Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/193/8C2390D88C404A3D7AACD59E3B8DA6F7814DF725.mft
File:                     8C2390D88C404A3D7AACD59E3B8DA6F7814DF725.mft (raw, json)
Hash identifier:          FIatSgGFzEoZ0bmjbxVslP4EzWe2XGX8VKIo4GSkuZg=
Subject key identifier:   AC:81:D0:F8:AC:49:2A:BA:E5:69:30:82:45:4F:2C:3C:05:76:9B:88
Authority key identifier: 8C:23:90:D8:8C:40:4A:3D:7A:AC:D5:9E:3B:8D:A6:F7:81:4D:F7:25
Certificate issuer:       /CN=8c2390d88c404a3d7aacd59e3b8da6f7814df725
Certificate serial:       2A1842EA7C9009E0B0A221D11B138B3674FB8963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCOQ2IxASj16rNWeO42m94FN9yU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/193/8C2390D88C404A3D7AACD59E3B8DA6F7814DF725.mft
Manifest number:          0512
Signing time:             Thu 14 Dec 2023 12:38:40 +0000
Manifest this update:     Thu 14 Dec 2023 12:33:40 +0000
Manifest next update:     Fri 15 Dec 2023 15:28:40 +0000
Files and hashes:         1: 8C2390D88C404A3D7AACD59E3B8DA6F7814DF725.crl (hash: Deyfa7PakcU1/Nk78Wxb8iE6tGY+yFh5svi5+LKubUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:18:42:ea:7c:90:09:e0:b0:a2:21:d1:1b:13:8b:36:74:fb:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2390d88c404a3d7aacd59e3b8da6f7814df725
        Validity
            Not Before: Dec 14 12:33:40 2023 GMT
            Not After : Dec 15 15:28:40 2023 GMT
        Subject: CN=AC81D0F8AC492ABAE5693082454F2C3C05769B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:45:25:49:45:22:c2:df:e7:21:ba:d9:6a:
                    0a:e4:74:bd:1c:5e:0b:5c:84:75:b6:2c:3a:98:35:
                    c6:8f:af:35:55:05:c5:79:34:ae:62:c5:33:a4:88:
                    d7:7d:68:82:88:e4:c6:b9:bf:b8:0d:55:ab:f9:a2:
                    fe:e4:b1:75:2f:9d:79:70:db:65:60:9c:d6:1b:f8:
                    7b:e9:f4:df:0f:91:d4:df:15:2f:e3:20:87:01:a2:
                    27:46:64:41:a1:fa:e2:64:8c:60:fe:a1:8b:f6:a2:
                    b2:f2:e2:20:04:b9:b1:30:ae:42:1e:0d:81:da:90:
                    6d:93:68:c7:94:4c:ad:cc:06:d8:dc:92:db:6a:98:
                    b6:33:a1:ad:de:7f:3f:a6:a4:29:7f:58:16:fe:dc:
                    d6:57:84:59:4b:33:73:e0:33:79:aa:4e:b0:b9:a5:
                    9d:11:69:e8:2c:c9:3d:ae:63:fb:26:c3:ed:5e:dc:
                    cd:33:71:ac:44:35:b1:f8:16:d7:fb:d1:b3:be:30:
                    c5:b7:e0:b4:53:20:32:b0:ec:1e:8e:32:d7:10:4c:
                    ae:85:a7:ee:37:d8:05:17:9e:91:e6:4e:2c:cb:8d:
                    75:a9:97:97:a9:ed:a5:74:71:65:0c:12:83:47:c2:
                    99:dc:34:2d:f7:d2:b2:f2:c4:9a:e0:08:7e:da:77:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:81:D0:F8:AC:49:2A:BA:E5:69:30:82:45:4F:2C:3C:05:76:9B:88
            X509v3 Authority Key Identifier:
