Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft
File:                     72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft (raw, json)
Hash identifier:          EetJxeEQz3sqRn89cZgqgcfRu9TjSTE2H344pWzUtyM=
Subject key identifier:   11:60:28:4A:F2:8E:7C:81:2F:2A:62:79:3A:42:E1:D6:F0:90:FB:37
Authority key identifier: 72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4
Certificate issuer:       /CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
Certificate serial:       33EAE51B58B4C9C55A56BCAB8B77BAFFDEE73047
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft
Manifest number:          04
Signing time:             Sat 24 Feb 2024 01:08:20 +0000
Manifest this update:     Sat 24 Feb 2024 01:03:20 +0000
Manifest next update:     Sun 25 Feb 2024 01:44:20 +0000
Files and hashes:         1: 72484EF62E84FA48E7A4A243EFAAF012268DBBB4.crl (hash: tAUSZEnT+GKF0e3rRYcSFnW7Xnq2kjxL//l+vDkqbhQ=)
                          2: 326130373a323438373a3a2f33322d3332203d3e20323135383238.roa (hash: GB49F+1kBAEC3E71kx8/e+J2VoKjiy3gZuAeE0pRbVQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ea:e5:1b:58:b4:c9:c5:5a:56:bc:ab:8b:77:ba:ff:de:e7:30:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
        Validity
            Not Before: Feb 24 01:03:20 2024 GMT
            Not After : Feb 25 01:44:20 2024 GMT
        Subject: CN=1160284AF28E7C812F2A62793A42E1D6F090FB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:c9:1a:a2:cb:ba:b4:32:15:d2:97:94:95:
                    91:08:c0:15:88:50:bf:13:cb:ad:3c:5a:e8:25:70:
                    bc:5f:b5:be:05:cb:02:48:15:82:53:7c:fd:7e:af:
                    a0:5e:6f:14:39:98:9b:e2:80:6e:b2:17:79:18:71:
                    04:11:f7:a7:46:64:b5:1d:0e:1d:1e:7a:64:4e:cc:
                    21:4d:d9:a8:13:7c:cc:7c:50:cf:2b:4a:b7:c1:95:
                    5f:3c:5d:64:25:f6:5a:36:01:df:ed:f6:7d:11:f7:
                    75:01:73:91:e8:c4:6b:49:bc:3b:26:ed:49:c3:2a:
                    24:b0:47:57:f1:b5:30:1c:f6:f9:62:0b:73:ec:50:
                    c7:b3:b1:cf:1b:1c:e5:a2:2c:4e:ed:da:ff:15:31:
                    f9:7d:ec:dc:e0:cf:ca:1b:6d:b2:b8:37:2a:61:69:
                    8a:3f:bf:9f:95:04:b6:29:dc:ae:ea:de:fc:2a:5b:
                    a5:2c:8b:92:fa:21:b4:85:9a:d5:e3:b8:1a:83:3b:
                    b1:a3:f8:21:7b:36:8f:fc:59:fa:fc:9b:79:80:8e:
                    68:ff:40:99:f7:73:2d:77:5d:86:32:f9:b5:38:d1:
                    9e:79:0a:dc:1a:cd:90:c1:07:05:c2:0c:2a:f8:76:
                    ac:ba:ef:7d:a4:14:e6:31:97:28:72:1f:5a:d2:48:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:60:28:4A:F2:8E:7C:81:2F:2A:62:79:3A:42:E1:D6:F0:90:FB:37
            X509v3 Authority Key Identifier:
