Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/201/957FD0FB562156B5819AFCE5032C10483B016CD8.mft
File:                     957FD0FB562156B5819AFCE5032C10483B016CD8.mft (raw, json)
Hash identifier:          Nxf6D8+oS6bKlvVYNKyN7L9uB7kGG/oSZhkRDQv/4wU=
Subject key identifier:   B7:30:F0:DF:BF:86:97:2A:B6:53:A7:8D:CE:26:64:B9:B3:91:B4:95
Authority key identifier: 95:7F:D0:FB:56:21:56:B5:81:9A:FC:E5:03:2C:10:48:3B:01:6C:D8
Certificate issuer:       /CN=957fd0fb562156b5819afce5032c10483b016cd8
Certificate serial:       251EFA5678A347948575AB9C4440C7144A059791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lX_Q-1YhVrWBmvzlAywQSDsBbNg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/201/957FD0FB562156B5819AFCE5032C10483B016CD8.mft
Manifest number:          0446
Signing time:             Fri 20 Oct 2023 01:01:46 +0000
Manifest this update:     Fri 20 Oct 2023 00:56:46 +0000
Manifest next update:     Sat 21 Oct 2023 03:48:46 +0000
Files and hashes:         1: 3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa (hash: erbhmrC0zUWVvyWqOf+2U2ZDOmzFKhAqq6NnX+CMqAA=)
                          2: 957FD0FB562156B5819AFCE5032C10483B016CD8.crl (hash: iSyvqZrwD9FGFHY/mUHXjAVRYr/AemR/Kore8G5Eog4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1e:fa:56:78:a3:47:94:85:75:ab:9c:44:40:c7:14:4a:05:97:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957fd0fb562156b5819afce5032c10483b016cd8
        Validity
            Not Before: Oct 20 00:56:46 2023 GMT
            Not After : Oct 21 03:48:46 2023 GMT
        Subject: CN=B730F0DFBF86972AB653A78DCE2664B9B391B495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:af:0f:ea:a9:02:36:ec:71:d5:d8:ed:56:f9:
                    11:8a:0b:fd:40:c8:d4:4e:f8:0c:4f:8f:93:2b:69:
                    5b:f5:5a:27:4c:02:e9:a8:6c:1f:12:b0:6b:6e:11:
                    ab:27:f7:e5:d4:0f:99:6f:0d:dc:36:a3:a0:3a:a5:
                    6f:5c:12:f5:5d:58:47:7a:30:19:34:43:48:8a:c4:
                    30:a6:2c:b8:51:03:8e:24:f2:12:7b:71:3e:52:8a:
                    5a:59:25:f2:52:b6:7e:5f:41:20:21:d8:28:c8:af:
                    65:42:e2:e0:fc:78:b4:db:ed:40:ca:6a:33:12:8c:
                    66:2d:fa:45:6b:f1:fc:2f:ed:f8:80:c3:81:6c:85:
                    91:e8:d2:cf:e4:a6:35:92:b3:54:43:bc:b2:b0:38:
                    9f:d8:60:8e:da:44:3c:49:f2:cd:e0:99:84:2a:75:
                    19:97:f3:45:6d:dc:f9:59:5e:a1:6d:d7:ac:47:62:
                    d7:2a:3e:bf:05:b4:6d:f9:a4:83:5f:d4:04:f6:64:
                    31:d5:ee:de:7c:04:b1:01:b3:55:3d:45:c7:fe:97:
                    5f:b5:60:2b:35:d4:0e:cd:17:3e:21:49:0c:db:f8:
                    74:31:e6:8c:da:2b:fd:f2:11:e7:35:20:a5:6b:2c:
                    15:f0:ee:cf:f8:da:c0:38:17:0d:71:ab:8e:e1:91:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:30:F0:DF:BF:86:97:2A:B6:53:A7:8D:CE:26:64:B9:B3:91:B4:95
            X509v3 Authority Key Identifier:
                keyid:95:7F:D0:FB:56:21:56:B5:81:9A:FC:E5:03:2C:10:48:3B:01:6C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/201/957FD0FB562156B5819AFCE5032C10483B016CD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lX_Q-1YhVrWBmvzlAywQSDsBbNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/201/957FD0FB562156B5819AFCE5032C10483B016CD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:61:7f:10:47:d4:0e:c8:37:0b:93:b1:d1:a8:61:9a:3c:6f:
         60:c6:48:24:4b:fd:30:44:be:dc:97:a2:54:dd:5a:a6:08:96:
         9b:43:e4:6b:f7:0a:46:cf:e8:fa:e7:ed:10:e7:98:ae:a1:77:
         c0:af:60:48:a9:d4:17:0e:f9:4e:12:7b:d6:b7:69:d8:a1:25:
         d0:13:37:d9:c1:d9:d2:a5:d7:0d:65:f8:e9:5e:0e:49:79:f6:
         d9:1e:e9:7d:72:8b:e9:ca:48:32:20:39:3f:02:9b:c4:55:64:
         b9:c0:79:d3:05:b7:d5:bf:cf:c6:57:e1:f1:a4:56:f9:f6:d7:
         9a:ee:8a:a0:b7:30:a9:bb:39:63:84:19:1c:b7:e9:a5:89:0a:
         12:d7:eb:b3:a9:5e:4a:ad:8a:73:21:a0:2c:b7:32:a9:b9:ad:
         8b:1a:b9:fe:1e:6f:79:f0:55:ec:7c:ce:80:3e:7e:ff:bd:72:
         bc:c5:ef:d9:1b:cb:e2:d8:26:d3:4b:43:f3:16:d7:01:17:80:
         09:fc:e5:ee:45:d7:c5:e3:4f:d0:b6:52:19:6e:80:24:7e:62:
         2c:7f:04:04:5b:03:82:3b:5c:5e:57:8c:c6:32:31:69:fa:5a:
         25:8c:8f:64:10:4f:65:b7:89:83:51:ad:ba:b3:45:09:28:88:
         d2:91:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----