Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.mft
File:                     8C0E373D1F19183CF1BD8220B14020B8BF2C674D.mft (raw, json)
Hash identifier:          vhx7ydoNAIRZEC58Yb/TQ08LDfQ2CP7Bhdvat1UgE4c=
Subject key identifier:   5C:44:D3:EE:09:1E:B7:44:A0:DC:C3:A4:A8:D8:28:4E:68:5D:66:44
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Certificate issuer:       /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial:       728DE5A30903FD002C8E442F39330B143B12B3EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.mft
Manifest number:          2B
Signing time:             Wed 17 Apr 2024 19:37:06 +0000
Manifest this update:     Wed 17 Apr 2024 19:32:06 +0000
Manifest next update:     Thu 18 Apr 2024 19:53:06 +0000
Files and hashes:         1: 3130332e3132312e34312e302f32342d3234203d3e203439353831.roa (hash: H+dCBuvsAqrurnNpmi2UUC92dlYNjOI8Bi6hBX6segQ=)
                          2: 8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl (hash: VLpVDMyMficDypGhwbFATODM45HhumC3HD+GCn4m8FY=)
                          3: 561FF8005C03415E4FBB365AC43A3BAA57B82416.cer (hash: YYzsa0XGM8vQaZICKtaR23oZqlHf0NXLbapKO1gIhjo=)
                          4: 3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa (hash: ONO8IqEAMlFN6LY66BDsbVYG+zLKhlVwVU/DrWJV+WQ=)
                          5: 3130332e3132312e34322e302f32342d3234203d3e2030.roa (hash: YoHIpqJhHInFg2Ey98fC0JqET9SmPXNxktWxsF16u/0=)
                          6: 3130332e3132312e34302e302f32342d3234203d3e20313938393830.roa (hash: Td1Aq5e78LWTyQnTfe3qrBa02BJ4SiLnn2U3lTefKzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8d:e5:a3:09:03:fd:00:2c:8e:44:2f:39:33:0b:14:3b:12:b3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
        Validity
            Not Before: Apr 17 19:32:06 2024 GMT
            Not After : Apr 18 19:53:06 2024 GMT
        Subject: CN=5C44D3EE091EB744A0DCC3A4A8D8284E685D6644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:ee:8d:44:86:7a:91:42:fa:0e:c7:13:df:
                    6a:e3:13:5a:eb:af:b9:db:14:e9:0f:cf:39:cc:a5:
                    be:84:2c:68:f4:db:f9:e2:43:94:a9:4a:13:b1:a0:
                    60:b2:6f:0b:51:51:c7:4e:16:02:5a:3e:c2:44:64:
                    53:42:cf:8d:d0:a2:b6:2c:56:f3:2f:f1:a0:c1:c3:
                    72:52:73:3f:a5:53:e2:64:c5:f0:71:e4:42:01:7e:
                    f1:71:0f:ee:61:92:87:cd:57:be:26:49:37:a8:7a:
                    84:67:09:07:09:72:45:a9:af:d5:c1:8d:f8:82:7a:
                    b8:1e:09:a8:00:c8:73:10:6a:e8:e7:18:9a:9d:b4:
                    87:2a:b6:3a:26:c3:78:73:47:a0:5c:9c:7a:a9:f3:
                    4d:e4:2a:98:13:e7:a1:e4:1b:97:31:52:20:12:9f:
                    d2:92:2c:ba:68:1c:95:3c:f7:c2:9f:b7:b1:3b:a0:
                    c1:58:d5:d2:75:3c:82:35:aa:18:4d:56:e6:08:92:
                    97:ab:28:a0:b3:9d:34:33:f4:88:02:97:f3:6f:94:
                    4b:56:84:f1:59:99:48:a2:61:2f:5b:b2:25:54:6f:
                    0a:d6:cf:a2:cc:8a:92:96:2c:8c:78:81:20:08:22:
                    8c:10:67:d7:ec:41:b1:1a:74:c0:3c:bc:b3:64:0c:
                    76:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:44:D3:EE:09:1E:B7:44:A0:DC:C3:A4:A8:D8:28:4E:68:5D:66:44
            X509v3 Authority Key Identifier:
                keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7a:07:fc:de:ab:5e:8a:a4:fb:9c:7a:b1:db:14:ba:17:22:
         1d:74:9b:05:6d:eb:8b:f7:fb:33:5b:9d:ac:62:04:e5:5c:d5:
         87:87:18:5d:3f:82:ed:75:e8:02:e9:01:ea:15:0a:02:da:bd:
         11:82:60:3e:19:79:7a:96:36:56:be:1f:9b:46:16:13:78:b4:
         e4:c2:06:d2:5c:ce:07:70:e6:df:00:b1:67:f4:52:f5:48:c6:
         0f:78:1c:7f:3c:eb:0d:ea:9d:c7:07:fd:fa:8c:6f:07:71:53:
         ed:76:e6:39:20:af:90:ed:6f:b1:75:fe:22:7a:b0:73:90:41:
         8b:7d:22:66:a4:bd:a2:79:b0:e9:53:29:9e:4b:ff:95:60:93:
         55:3a:3e:f4:dc:74:d0:13:98:b1:9b:64:ce:e0:3e:c3:c6:15:
         b3:ab:b4:f3:e4:d0:33:05:bd:f8:43:11:55:2f:c3:55:ca:98:
         cf:be:4d:b9:8d:01:87:78:92:95:6b:4a:50:31:a2:2e:76:ff:
         6c:55:6c:95:f6:03:cd:9d:e0:e7:ee:27:b0:d1:cc:41:0c:a3:
         a8:77:28:dc:4d:b4:38:88:7d:b2:b1:af:0b:9a:4d:6c:78:c0:
         03:e7:c3:b1:a0:9c:52:f3:99:22:cd:f5:d0:1f:97:80:74:41:
         eb:01:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----