                keyid:8C:23:90:D8:8C:40:4A:3D:7A:AC:D5:9E:3B:8D:A6:F7:81:4D:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/193/8C2390D88C404A3D7AACD59E3B8DA6F7814DF725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCOQ2IxASj16rNWeO42m94FN9yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/193/8C2390D88C404A3D7AACD59E3B8DA6F7814DF725.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:16:9d:65:25:3a:16:81:20:41:ff:62:2a:3f:bd:59:0c:
         2a:90:32:07:10:cc:d6:24:44:b5:49:bf:c9:5f:76:7c:30:bf:
         09:02:bf:a6:63:fe:2c:49:0e:62:6d:58:7e:73:13:3c:ed:88:
         c9:2a:e4:9f:3c:fb:61:d4:b1:e8:94:e4:a9:ee:bb:e4:f3:f5:
         05:c1:ad:15:ef:ba:08:83:11:08:c3:29:a1:f8:bc:21:e9:9a:
         07:be:17:d2:b1:f3:a1:c2:5d:ed:f0:bb:80:b9:0d:c7:2a:6a:
         11:e4:da:85:7d:fa:b3:8e:52:07:8b:03:6b:eb:7d:ca:72:d5:
         70:84:4b:5c:1c:e3:42:5b:c9:25:b3:4a:20:9b:3d:dd:1b:a1:
         12:85:7f:14:43:41:30:46:ee:1b:bc:bf:3d:3e:74:50:fc:bf:
         75:61:6b:89:60:2a:ef:9e:2c:e7:16:3a:1b:b3:47:b2:13:60:
         bc:aa:e6:f5:17:46:16:d9:21:b9:56:2a:48:f2:70:21:86:96:
         be:de:ca:d9:b3:6d:25:fa:8c:65:41:c3:1d:89:59:52:f2:5b:
         c0:21:2e:1a:3c:e8:54:bc:4b:89:19:cb:34:14:f8:e0:1d:da:
         41:63:63:99:5d:1b:37:43:a7:fa:aa:51:c6:07:4f:e1:5c:dc:
         c5:0a:81:13
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKhhC6nyQCeCwoiHRGxOLNnT7iWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMyMzkwZDg4YzQwNGEzZDdhYWNkNTllM2I4ZGE2Zjc4
MTRkZjcyNTAeFw0yMzEyMTQxMjMzNDBaFw0yMzEyMTUxNTI4NDBaMDMxMTAvBgNV
BAMTKEFDODFEMEY4QUM0OTJBQkFFNTY5MzA4MjQ1NEYyQzNDMDU3NjlCODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcX0UlSUUiwt/nIbrZagrkdL0c
XgtchHW2LDqYNcaPrzVVBcV5NK5ixTOkiNd9aIKI5Ma5v7gNVav5ov7ksXUvnXlw
22VgnNYb+Hvp9N8PkdTfFS/jIIcBoidGZEGh+uJkjGD+oYv2orLy4iAEubEwrkIe
DYHakG2TaMeUTK3MBtjckttqmLYzoa3efz+mpCl/WBb+3NZXhFlLM3PgM3mqTrC5
pZ0RaegsyT2uY/smw+1e3M0zcaxENbH4Ftf70bO+MMW34LRTIDKw7B6OMtcQTK6F
p+432AUXnpHmTizLjXWpl5ep7aV0cWUMEoNHwpncNC330rLyxJrgCH7adyF3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUrIHQ+KxJKrrlaTCCRU8sPAV2m4gwHwYDVR0j
BBgwFoAUjCOQ2IxASj16rNWeO42m94FN9yUwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xOTMvOEMyMzkwRDg4QzQwNEEzRDdBQUNENTlFM0I4REE2Rjc4MTRERjcy
NS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pDT1EySXhBU2oxNnJOV2VPNDJt
OTRGTjl5VS5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE5My84QzIzOTBEODhDNDA0
QTNEN0FBQ0Q1OUUzQjhEQTZGNzgxNERGNzI1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFsWnWUlOhaB
IEH/Yio/vVkMKpAyBxDM1iREtUm/yV92fDC/CQK/pmP+LEkOYm1YfnMTPO2IySrk
nzz7YdSx6JTkqe675PP1BcGtFe+6CIMRCMMpofi8IemaB74X0rHzocJd7fC7gLkN
xypqEeTahX36s45SB4sDa+t9ynLVcIRLXBzjQlvJJbNKIJs93RuhEoV/FENBMEbu
G7y/PT50UPy/dWFriWAq754s5xY6G7NHshNgvKrm9RdGFtkhuVYqSPJwIYaWvt7K
2bNtJfqMZUHDHYlZUvJbwCEuGjzoVLxLiRnLNBT44B3aQWNjmV0bN0On+qpRxgdP
4VzcxQqBEw==
-----END CERTIFICATE-----