Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.mft
File:                     ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.mft (raw, json)
Hash identifier:          6Ue1WrL+pJLAwxHndC8CchOXSBCfwN6UgBVWVKk+xZw=
Subject key identifier:   69:99:47:02:CA:09:C3:79:F4:D3:9F:80:4E:40:D8:1F:C4:BA:1D:12
Authority key identifier: AD:BD:0E:EE:5A:7B:09:4B:58:66:AA:5D:A8:44:FF:80:D2:4C:EF:FC
Certificate issuer:       /CN=adbd0eee5a7b094b5866aa5da844ff80d24ceffc
Certificate serial:       31605CE67817E52B0058CD51D81FC31E1DD326F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rb0O7lp7CUtYZqpdqET_gNJM7_w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.mft
Manifest number:          0521
Signing time:             Wed 20 Dec 2023 19:18:42 +0000
Manifest this update:     Wed 20 Dec 2023 19:13:42 +0000
Manifest next update:     Thu 21 Dec 2023 23:03:42 +0000
Files and hashes:         1: ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.crl (hash: TPyuwB4NONuusgfkof2sojtWO/AhZ1G0vavxlSBEALY=)
                          2: 33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa (hash: 5uuO6zWPaY4Ee18cVuXEugAXxR+J43eKU6BYJw2gjtI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:60:5c:e6:78:17:e5:2b:00:58:cd:51:d8:1f:c3:1e:1d:d3:26:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbd0eee5a7b094b5866aa5da844ff80d24ceffc
        Validity
            Not Before: Dec 20 19:13:42 2023 GMT
            Not After : Dec 21 23:03:42 2023 GMT
        Subject: CN=69994702CA09C379F4D39F804E40D81FC4BA1D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d9:ce:d9:fd:40:f0:c9:40:2c:69:d7:d2:0e:
                    3b:91:00:d3:ae:1a:f6:87:01:79:ff:b3:ca:7b:1b:
                    ac:32:a9:c2:d4:99:89:91:09:c4:dc:c3:41:2c:fe:
                    bc:53:d0:99:41:e9:1b:56:b5:93:a1:ff:0e:39:51:
                    b7:9a:c0:f4:8b:a1:88:48:a6:71:b1:1a:d1:8a:30:
                    cf:c5:e4:88:2d:48:2b:1f:33:2a:1a:0c:17:d7:fa:
                    00:86:22:ef:48:21:85:e2:09:19:dc:c4:e7:00:12:
                    21:0a:b0:ab:e3:aa:a1:b1:18:53:a0:c1:07:7b:9d:
                    67:91:79:99:cc:02:df:ef:a0:ed:bb:59:01:d0:51:
                    76:5f:f6:8c:ff:41:45:71:ed:11:4b:65:e6:29:b4:
                    77:2e:74:5c:30:e0:4f:3d:56:bd:db:58:e9:3a:f1:
                    48:e2:99:4b:a3:e9:e3:1c:d5:63:33:82:0a:cf:ca:
                    8a:12:cf:d1:c5:de:ba:42:01:d5:6b:9a:ef:33:3c:
                    ba:84:71:10:4b:cf:e8:1e:ed:19:65:18:ba:1b:44:
                    83:d0:0f:f5:72:43:ff:89:86:e7:f9:a5:71:0c:7a:
                    a6:0d:dc:d7:c1:7a:18:25:98:90:23:d4:da:5c:3e:
                    fb:9a:39:6d:8d:44:ac:00:d2:ff:12:02:fd:fb:ca:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:99:47:02:CA:09:C3:79:F4:D3:9F:80:4E:40:D8:1F:C4:BA:1D:12
            X509v3 Authority Key Identifier:
                keyid:AD:BD:0E:EE:5A:7B:09:4B:58:66:AA:5D:A8:44:FF:80:D2:4C:EF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb0O7lp7CUtYZqpdqET_gNJM7_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:00:06:bc:04:eb:11:0d:2c:a2:c6:42:00:2f:e9:e8:8c:
         71:e6:c9:a2:c6:08:e3:92:aa:87:cb:26:30:44:93:bd:12:fe:
         40:31:a1:61:96:3c:6a:4f:01:44:c4:66:b6:bc:7e:7f:71:b4:
         a0:c9:44:92:93:72:6c:bd:c9:47:03:bf:68:3b:1b:ac:fe:f5:
         30:ad:31:4c:cb:29:68:42:f9:09:59:06:45:13:ba:d1:8b:8b:
         12:04:f2:bf:f3:97:2c:f3:11:57:c4:03:d3:6d:96:be:34:81:
         6f:32:31:60:cd:d6:c3:d2:db:d8:b9:b0:15:ea:85:ce:ba:e5:
         82:4b:07:51:28:4d:92:18:33:d5:a2:e1:a4:22:47:80:00:8f:
         3c:a2:52:4f:be:be:2e:e3:68:a3:b4:2c:b7:48:d6:c1:bc:3d:
         ab:0d:2d:98:18:15:41:6b:12:3a:06:ab:be:ab:c4:18:08:83:
         fe:b1:e2:af:de:cb:81:88:49:d8:12:1d:76:0b:c5:37:d4:bd:
         63:6a:c6:81:a1:c5:d1:4b:b4:f8:a8:51:87:29:08:dc:5c:ea:
         fe:d0:d6:00:54:4e:c6:f9:91:92:b1:09:6b:15:23:21:cd:be:
         c5:9a:7a:99:4b:31:fb:78:cb:f4:8a:86:30:95:55:8f:63:93:
         70:0e:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----