Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/C9B958A1C39734374D5FA45EC8A6A72EB9AA414B.mft
File:                     C9B958A1C39734374D5FA45EC8A6A72EB9AA414B.mft (raw, json)
Hash identifier:          Sdu9fk7uYdy6RZNEs/vofX77lD0QD4xVmb7VFQvmTIo=
Subject key identifier:   6F:23:E0:26:D4:02:3E:AC:9B:B8:B0:3B:72:C1:4D:BA:25:DB:5A:F4
Authority key identifier: C9:B9:58:A1:C3:97:34:37:4D:5F:A4:5E:C8:A6:A7:2E:B9:AA:41:4B
Certificate issuer:       /CN=1822fe9c8ad18c7e45cc43956a3d4c18c88a58a993fb8af0ea
Certificate serial:       548B219DBFE221364F2853D21E044B8A1A24A0A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8ad18c7e45cc43956a3d4c18c88a58a993fb8af0ea.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/C9B958A1C39734374D5FA45EC8A6A72EB9AA414B.mft
Manifest number:          03
Signing time:             Sun 12 Nov 2023 14:07:37 +0000
Manifest this update:     Sun 12 Nov 2023 14:02:37 +0000
Manifest next update:     Mon 13 Nov 2023 15:50:37 +0000
Files and hashes:         1: 32332e3134352e35372e302f32342d3234203d3e203630393030.roa (hash: vhTPRApVVh0zVcC+Kn5j8LvaZJ4ibFQmM/JKjc0bOoM=)
                          2: C9B958A1C39734374D5FA45EC8A6A72EB9AA414B.crl (hash: WC+O+i56rBNAnTUjW9rNTJFlYWlyfQqKZ7Z7UKLu3nE=)
                          3: 32332e3134352e35362e302f32342d3234203d3e203135333533.roa (hash: WnPw4eSPvJCQVpZ3MnlfUu01IcLmXpaJBy2NaO6VNTw=)
                          4: 323630323a666162383a3a2f33362d3336203d3e20323033343533.roa (hash: teVbqhxDluyz0j7uBd9BCQbjuUfTOxyShh3Pbj9RyhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8b:21:9d:bf:e2:21:36:4f:28:53:d2:1e:04:4b:8a:1a:24:a0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8ad18c7e45cc43956a3d4c18c88a58a993fb8af0ea
        Validity
            Not Before: Nov 12 14:02:37 2023 GMT
            Not After : Nov 13 15:50:37 2023 GMT
        Subject: CN=6F23E026D4023EAC9BB8B03B72C14DBA25DB5AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:fd:7c:d6:93:50:d6:ed:80:eb:cc:d0:55:
                    07:e8:0f:e1:97:98:81:72:e5:4e:54:92:6f:18:05:
                    7f:d1:34:a1:ca:df:17:a9:90:67:27:f8:f4:e2:5f:
                    31:a3:a3:3f:b0:06:31:41:ce:8b:e5:aa:f7:4a:80:
                    7a:d6:66:d1:73:51:32:d7:43:37:0d:48:8a:80:6f:
                    58:e0:b9:c0:9b:90:76:f6:b8:26:2d:96:36:66:11:
                    2c:42:a9:36:62:d5:0b:00:97:4d:02:9b:9a:68:c7:
                    c0:be:72:ba:f7:b6:b9:10:21:0b:b8:35:c9:3f:a1:
                    8a:f3:5d:8b:f1:ec:44:84:31:3b:4c:9a:e7:13:1f:
                    93:e9:59:7b:d7:f6:86:e4:49:68:f0:cc:0a:84:00:
                    3d:72:af:d8:e0:6d:9e:8d:46:b1:48:90:92:19:2f:
                    79:01:0c:ed:1a:07:56:93:6a:f1:c2:0f:89:7a:04:
                    91:fb:95:90:e9:9e:b7:d5:d5:22:96:6b:51:23:43:
                    7f:76:6e:b2:71:a7:81:72:1c:af:d1:9b:31:96:b2:
                    d4:ad:dd:5d:e3:a5:7e:09:f2:4f:73:c3:4d:81:95:
                    41:4b:44:1a:a2:11:de:7c:2d:0b:93:88:16:63:d1:
                    ae:71:c4:09:63:16:43:4a:84:50:ce:48:0b:f2:b5:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:23:E0:26:D4:02:3E:AC:9B:B8:B0:3B:72:C1:4D:BA:25:DB:5A:F4
            X509v3 Authority Key Identifier:
                keyid:C9:B9:58:A1:C3:97:34:37:4D:5F:A4:5E:C8:A6:A7:2E:B9:AA:41:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/C9B958A1C39734374D5FA45EC8A6A72EB9AA414B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8ad18c7e45cc43956a3d4c18c88a58a993fb8af0ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/C9B958A1C39734374D5FA45EC8A6A72EB9AA414B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:97:cf:83:2d:87:71:64:0e:8a:95:c8:fd:69:3e:f5:99:80:
         3c:27:d9:b6:ac:ec:93:a0:79:84:82:d6:60:2d:00:a1:d2:58:
         f5:e6:03:23:48:4e:37:7b:34:05:33:5b:7d:f6:66:28:43:72:
         1d:45:64:56:61:39:47:43:44:87:3b:a3:c3:70:b0:87:4e:74:
         09:f4:d4:23:54:81:13:1f:36:5e:80:de:f5:fc:a6:d1:5a:b7:
         df:5a:5e:a0:0d:57:da:f2:be:60:c3:0c:98:4d:fb:db:bf:e0:
         6b:f4:99:66:27:d8:16:20:cc:15:6b:42:12:d2:a9:62:62:48:
         20:4c:b5:c0:e0:17:58:1f:3f:7b:f8:fa:b8:58:ba:ed:3a:0e:
         66:19:18:0b:e7:b1:5d:11:da:86:5e:a6:82:a5:cb:d6:e9:af:
         01:e1:37:aa:19:e8:88:02:69:b5:76:46:cc:f7:08:84:ca:99:
         aa:67:40:8d:2b:ff:8e:56:d0:09:d6:6b:df:54:b6:d9:ad:b4:
         41:10:1a:2d:45:35:f8:54:a6:73:12:12:21:f2:cf:06:47:53:
         f4:dd:c6:bb:d1:c0:f1:ca:4c:38:52:96:ea:1c:ab:1e:45:1b:
         4a:7b:f6:da:ef:99:b1:2f:13:9d:c8:2d:e0:e8:3a:2f:bf:9b:
         d2:cb:73:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 16:11:57 2023 by rpki-client on console-fra.rpki-client.org