Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/1/CCC18E0796F76A771FB70F77296107D26D901AEC.mft
File:                     CCC18E0796F76A771FB70F77296107D26D901AEC.mft (raw, json)
Hash identifier:          3e/+FASIt286BUPUyw5eS7dFuGgaC0pmV79imgkY56M=
Subject key identifier:   30:EE:93:04:05:59:A5:4D:A2:AD:21:DC:E8:05:59:5A:00:1B:43:98
Authority key identifier: CC:C1:8E:07:96:F7:6A:77:1F:B7:0F:77:29:61:07:D2:6D:90:1A:EC
Certificate issuer:       /CN=ccc18e0796f76a771fb70f77296107d26d901aec
Certificate serial:       5B72A127875003A1EA9BBF6F18FF675FF6113011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMGOB5b3ancftw93KWEH0m2QGuw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/1/CCC18E0796F76A771FB70F77296107D26D901AEC.mft
Manifest number:          02
Signing time:             Tue 23 Jul 2024 19:49:43 +0000
Manifest this update:     Tue 23 Jul 2024 19:44:43 +0000
Manifest next update:     Wed 24 Jul 2024 23:02:43 +0000
Files and hashes:         1: AS200160.asa (hash: 59It0dYVZ7tKrFdjV8srpXgbqhiJHe18fsnKXqWjfTM=)
                          2: CCC18E0796F76A771FB70F77296107D26D901AEC.crl (hash: 54x13WhSc25GC1IB9xwtziN2Y3e/1WbXZCo3pmg14/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:72:a1:27:87:50:03:a1:ea:9b:bf:6f:18:ff:67:5f:f6:11:30:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc18e0796f76a771fb70f77296107d26d901aec
        Validity
            Not Before: Jul 23 19:44:43 2024 GMT
            Not After : Jul 24 23:02:43 2024 GMT
        Subject: CN=30EE93040559A54DA2AD21DCE805595A001B4398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:d0:08:e9:76:75:22:b9:fa:2e:94:17:0f:
                    13:1f:7e:df:91:39:57:81:91:47:67:c2:3c:4a:1b:
                    33:de:f8:1c:05:ae:b8:42:8d:fb:19:0c:04:ff:93:
                    6a:bf:fd:b7:9d:54:0d:b2:59:fb:fb:60:02:ac:d8:
                    c0:f6:93:6c:42:ed:95:29:7d:f0:50:e3:8f:3a:2d:
                    85:87:39:b1:82:f0:a6:d7:05:e5:77:c1:8f:5e:1f:
                    e9:f0:c0:14:a3:0a:b8:65:85:b8:39:9b:f2:71:64:
                    11:1c:e6:46:71:7e:71:27:40:69:cf:b8:17:95:eb:
                    b0:64:18:63:55:26:9a:a2:26:e8:76:68:c3:b5:c5:
                    13:58:c6:f9:11:91:e2:fc:b5:24:ac:a0:ad:af:ab:
                    98:13:08:c9:ac:9f:4c:2f:6f:01:54:76:bf:c1:b6:
                    c1:36:66:6a:e2:75:e4:a1:3a:b3:9c:21:44:96:fc:
                    5e:1a:0c:75:80:f2:d2:14:ed:8e:cb:ee:2b:93:20:
                    0b:05:3a:77:de:c2:ca:83:85:27:0b:0e:0c:81:b3:
                    a8:47:7e:f6:ad:e6:2c:1c:38:3b:bd:23:d7:37:c1:
                    3c:da:80:87:93:2f:27:73:45:66:ea:d0:25:8a:d7:
                    88:a3:19:ef:dd:73:86:e7:75:83:45:f3:1b:af:47:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EE:93:04:05:59:A5:4D:A2:AD:21:DC:E8:05:59:5A:00:1B:43:98
            X509v3 Authority Key Identifier:
                keyid:CC:C1:8E:07:96:F7:6A:77:1F:B7:0F:77:29:61:07:D2:6D:90:1A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/1/CCC18E0796F76A771FB70F77296107D26D901AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMGOB5b3ancftw93KWEH0m2QGuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/1/CCC18E0796F76A771FB70F77296107D26D901AEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:8d:c3:63:35:07:13:38:7b:3a:c7:ff:23:10:60:b9:68:
         fa:80:68:a1:19:ef:5d:75:c6:2d:bf:70:f9:07:5b:c3:2d:49:
         78:be:a6:94:f7:14:3a:96:36:51:e2:b9:6a:cf:34:90:5d:96:
         09:54:e8:11:2b:a1:8a:94:65:20:b0:62:31:5d:ab:c7:d4:b3:
         5b:8d:b4:f2:a9:7a:a9:f5:8b:49:98:83:7c:c7:94:b3:41:10:
         92:b9:8f:ae:ff:6b:b2:14:a7:72:8d:72:65:70:19:f1:d1:6e:
         19:6d:0f:19:ae:46:78:ed:32:15:e2:82:f3:9d:33:7f:ca:d2:
         2f:c5:90:96:7f:a7:07:8b:e2:65:63:e5:76:7b:63:58:5f:69:
         1a:04:8a:4d:aa:d4:a0:bf:5a:65:97:47:b4:83:c9:4b:21:af:
         b3:1a:d1:19:d5:31:ef:5e:af:90:1b:d6:ec:76:87:e2:24:bb:
         ad:ae:f7:a5:cb:28:ba:39:6c:34:0e:e3:6e:7d:e0:8f:2f:07:
         73:2c:1c:57:4a:28:a0:da:fc:3a:99:3c:88:7d:8b:a2:f9:b2:
         84:62:fa:8c:4c:eb:3e:16:1f:3c:f4:a7:bb:a9:aa:9f:41:e5:
         7b:f3:7e:d7:36:73:20:dc:fa:df:7e:0a:e4:5d:e1:bb:c2:c2:
         0c:9d:39:8d
-----BEGIN CERTIFICATE-----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