Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/2404ACA13AEF29525C14D4639D5D93B549830374.mft
File:                     2404ACA13AEF29525C14D4639D5D93B549830374.mft (raw, json)
Hash identifier:          yOs8K7CyGJ1jAA3jIhq0mJXPTJWRNrmZnRYShNfvn4I=
Subject key identifier:   FA:CB:8F:EA:0E:81:E9:76:20:5B:A9:06:8E:70:90:73:31:DC:37:75
Authority key identifier: 24:04:AC:A1:3A:EF:29:52:5C:14:D4:63:9D:5D:93:B5:49:83:03:74
Certificate issuer:       /CN=b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9
Certificate serial:       132A27D9D3630029CF93B94D0523A9F2ABC21DBB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8ac74274-337c-47f6-83af-fa21cf5ab89a/b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/2404ACA13AEF29525C14D4639D5D93B549830374.mft
Manifest number:          08
Signing time:             Sun 10 Dec 2023 19:34:20 +0000
Manifest this update:     Sun 10 Dec 2023 19:29:20 +0000
Manifest next update:     Mon 11 Dec 2023 19:49:20 +0000
Files and hashes:         1: 2404ACA13AEF29525C14D4639D5D93B549830374.crl (hash: cnbGB+ByvqbEMB5P2d7B6bj6iSsq10MY1VQfK/oGA98=)
                          2: 323630323a663963633a3a2f34302d3430203d3e20333938343637.roa (hash: Wo7Q86hDQ0lk64Y0HZX93WOmH9NCJs4vBvUIoyDIjD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2a:27:d9:d3:63:00:29:cf:93:b9:4d:05:23:a9:f2:ab:c2:1d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9
        Validity
            Not Before: Dec 10 19:29:20 2023 GMT
            Not After : Dec 11 19:49:20 2023 GMT
        Subject: CN=FACB8FEA0E81E976205BA9068E70907331DC3775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:9a:7f:5a:d2:d5:3b:71:de:ec:63:f3:08:
                    a9:49:05:29:ee:ba:53:6b:87:40:1d:dc:7a:53:aa:
                    7a:4e:3c:51:9e:33:66:38:81:17:6a:45:ec:2a:79:
                    0a:b7:c0:d8:ef:ad:1d:57:87:1b:12:d9:d2:cd:9f:
                    43:ef:f9:53:27:36:b1:17:8d:16:07:9c:da:fc:40:
                    98:8b:3a:9d:1d:57:19:cd:bc:2b:c5:2b:2e:0e:19:
                    a4:fb:76:6b:48:33:49:2b:23:ec:49:a5:91:ab:17:
                    b7:b7:92:f4:43:0b:b9:02:be:6d:57:b8:db:ab:ff:
                    99:e7:09:12:37:0e:d7:ce:c2:6a:eb:5d:da:59:8e:
                    5d:f0:5a:08:76:26:7f:c0:cb:93:a0:b0:43:77:e9:
                    e1:da:5f:2d:d9:a9:8d:88:8b:8a:6a:40:3a:02:92:
                    fb:bb:78:da:8a:f8:de:0c:57:1f:9f:fd:8c:27:e5:
                    e5:10:89:cc:8f:ab:50:0b:00:89:2c:31:a6:83:8e:
                    8e:f6:b3:84:8f:01:b1:7f:21:82:8e:9d:d5:3e:9f:
                    28:2c:22:c7:16:27:93:7e:3c:10:50:76:f1:ff:a1:
                    ec:51:13:a4:02:04:db:2c:01:39:57:da:5b:be:08:
                    1b:d2:3c:81:4c:aa:af:9d:58:d2:a7:04:a6:2f:59:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CB:8F:EA:0E:81:E9:76:20:5B:A9:06:8E:70:90:73:31:DC:37:75
            X509v3 Authority Key Identifier:
                keyid:24:04:AC:A1:3A:EF:29:52:5C:14:D4:63:9D:5D:93:B5:49:83:03:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/2404ACA13AEF29525C14D4639D5D93B549830374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8ac74274-337c-47f6-83af-fa21cf5ab89a/b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/2404ACA13AEF29525C14D4639D5D93B549830374.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:91:1b:a7:c7:49:aa:47:41:43:8c:c5:6d:83:87:67:09:
         f9:c2:b9:b3:e4:82:0b:cd:42:70:73:4e:56:fc:c1:e8:3a:15:
         4f:ec:d3:e2:fd:6c:d0:94:99:cb:16:e2:27:fb:fa:01:c7:1f:
         02:5e:8f:62:aa:0d:b9:5a:58:5c:40:64:cc:6a:5f:c0:de:3d:
         d4:34:27:15:dd:d4:b9:d9:12:1e:2f:64:a3:93:ca:8d:d2:ba:
         d7:4c:cb:9e:2d:0a:82:43:29:27:27:e3:be:b7:09:5a:b4:1f:
         15:91:ab:cb:40:86:ea:42:9a:9f:5d:b7:9a:c0:44:ab:4a:73:
         f7:f8:ba:18:28:4d:cc:2b:39:10:36:d4:cd:46:c4:60:74:7c:
         bf:1e:ed:76:50:33:9b:36:79:0a:21:e4:9d:2b:61:be:5f:16:
         0a:c2:f1:b0:6a:4e:b1:7f:14:29:6d:cd:60:c4:11:55:81:d6:
         c8:9a:03:36:f5:ea:77:58:67:9a:c1:48:ef:43:00:3d:22:f6:
         5c:70:ab:f7:66:13:eb:43:d6:53:b7:79:ea:72:04:a9:cb:20:
         2c:ee:ff:e6:5f:02:27:4a:d4:d7:59:12:8f:59:e7:41:82:b1:
         3b:3f:16:98:74:fb:e5:06:c1:4b:ae:5b:1a:ec:20:dc:34:19:
         7c:ee:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----