Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.mft
File:                     2C68D9AD77CBE389FA0C83BF07FB699791262CCA.mft (raw, json)
Hash identifier:          SPYj2sZpUfsaJeXi+xtjb9XhS5RAk+ZCFzb6KwxHXyY=
Subject key identifier:   C6:AA:AA:DF:33:AD:BE:14:70:AA:7A:2B:0A:42:7D:B1:2C:3F:FD:12
Authority key identifier: 2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
Certificate issuer:       /CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
Certificate serial:       6DC451AB0A4DAF12B10A768A14847D358BE2BACA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.mft
Manifest number:          3A
Signing time:             Fri 24 Nov 2023 17:05:11 +0000
Manifest this update:     Fri 24 Nov 2023 17:00:11 +0000
Manifest next update:     Sat 25 Nov 2023 18:04:11 +0000
Files and hashes:         1: 326131313a323963303a396562653a3a2f34372d3438203d3e203136353039.roa (hash: LtDvF6lcPeJLttOBWT/Zzw0wthPxFB7Ws7QQZAQdc/4=)
                          2: 2C68D9AD77CBE389FA0C83BF07FB699791262CCA.crl (hash: yAgWrjg7hG1nUKEYQBR+/IwjAtKheQ23TJOeF1ROO1E=)
                          3: 326131313a323963303a396562383a3a2f34362d3438203d3e203134363138.roa (hash: JXsI/Tf2TNOclsU3mkY1QZJtKXUVTmqqOU73P1xf4es=)
                          4: 326131313a323963303a396562653a3a2f34372d3438203d3e203134363138.roa (hash: BOkwDEB+/CjY9VI/QCGY1vzOEJalQzjdnoEW+e8/BM4=)
                          5: 326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa (hash: 6183sIw9wws5ZNWgImgpIu//+lR8QUGwdl2AE38GKak=)
                          6: 326131313a323963303a396562383a3a2f34362d3438203d3e203136353039.roa (hash: GnmJFg8T5YeVvkF83LkcvneoqcRFNGIt3mf/l0HXd60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:51:ab:0a:4d:af:12:b1:0a:76:8a:14:84:7d:35:8b:e2:ba:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
        Validity
            Not Before: Nov 24 17:00:11 2023 GMT
            Not After : Nov 25 18:04:11 2023 GMT
        Subject: CN=C6AAAADF33ADBE1470AA7A2B0A427DB12C3FFD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:85:08:b4:d7:e2:98:81:e9:72:09:83:c7:
                    62:f3:58:26:2a:2f:56:dc:1d:fc:61:9a:82:b7:cf:
                    74:2e:44:c3:d3:d7:c5:fe:00:83:f1:70:60:64:e2:
                    33:06:99:0b:84:ed:e0:c6:35:bd:b9:0d:2e:dc:61:
                    df:d7:0f:b0:76:8e:11:e7:8b:4b:bd:27:fc:8a:a3:
                    74:0d:b5:2b:b7:6d:87:07:3d:a0:ac:8e:38:f0:8f:
                    eb:d7:81:e1:ca:64:26:dd:58:63:ef:3f:c1:3e:d4:
                    59:fc:af:81:ba:04:ed:66:f0:dd:c7:6c:0f:0a:ea:
                    92:5f:18:89:5b:72:bf:0c:20:56:9d:c0:1d:89:76:
                    77:da:d1:9f:49:6f:08:80:55:d4:61:e5:4e:e7:85:
                    21:ba:08:fc:ed:f7:51:79:2a:69:96:da:dc:c5:50:
                    3e:0a:5b:da:7f:24:08:78:98:98:a4:cf:b5:1e:76:
                    00:d0:eb:ca:b6:18:28:4c:87:63:58:01:b7:83:30:
                    7a:c0:ed:40:78:fb:42:8d:d2:1d:91:f1:67:12:d1:
