Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.mft
File:                     62DFE0F943896C6926C6A58A5CA112539167FA66.mft (raw, json)
Hash identifier:          naIMGtFJ50mjfKcRLBJbJYODGYgDw4Zd4M79Ktt6QpQ=
Subject key identifier:   DC:E7:41:A0:5F:5A:47:9F:B9:E4:CA:0B:24:90:70:D8:2F:2E:18:95
Authority key identifier: 62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66
Certificate issuer:       /CN=62DFE0F943896C6926C6A58A5CA112539167FA66
Certificate serial:       26C6B2DA32CB92680F40E19F276E0AE590334CEE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.mft
Manifest number:          45
Signing time:             Mon 20 May 2024 17:07:48 +0000
Manifest this update:     Mon 20 May 2024 17:02:48 +0000
Manifest next update:     Tue 21 May 2024 20:09:48 +0000
Files and hashes:         1: 62DFE0F943896C6926C6A58A5CA112539167FA66.crl (hash: kY2yriQOBu0o0NUNsHnQsytIg208ZN0wi+aelrIifGo=)
                          2: 326131333a646638303a353730303a3a2f34372d3438203d3e20323136323635.roa (hash: JackT54lDVzptXIRW2irArf3PDgSGRhrjfnLhee9mzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c6:b2:da:32:cb:92:68:0f:40:e1:9f:27:6e:0a:e5:90:33:4c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DFE0F943896C6926C6A58A5CA112539167FA66
        Validity
            Not Before: May 20 17:02:48 2024 GMT
            Not After : May 21 20:09:48 2024 GMT
        Subject: CN=DCE741A05F5A479FB9E4CA0B249070D82F2E1895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:05:aa:6d:03:9f:c0:cd:93:cf:11:1f:56:
                    fd:fa:21:4a:e3:d0:88:6c:9b:cf:c3:a3:f9:9c:8e:
                    ff:d8:a6:39:38:6b:95:64:9e:a6:7a:11:3b:f7:c9:
                    8b:67:12:31:7f:ad:53:fd:bb:ca:eb:23:ab:f5:69:
                    e8:0d:bf:52:dd:83:fd:3e:e6:9a:97:37:35:22:12:
                    e3:fd:a7:44:6d:2b:8d:bc:89:bd:cc:25:01:aa:53:
                    cd:30:04:d7:9f:d7:4f:e1:bd:1e:b1:96:1b:f5:3d:
                    4b:cd:e8:1c:fe:d9:32:bf:ae:b0:bf:a5:cc:53:e3:
                    a6:28:14:e7:b9:c6:49:38:88:e1:af:42:b6:0e:e7:
                    68:9e:a3:ea:ef:1f:0b:24:0d:43:64:79:b4:e9:25:
                    0d:f9:c7:4c:7e:0e:a2:74:aa:5f:ae:16:e3:9c:bc:
                    75:db:ef:f4:13:2a:94:d9:58:62:1e:5b:3a:65:31:
                    a9:68:49:c9:a6:b7:52:ce:ed:3f:d5:4b:5c:11:ef:
                    0b:fd:2c:6c:d0:1d:95:cd:31:ee:54:f9:b7:a6:6a:
                    fd:8a:09:43:b8:72:b5:45:8e:c4:7d:53:f4:d2:3d:
                    f6:20:db:4a:a1:0c:e0:c8:4c:32:80:98:b5:65:88:
                    c3:48:a2:f5:74:d0:5c:7c:c9:ed:a3:76:01:24:49:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E7:41:A0:5F:5A:47:9F:B9:E4:CA:0B:24:90:70:D8:2F:2E:18:95
            X509v3 Authority Key Identifier:
                keyid:62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7f:76:88:62:a1:f6:e2:e9:f0:14:a5:39:e8:e9:7a:e9:f2:
         14:f7:d6:d4:26:2c:ca:a4:bf:1e:a4:6b:d7:f0:1f:42:1b:ea:
         8a:59:96:af:9c:a0:47:85:e7:53:43:5b:88:f3:f3:64:c2:63:
         19:55:f9:c7:59:72:bc:f3:3f:32:0b:52:bc:b4:5c:29:35:8f:
         97:3b:14:53:8e:bc:bd:bb:85:04:0b:45:b7:3a:ae:c6:6f:40:
         ee:24:c6:9a:e5:f5:ed:4d:39:3c:d8:30:73:77:01:d9:2c:bb:
         aa:45:a3:d2:54:bc:f1:a1:30:07:fa:0f:0c:ec:c6:ae:03:e5:
         d2:f7:4a:00:fe:2f:7c:08:15:d9:b8:8b:cf:77:02:19:d6:79:
         e7:10:6e:f9:61:c5:45:16:c0:22:26:67:51:b2:8d:4c:b8:5d:
         7f:6c:c9:91:9a:20:3b:8a:8c:45:cc:1e:23:90:7b:9e:d1:d1:
         ff:c9:85:aa:97:66:3a:ff:24:63:05:77:25:12:15:6f:54:3a:
         a2:76:ac:b6:51:9e:70:19:30:63:80:31:9a:50:36:24:60:3b:
         7d:f4:77:56:09:ba:89:da:60:3d:01:17:3a:05:50:06:8c:e8:
         30:10:ee:b0:4b:07:bd:80:73:95:9f:10:31:8a:e0:19:09:75:
         15:ec:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----