                keyid:72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:88:68:0b:28:ec:dd:f6:c4:9f:5a:cb:53:fa:11:fb:f2:ec:
         62:f3:54:ae:81:fb:d6:a8:d3:64:47:75:e0:e6:19:3d:cb:d4:
         f4:61:ed:43:5b:eb:88:c6:ba:98:e0:fd:55:c6:55:01:eb:1f:
         13:7e:8f:23:9c:37:70:ac:72:c9:7b:5d:97:58:6a:d3:e3:fe:
         01:9b:43:9b:c9:1c:ec:b2:dd:fd:eb:eb:45:1c:91:dc:a1:82:
         d9:6b:65:83:25:15:c9:b3:97:21:99:cb:02:9a:a8:50:ad:f4:
         30:f3:fa:9a:02:a6:3a:7d:c6:e6:86:a8:e8:1e:a0:a0:ef:63:
         39:6d:87:28:19:1c:4a:3c:7f:9c:43:30:e6:b9:ed:5e:f2:d1:
         ac:ea:96:09:e7:8f:f3:94:fc:8c:51:35:a5:bc:0b:d7:23:3c:
         83:34:47:1c:4a:9b:9a:35:5c:e7:fe:9e:ed:d0:fa:6a:ab:75:
         99:e4:3b:8f:86:15:4f:4e:74:a7:5e:da:3c:c9:2c:4e:6c:76:
         f7:cc:72:07:2b:78:8a:02:09:7a:81:e5:10:ef:8a:73:5a:f1:
         bf:16:da:10:06:f2:aa:6b:b3:c2:e0:bd:2f:58:9f:9a:21:d9:
         18:0b:ab:d1:cf:18:ca:bc:87:08:92:73:73:fe:b1:ae:66:cf:
         80:ab:0b:1f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUM+rlG1i0ycVaVryri3e6/97nMEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI0ODRFRjYyRTg0RkE0OEU3QTRBMjQzRUZBQUYwMTIy
NjhEQkJCNDAeFw0yNDAyMjQwMTAzMjBaFw0yNDAyMjUwMTQ0MjBaMDMxMTAvBgNV
BAMTKDExNjAyODRBRjI4RTdDODEyRjJBNjI3OTNBNDJFMUQ2RjA5MEZCMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMMkaosu6tDIV0peUlZEIwBWI
UL8Ty608WuglcLxftb4FywJIFYJTfP1+r6BebxQ5mJvigG6yF3kYcQQR96dGZLUd
Dh0eemROzCFN2agTfMx8UM8rSrfBlV88XWQl9lo2Ad/t9n0R93UBc5HoxGtJvDsm
7UnDKiSwR1fxtTAc9vliC3PsUMezsc8bHOWiLE7t2v8VMfl97Nzgz8obbbK4Nyph
aYo/v5+VBLYp3K7q3vwqW6Usi5L6IbSFmtXjuBqDO7Gj+CF7No/8Wfr8m3mAjmj/
QJn3cy13XYYy+bU40Z55CtwazZDBBwXCDCr4dqy6732kFOYxlyhyH1rSSA23AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUEWAoSvKOfIEvKmJ5OkLh1vCQ+zcwHwYDVR0j
BBgwFoAUckhO9i6E+kjnpKJD76rwEiaNu7QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNmMDY0YzItYTQ1ZC00YWIyLWIxZGItY2Y0NTM3ZGI2
ZjdhLzEvNzI0ODRFRjYyRTg0RkE0OEU3QTRBMjQzRUZBQUYwMTIyNjhEQkJCNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTFjODI2OS00NTFlLTRk
MGQtOTNlNC1kMTExZWM4ZGRjZWUvMC83MjQ4NEVGNjJFODRGQTQ4RTdBNEEyNDNF
RkFBRjAxMjI2OERCQkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2UzZjA2NGMyLWE0NWQtNGFiMi1iMWRiLWNmNDUzN2RiNmY3YS8xLzcyNDg0RUY2
MkU4NEZBNDhFN0E0QTI0M0VGQUFGMDEyMjY4REJCQjQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpiGgL
KOzd9sSfWstT+hH78uxi81SugfvWqNNkR3Xg5hk9y9T0Ye1DW+uIxrqY4P1VxlUB
6x8Tfo8jnDdwrHLJe12XWGrT4/4Bm0ObyRzsst396+tFHJHcoYLZa2WDJRXJs5ch
mcsCmqhQrfQw8/qaAqY6fcbmhqjoHqCg72M5bYcoGRxKPH+cQzDmue1e8tGs6pYJ
54/zlPyMUTWlvAvXIzyDNEccSpuaNVzn/p7t0Ppqq3WZ5DuPhhVPTnSnXto8ySxO
bHb3zHIHK3iKAgl6geUQ74pzWvG/FtoQBvKqa7PC4L0vWJ+aIdkYC6vRzxjKvIcI
knNz/rGuZs+Aqwsf
-----END CERTIFICATE-----