8:11:34:3E:99:98:89:10:54:97:A2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/1/984218D72412FC74C811343E999889105497A2C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/984218D72412FC74C811343E999889105497A2C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/1/984218D72412FC74C811343E999889105497A2C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:9d:d4:4d:03:8d:e3:5e:98:9e:77:45:1e:5e:9c:89:0c:
         da:11:d6:d6:5b:46:46:93:51:82:57:45:ea:32:b9:62:8c:a2:
         7f:9c:c9:93:a1:c0:98:d7:da:e6:cb:e0:ba:73:4b:55:39:43:
         ce:0b:40:1f:40:2c:a7:23:a0:23:b8:cf:05:fd:63:a0:3c:82:
         a1:59:b4:55:86:30:67:fa:8c:a8:c6:55:d9:18:68:75:a8:b8:
         f4:cd:09:16:b3:15:df:4d:5e:d3:ca:76:fe:6c:16:32:11:fb:
         e8:b2:16:33:af:dd:5c:f2:ed:eb:20:28:59:af:10:35:46:92:
         e7:70:02:5e:24:7a:d0:a2:24:ac:9f:83:c3:56:ac:cc:dd:90:
         8d:8a:81:ca:ea:00:fb:c5:c7:48:0c:3a:84:dc:f1:f2:34:20:
         f2:55:4b:de:6a:b6:68:47:17:8f:db:44:c8:4a:71:98:55:cd:
         36:ee:5a:e7:ba:ce:f1:86:78:e8:04:2a:ce:b2:de:00:69:32:
         36:3e:b4:ea:fb:ea:74:17:75:0d:cc:5a:5d:41:6c:78:56:13:
         74:10:df:16:73:3a:71:d5:d6:85:46:fb:b4:d4:36:d8:8e:ce:
         01:62:b9:9b:71:23:f7:90:1f:af:4b:28:e6:ee:f1:9d:ec:64:
         a3:ae:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----