                    75:7f:57:bd:b0:46:b5:10:27:54:be:27:21:84:b8:
                    ed:0d:e6:52:21:d9:3b:19:09:28:25:b0:3e:62:18:
                    f2:16:94:a1:43:56:8e:f9:f5:28:46:ec:fb:bd:c1:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:AA:DF:33:AD:BE:14:70:AA:7A:2B:0A:42:7D:B1:2C:3F:FD:12
            X509v3 Authority Key Identifier:
                keyid:2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:85:cc:17:b0:c8:06:44:40:c4:67:0a:a3:be:35:bf:c2:bf:
         93:ee:70:d6:76:be:ca:2b:72:fa:bf:7e:c6:3f:6b:55:c2:68:
         3e:52:6a:74:de:f4:17:d4:41:8c:af:8d:2a:23:f1:79:8f:8b:
         99:f0:5e:a0:26:a9:8f:70:7c:09:b8:b3:5e:5d:c3:67:ec:51:
         3e:b1:79:a4:bf:32:6d:45:ff:61:2c:68:e5:b4:e4:61:8c:51:
         94:d3:24:d5:40:23:d9:ea:75:30:4e:11:63:56:87:63:06:82:
         60:ab:03:39:4e:dc:62:26:62:ae:10:13:c4:60:67:69:7a:75:
         96:0a:d1:b4:2d:ca:d0:b0:d9:ac:5a:94:30:9a:e6:cd:06:b2:
         5d:3a:47:b8:10:26:0d:4d:47:f0:65:6a:81:99:47:f2:88:e0:
         f3:7e:d2:bf:e2:8e:39:81:ca:e5:71:a1:35:56:9a:a0:54:2f:
         c9:47:4a:bd:00:ec:bd:70:10:36:cb:cb:83:cd:21:9a:17:a3:
         7b:88:00:02:67:a9:ce:74:3f:64:e5:8e:62:04:d5:20:dc:4e:
         54:de:3b:ab:f8:40:c5:05:20:3f:32:48:97:95:82:f6:33:c4:
         c7:b8:ac:8b:3b:d2:1e:a0:6c:4a:6b:1b:ed:72:78:95:ac:9e:
         35:62:cc:3a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUbcRRqwpNrxKxCnaKFIR9NYviusowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM2OEQ5QUQ3N0NCRTM4OUZBMEM4M0JGMDdGQjY5OTc5
MTI2MkNDQTAeFw0yMzExMjQxNzAwMTFaFw0yMzExMjUxODA0MTFaMDMxMTAvBgNV
BAMTKEM2QUFBQURGMzNBREJFMTQ3MEFBN0EyQjBBNDI3REIxMkMzRkZEMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRIUItNfimIHpcgmDx2LzWCYq
L1bcHfxhmoK3z3QuRMPT18X+AIPxcGBk4jMGmQuE7eDGNb25DS7cYd/XD7B2jhHn
i0u9J/yKo3QNtSu3bYcHPaCsjjjwj+vXgeHKZCbdWGPvP8E+1Fn8r4G6BO1m8N3H
bA8K6pJfGIlbcr8MIFadwB2Jdnfa0Z9JbwiAVdRh5U7nhSG6CPzt91F5KmmW2tzF
UD4KW9p/JAh4mJikz7UedgDQ68q2GChMh2NYAbeDMHrA7UB4+0KN0h2R8WcS0XV/
V72wRrUQJ1S+JyGEuO0N5lIh2TsZCSglsD5iGPIWlKFDVo759ShG7Pu9wdFDAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUxqqq3zOtvhRwqnorCkJ9sSw//RIwHwYDVR0j
BBgwFoAULGjZrXfL44n6DIO/B/tpl5EmLMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzcvMkM2OEQ5QUQ3N0NCRTM4OUZBMEM4M0JGMDdGQjY5OTc5MTI2MkNDQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYzkwZjRmNi1mMmM0LTQ4
ODItOTFjZi05YjhmMGIzOGQ3ZGEvMi8yQzY4RDlBRDc3Q0JFMzg5RkEwQzgzQkYw
N0ZCNjk5NzkxMjYyQ0NBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS83LzJDNjhEOUFE
NzdDQkUzODlGQTBDODNCRjA3RkI2OTk3OTEyNjJDQ0EubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEhcwX
sMgGREDEZwqjvjW/wr+T7nDWdr7KK3L6v37GP2tVwmg+Ump03vQX1EGMr40qI/F5
j4uZ8F6gJqmPcHwJuLNeXcNn7FE+sXmkvzJtRf9hLGjltORhjFGU0yTVQCPZ6nUw
ThFjVodjBoJgqwM5TtxiJmKuEBPEYGdpenWWCtG0LcrQsNmsWpQwmubNBrJdOke4
ECYNTUfwZWqBmUfyiODzftK/4o45gcrlcaE1VpqgVC/JR0q9AOy9cBA2y8uDzSGa
F6N7iAACZ6nOdD9k5Y5iBNUg3E5U3jur+EDFBSA/MkiXlYL2M8THuKyLO9IeoGxK
axvtcniVrJ41Ysw6
-----END CERTIFICATE-----