Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/82BC47E7793778A67B8D3CB7167E6352878CCF7F.mft
File:                     82BC47E7793778A67B8D3CB7167E6352878CCF7F.mft (raw, json)
Hash identifier:          a8ayQX2Lv9dZg2pZIao46BnMaJaVBH7TzNn6WtFJ1w8=
Subject key identifier:   8A:61:33:74:59:5D:32:C7:87:78:35:1F:20:AF:AF:0A:B7:83:87:98
Authority key identifier: 82:BC:47:E7:79:37:78:A6:7B:8D:3C:B7:16:7E:63:52:87:8C:CF:7F
Certificate issuer:       /CN=82bc47e7793778a67b8d3cb7167e6352878ccf7f
Certificate serial:       6CB09732DF852790E70461D6AD5D190C21AB15FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grxH53k3eKZ7jTy3Fn5jUoeMz38.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/82BC47E7793778A67B8D3CB7167E6352878CCF7F.mft
Manifest number:          0522
Signing time:             Thu 21 Dec 2023 12:37:13 +0000
Manifest this update:     Thu 21 Dec 2023 12:32:13 +0000
Manifest next update:     Fri 22 Dec 2023 15:49:13 +0000
Files and hashes:         1: 3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa (hash: kjzjZPM8c7EjP8Mz4EUV5XSebMh0glWvNWNqTyiSjRY=)
                          2: 82BC47E7793778A67B8D3CB7167E6352878CCF7F.crl (hash: 3oAqbT31Zi9uUx5rZ1hsaDa+BTqjOt9U5xN0cHuBC4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b0:97:32:df:85:27:90:e7:04:61:d6:ad:5d:19:0c:21:ab:15:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82bc47e7793778a67b8d3cb7167e6352878ccf7f
        Validity
            Not Before: Dec 21 12:32:13 2023 GMT
            Not After : Dec 22 15:49:13 2023 GMT
        Subject: CN=8A613374595D32C78778351F20AFAF0AB7838798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:31:e0:6b:21:61:98:3b:de:8f:03:04:b2:
                    6b:9c:87:e9:67:a6:13:15:d7:09:ee:25:9d:73:5b:
                    71:63:e4:aa:55:25:7a:54:ff:b1:90:b4:3e:fb:c6:
                    52:14:29:4b:7b:d9:9e:e9:fa:11:c4:47:b2:ef:93:
                    80:47:47:33:35:c4:14:1e:5b:05:56:56:f8:4f:49:
                    cd:6e:5c:44:92:4a:74:54:5c:7e:c0:a9:90:56:62:
                    39:33:d7:6b:e5:aa:cd:3a:6c:9e:e1:3b:ea:79:b3:
                    6b:99:a8:d9:4e:d8:be:e0:18:76:33:8c:66:29:72:
                    f9:be:4e:19:cf:f2:dd:52:33:32:53:74:00:ed:35:
                    a8:c6:da:9a:01:fd:5b:7b:95:58:a0:f4:d5:4c:9e:
                    72:a6:ac:13:8c:68:7d:cb:b7:21:08:fb:c4:97:06:
                    99:11:89:54:42:9c:c5:98:58:a6:09:a7:06:56:8f:
                    6c:b0:59:7d:a9:3c:ee:26:9d:37:01:7e:04:d6:cc:
                    f6:67:b3:76:c5:f9:90:19:3d:0a:b0:d2:63:25:5d:
                    61:42:c3:a8:be:71:8e:93:1c:a6:3b:2a:a3:77:99:
                    d9:06:1e:ce:b8:13:52:7d:f1:da:4f:68:6a:ce:fc:
                    5c:96:e2:db:48:1a:e8:f7:a2:d2:f8:0d:53:ac:0f:
                    26:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:61:33:74:59:5D:32:C7:87:78:35:1F:20:AF:AF:0A:B7:83:87:98
            X509v3 Authority Key Identifier:
                keyid:82:BC:47:E7:79:37:78:A6:7B:8D:3C:B7:16:7E:63:52:87:8C:CF:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/82BC47E7793778A67B8D3CB7167E6352878CCF7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxH53k3eKZ7jTy3Fn5jUoeMz38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/82BC47E7793778A67B8D3CB7167E6352878CCF7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c8:e1:a4:fd:d9:59:39:80:6f:45:0f:d8:9d:d0:09:10:d4:
         3f:07:cc:e0:90:35:44:26:65:96:8c:dd:b6:93:a7:60:ec:e8:
         cd:f6:88:d7:6c:d2:a0:50:03:6f:1e:91:01:3d:46:67:92:83:
         61:c9:5e:3a:e2:6c:ca:2f:98:d3:85:78:02:94:0c:85:03:23:
         08:91:e4:fc:ce:d0:1a:e8:a0:68:b0:23:e4:e6:49:73:9a:f4:
         8c:92:f5:ba:bc:69:92:bc:f3:07:99:3e:7c:95:ba:8f:09:2c:
         63:c0:8a:92:d7:f7:3e:a1:30:c5:9f:00:63:ed:ed:cf:15:96:
         49:ef:ef:60:40:ab:71:5c:6b:03:6c:02:5e:af:40:c1:0f:dd:
         a8:5c:7d:63:f3:7a:c8:58:fa:88:68:87:42:29:f9:db:1e:c0:
         c2:72:b7:8b:8e:f8:17:9a:9a:0e:70:2d:c7:d3:81:07:cd:d5:
         b4:c7:69:3d:86:af:36:08:d6:fd:89:29:55:7c:b3:c5:21:22:
         98:0c:b7:07:b4:62:f8:b9:19:6b:f3:a1:a4:f8:84:b6:1c:ba:
         39:a8:2a:6b:c0:10:f9:0f:d0:70:bb:3a:e7:81:9e:c0:94:f5:
         8d:9e:34:41:92:25:4f:f0:d9:e7:5b:29:6f:14:42:cc:e5:69:
         29:13:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----