Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0727e632-ac9d-4ae0-a720-9a5884b0b029/0/A396FAA0B07A3C7C49575B8C31EBEC377B86F77E.mft
File:                     A396FAA0B07A3C7C49575B8C31EBEC377B86F77E.mft (raw, json)
Hash identifier:          FrrETyAKrwO9GuNGQz6z/2j5Fb3zH0tmWAYrDnBqhsI=
Subject key identifier:   4D:B3:31:7D:E6:DB:A9:7D:68:58:7F:69:27:37:DC:8B:EF:9D:73:84
Authority key identifier: A3:96:FA:A0:B0:7A:3C:7C:49:57:5B:8C:31:EB:EC:37:7B:86:F7:7E
Certificate issuer:       /CN=a396faa0b07a3c7c49575b8c31ebec377b86f77e
Certificate serial:       3AC827ACBE28D77C3CB13F79A49F2DBA4EFB3701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o5b6oLB6PHxJV1uMMevsN3uG934.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0727e632-ac9d-4ae0-a720-9a5884b0b029/0/A396FAA0B07A3C7C49575B8C31EBEC377B86F77E.mft
Manifest number:          82
Signing time:             Mon 05 Jun 2023 08:10:19 +0000
Manifest this update:     Mon 05 Jun 2023 08:05:19 +0000
Manifest next update:     Tue 06 Jun 2023 10:45:19 +0000
Files and hashes:         1: A396FAA0B07A3C7C49575B8C31EBEC377B86F77E.crl (hash: VO9vsjCJFwE372mVSlL2tSZ3YlNHR94MRLkBe+ufTjw=)
                          2: 39312e3233332e3139382e302f32342d3234203d3e203631333137.roa (hash: Pd0o/9S5T9DeI3DTlEQhKKBn4wHO4Q92O87hDC6YjPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c8:27:ac:be:28:d7:7c:3c:b1:3f:79:a4:9f:2d:ba:4e:fb:37:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a396faa0b07a3c7c49575b8c31ebec377b86f77e
        Validity
            Not Before: Jun  5 08:05:19 2023 GMT
            Not After : Jun  6 10:45:19 2023 GMT
        Subject: CN=4DB3317DE6DBA97D68587F692737DC8BEF9D7384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:b0:98:63:da:4b:0a:b7:a2:86:d0:4e:4c:
                    79:48:9b:fa:46:11:59:8d:84:ed:88:f2:0f:14:67:
                    3a:bb:b7:92:90:bb:2e:f2:5d:d2:67:cf:b9:bc:e0:
                    9a:5c:cb:35:ad:e6:a3:ec:5c:dd:3e:cb:85:83:0e:
                    a8:7d:99:56:06:ba:cf:6d:3e:08:c0:9c:ce:dc:c6:
                    02:e9:dc:f7:46:c7:bf:c4:0b:0b:c7:fb:89:09:ef:
                    52:ad:16:eb:90:ce:03:f5:2c:90:9b:b0:8d:c3:0e:
                    25:4e:ea:7b:32:6c:8f:fa:7d:d6:fb:ba:e8:56:ac:
                    ff:82:3c:1f:a0:38:01:b0:f9:79:81:4f:89:58:23:
                    0d:fe:b9:7a:7c:03:c3:91:7c:82:7c:cf:a0:c0:5d:
                    33:69:8d:69:76:6d:40:cd:86:e5:bd:50:5e:3c:82:
                    a6:69:e7:00:f7:2a:1a:c7:3e:54:c8:66:ef:85:bd:
                    b0:b9:9a:0b:5d:55:57:fa:00:02:f5:9c:41:ee:60:
                    ed:c0:66:3c:b8:9e:5d:26:76:00:a4:0d:5f:46:6c:
                    96:49:04:c0:ef:48:ea:57:f3:ad:95:8d:12:94:da:
                    1a:61:c1:f5:f1:19:f1:53:0e:21:21:ca:e7:9c:b4:
                    5f:9c:29:95:5d:6b:f7:17:13:4c:be:ae:93:c1:8f:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B3:31:7D:E6:DB:A9:7D:68:58:7F:69:27:37:DC:8B:EF:9D:73:84
            X509v3 Authority Key Identifier:
                keyid:A3:96:FA:A0:B0:7A:3C:7C:49:57:5B:8C:31:EB:EC:37:7B:86:F7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0727e632-ac9d-4ae0-a720-9a5884b0b029/0/A396FAA0B07A3C7C49575B8C31EBEC377B86F77E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5b6oLB6PHxJV1uMMevsN3uG934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0727e632-ac9d-4ae0-a720-9a5884b0b029/0/A396FAA0B07A3C7C49575B8C31EBEC377B86F77E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:85:b7:4e:9f:20:35:88:76:75:18:fe:71:f3:2c:ae:91:
         cd:46:33:ed:28:bc:8a:65:9a:76:ff:f7:ed:93:95:a1:2e:3e:
         59:3b:cc:ec:f3:78:90:af:ba:5f:45:3c:d6:4b:3e:7e:40:b9:
         05:3c:2e:cd:db:c4:b1:d6:aa:77:ab:d9:1d:13:99:44:dd:bd:
         30:b7:92:02:f3:69:e0:9c:02:31:87:26:77:b9:86:53:ab:4b:
         44:0b:f2:63:48:75:8d:21:8f:08:7c:69:e2:22:ca:df:11:cd:
         7d:3f:1e:f9:bc:d3:7a:1f:40:41:eb:d4:79:c3:8b:a4:c3:09:
         4b:ce:42:88:2a:83:3d:cb:fc:37:33:7b:cc:09:c2:05:81:e2:
         22:89:b5:3c:97:ed:af:c8:bf:bf:90:78:e0:a0:a5:52:d4:30:
         1c:1e:f6:97:9f:98:37:7c:c2:74:c5:d9:ef:e7:be:57:1f:6a:
         46:cc:42:6e:ad:5d:ad:5d:f8:0c:95:6c:80:bf:fc:60:00:f5:
         68:dd:4f:ab:96:cc:ec:86:77:94:28:97:89:a7:e7:70:86:51:
         2b:2d:4b:e7:64:df:2b:37:c1:cc:3c:33:78:a7:41:97:af:a9:
         2d:44:20:07:7b:f5:95:c6:a3:06:b8:36:7e:ee:35:4b:0c:85:
         23:e5:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----