Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft
File:                     32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft (raw, json)
Hash identifier:          lZxcUP72eh8hhFOlSu6XIUWQsxcbflp63S4sMd2htqw=
Subject key identifier:   2F:6A:E9:DA:25:F4:DC:6A:7B:67:0D:3A:CD:F4:A1:3A:F9:F8:68:E5
Authority key identifier: 32:39:8A:14:06:A1:C1:D3:23:CA:63:CB:32:0F:FD:1E:B4:D1:B0:C4
Certificate issuer:       /CN=32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4
Certificate serial:       4E0C89927F1F871FD6B6D0F906BA162C1F7765C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft
Manifest number:          DE
Signing time:             Mon 01 Jul 2024 18:58:26 +0000
Manifest this update:     Mon 01 Jul 2024 18:53:26 +0000
Manifest next update:     Tue 02 Jul 2024 20:52:26 +0000
Files and hashes:         1: 326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa (hash: EzDrSU0tEdoyrWBny4WwvfoAYESt5HomMWAJ483CPZA=)
                          2: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl (hash: HzellSrpZzmhdMQaOwaIcMoHwf60gNAUWKB28lEHt8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0c:89:92:7f:1f:87:1f:d6:b6:d0:f9:06:ba:16:2c:1f:77:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4
        Validity
            Not Before: Jul  1 18:53:26 2024 GMT
            Not After : Jul  2 20:52:26 2024 GMT
        Subject: CN=2F6AE9DA25F4DC6A7B670D3ACDF4A13AF9F868E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:ff:4e:ab:1f:43:cf:cb:bb:00:1f:aa:d9:
                    b9:80:9f:78:73:1b:3a:d8:07:47:07:4d:50:a9:65:
                    52:0e:ac:f8:2f:e1:0b:40:3f:f1:be:7c:05:20:60:
                    ce:17:5f:cc:1e:ff:e6:66:dd:1f:04:4c:db:f9:b9:
                    0a:1f:52:1f:7b:25:20:c5:07:a1:bd:f4:4d:39:7f:
                    e9:13:ad:a5:66:6e:65:71:98:36:f8:3e:d5:3f:07:
                    35:e1:a3:2a:a7:61:bf:1a:28:f5:2e:a2:95:13:64:
                    84:c3:2c:04:0c:9f:59:d4:1c:d9:ef:a0:ff:61:6f:
                    9a:a1:da:fe:74:97:26:04:d6:91:4b:74:80:88:50:
                    fd:44:28:7a:bd:bb:bc:c1:9f:90:cb:7e:e4:db:20:
                    87:93:e9:78:63:25:9e:e4:2e:77:8e:3c:d3:35:26:
                    31:03:4b:03:9b:03:25:68:bb:5e:d4:78:29:fe:7d:
                    cb:75:f7:a7:15:05:97:3d:42:78:66:86:20:e4:9d:
                    e6:80:de:ff:e4:03:ee:2d:3f:09:35:11:f1:4f:db:
                    75:aa:ff:94:21:89:f1:8a:52:50:15:c1:9d:76:e9:
                    fc:46:6f:83:1e:7e:b6:c8:23:64:68:dd:96:43:20:
                    6a:c0:98:f8:69:22:ae:8d:c0:d0:1f:e9:e5:43:cb:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:E9:DA:25:F4:DC:6A:7B:67:0D:3A:CD:F4:A1:3A:F9:F8:68:E5
            X509v3 Authority Key Identifier:
                keyid:32:39:8A:14:06:A1:C1:D3:23:CA:63:CB:32:0F:FD:1E:B4:D1:B0:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:77:ba:35:52:72:e5:81:de:25:24:3b:80:39:3e:7f:b4:72:
         4a:aa:66:88:9c:df:0c:c9:71:09:04:fb:3c:28:66:16:57:5a:
         d0:cb:0e:af:86:37:6b:ba:69:68:a0:24:92:aa:27:f6:2a:bd:
         6c:91:1d:08:44:47:d1:67:d1:8f:19:b8:2d:b8:fc:e1:04:0d:
         5f:cf:84:21:d3:25:e7:45:99:15:6b:81:47:f3:33:4f:f0:47:
         23:96:a0:6e:84:95:9b:28:55:8d:f6:03:b0:13:3c:92:f3:62:
         e9:40:bc:eb:4b:5a:84:bc:1f:16:b0:f4:6f:5a:fd:75:ec:00:
         5c:0c:d5:19:12:d6:d4:57:94:a8:0b:4a:a4:4e:3d:c8:9a:d7:
         0a:80:22:fc:eb:19:5d:b4:a8:4e:e2:2b:5c:99:bd:45:f0:e6:
         11:21:62:2b:84:9e:e7:b3:fe:18:91:83:9c:d8:3e:95:d1:6f:
         d3:2f:9a:c7:5e:6d:e7:f4:c3:c8:be:b1:fa:91:03:53:c8:7e:
         9c:d5:bb:e3:84:40:03:19:32:d2:bc:6e:a4:32:7e:21:bf:d3:
         5b:70:1f:cf:60:1f:47:a4:a8:d7:e3:27:c2:ff:b8:3a:70:32:
         a0:0e:f5:37:27:5d:ee:65:f1:bb:6d:04:90:74:a0:f9:0c:c7:
         15:ea:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----