Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/C357C8A01C922B6E9308C3BF953BAA5077244457.mft
File:                     C357C8A01C922B6E9308C3BF953BAA5077244457.mft (raw, json)
Hash identifier:          RFlvanAahPqXE8m+Q+YXZowAYUDj0bWi8e98NCMr5Ok=
Subject key identifier:   8C:33:30:94:BB:26:1A:F6:2E:C1:68:9F:03:FB:11:7F:01:44:48:FB
Authority key identifier: C3:57:C8:A0:1C:92:2B:6E:93:08:C3:BF:95:3B:AA:50:77:24:44:57
Certificate issuer:       /CN=c357c8a01c922b6e9308c3bf953baa5077244457
Certificate serial:       20F790982EA0D32D32B8B4538181FC626C736868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1fIoBySK26TCMO_lTuqUHckRFc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/C357C8A01C922B6E9308C3BF953BAA5077244457.mft
Manifest number:          0525
Signing time:             Thu 21 Dec 2023 13:17:22 +0000
Manifest this update:     Thu 21 Dec 2023 13:12:22 +0000
Manifest next update:     Fri 22 Dec 2023 14:26:22 +0000
Files and hashes:         1: 34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa (hash: 6ZeEx+9Hub//iLLQSKWaLJ7fJH4EZY5MFEFeyCnDC7I=)
                          2: C357C8A01C922B6E9308C3BF953BAA5077244457.crl (hash: xsslYS6GxOPxt9GfsQYjpuQy5nRTMe8jPzdQNW8S8mg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f7:90:98:2e:a0:d3:2d:32:b8:b4:53:81:81:fc:62:6c:73:68:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c357c8a01c922b6e9308c3bf953baa5077244457
        Validity
            Not Before: Dec 21 13:12:22 2023 GMT
            Not After : Dec 22 14:26:22 2023 GMT
        Subject: CN=8C333094BB261AF62EC1689F03FB117F014448FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:04:05:0b:ec:04:84:f6:62:df:fb:47:35:
                    59:e9:6a:7a:43:71:06:74:b4:28:03:b1:c3:d1:fa:
                    42:a0:0b:f1:d5:57:94:c9:85:b7:a2:b0:6f:b6:d5:
                    e6:6b:23:cd:0e:95:3a:f9:80:6d:b4:c4:22:c7:ba:
                    56:54:ac:07:0c:3c:29:d7:35:7e:a3:df:25:5f:d5:
                    3f:7c:5d:6e:98:ee:b5:fe:6f:d1:15:e7:33:1e:b3:
                    8f:80:6b:d2:0c:91:a6:aa:3b:a8:94:aa:f1:74:95:
                    8c:f4:d7:b2:e3:c8:2f:76:fb:83:aa:0f:b8:39:30:
                    28:df:c0:fd:17:fc:ff:a1:4c:46:08:2f:46:4d:d9:
                    fe:e1:1a:a3:5c:f5:5a:19:cc:f1:dc:27:b0:4b:06:
                    19:82:5a:7f:8e:61:0c:a5:5c:4f:e0:b0:70:77:3e:
                    76:16:e9:3e:55:bd:f3:ad:4d:b0:5d:8d:80:ed:e7:
                    28:1b:57:a4:a9:01:18:aa:2d:b0:d6:7c:b7:73:fc:
                    92:f7:f1:a6:f1:01:1a:a3:05:16:c0:cd:68:fe:0d:
                    c6:67:a7:c3:32:7b:5b:7f:46:7f:36:de:85:82:13:
                    b1:5a:d7:96:7e:09:a1:57:28:dc:37:34:a3:40:48:
                    32:57:e7:90:54:92:14:15:dc:61:8b:5f:1f:3d:16:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:33:30:94:BB:26:1A:F6:2E:C1:68:9F:03:FB:11:7F:01:44:48:FB
            X509v3 Authority Key Identifier:
                keyid:C3:57:C8:A0:1C:92:2B:6E:93:08:C3:BF:95:3B:AA:50:77:24:44:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/C357C8A01C922B6E9308C3BF953BAA5077244457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1fIoBySK26TCMO_lTuqUHckRFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/C357C8A01C922B6E9308C3BF953BAA5077244457.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d4:b1:ef:71:78:2e:59:1a:d3:e1:5e:8c:bd:0b:05:a4:34:
         6e:36:5f:dd:af:b4:5c:39:5d:46:eb:ba:96:94:d8:89:0d:d6:
         3c:89:b7:35:d3:34:7c:21:54:42:d5:f9:14:26:f0:7a:9c:d7:
         a8:c7:5c:96:45:99:a1:47:3a:45:2a:d4:c4:d4:cb:68:fd:cb:
         1a:21:c7:1b:2f:b9:3f:17:8a:04:5f:8d:d2:ed:0f:40:eb:29:
         a8:3f:83:94:31:37:3d:22:a1:bb:55:16:c1:2f:c0:09:c6:8b:
         94:4b:23:f7:a9:22:d0:d9:5c:70:7c:4c:31:f1:af:50:1c:ea:
         6b:c3:99:2b:a7:18:ff:b8:90:f2:b5:95:cc:07:4b:c8:ca:44:
         aa:70:05:97:ad:1c:e4:28:e6:d4:55:ef:33:1c:a3:68:23:a5:
         d7:51:3f:12:08:4a:6c:f6:ed:be:d0:17:8d:3b:4f:6d:92:da:
         d0:c5:13:81:6b:59:b9:f6:df:bc:7c:12:a6:38:79:71:32:99:
         b3:85:5f:8e:10:29:10:2d:8f:10:3d:b6:14:59:89:1e:74:fc:
         a9:b8:9b:c8:de:40:c6:9b:be:57:ec:b1:25:da:26:f0:eb:d5:
         66:5c:46:82:2f:34:25:4c:8a:f4:4b:86:b9:5a:a1:ca:a6:62:
         e1:85:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----