Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21fb547e-2a3d-46a0-a5f2-4edd0950c83c/0/CB0BEA11193C8CD0B740AF2D7770DAE52E6CE076.mft
File:                     CB0BEA11193C8CD0B740AF2D7770DAE52E6CE076.mft (raw, json)
Hash identifier:          EnsLFRvnsg5dnp/4PRalUMHuB+at7from15/Z33QZn4=
Subject key identifier:   03:A2:DF:E8:05:A1:05:47:2C:F7:D5:A5:AE:1E:33:C0:E4:9C:90:61
Authority key identifier: CB:0B:EA:11:19:3C:8C:D0:B7:40:AF:2D:77:70:DA:E5:2E:6C:E0:76
Certificate issuer:       /CN=cb0bea11193c8cd0b740af2d7770dae52e6ce076
Certificate serial:       6C01A5C7A110038834A98044ED1D506595422C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ywvqERk8jNC3QK8td3Da5S5s4HY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21fb547e-2a3d-46a0-a5f2-4edd0950c83c/0/CB0BEA11193C8CD0B740AF2D7770DAE52E6CE076.mft
Manifest number:          12
Signing time:             Sun 31 Mar 2024 10:51:04 +0000
Manifest this update:     Sun 31 Mar 2024 10:46:04 +0000
Manifest next update:     Mon 01 Apr 2024 12:10:04 +0000
Files and hashes:         1: AS202197.asa (hash: s1XxY489D39Rxk0y0LtnkmxZ0ABqwgJYuBe01YuJxDE=)
                          2: CB0BEA11193C8CD0B740AF2D7770DAE52E6CE076.crl (hash: LQdL3INvj5oyNFOLyT6k7kdEU9tiNsn3ait/xKqe//E=)
                          3: AS48752.asa (hash: rIB4oklrHQjKv/Ss7t8X0tUJdqYix7lOk/JIG9Br1rY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:01:a5:c7:a1:10:03:88:34:a9:80:44:ed:1d:50:65:95:42:2c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb0bea11193c8cd0b740af2d7770dae52e6ce076
        Validity
            Not Before: Mar 31 10:46:04 2024 GMT
            Not After : Apr  1 12:10:04 2024 GMT
        Subject: CN=03A2DFE805A105472CF7D5A5AE1E33C0E49C9061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:4f:97:a6:94:43:af:87:c6:1d:57:d9:fa:
                    5e:cd:ec:2a:54:b8:0c:71:a8:c8:e2:54:d3:ab:00:
                    a1:e1:bc:93:83:41:bd:28:87:b3:1b:03:ae:65:3b:
                    4f:9b:84:85:c9:9c:d6:56:08:ef:46:65:7b:e1:d7:
                    38:55:71:e4:e1:ee:0d:22:89:48:97:eb:1b:c9:d6:
                    80:ff:e0:28:03:bf:48:a6:91:1c:62:38:53:f1:75:
                    58:23:f8:e6:92:b4:47:1d:91:ac:46:fb:2b:0d:ca:
                    51:fa:70:75:28:aa:ab:e1:1e:31:70:7f:07:f3:a4:
                    99:51:e8:5f:2e:fe:36:2d:27:7c:91:8d:72:ab:ff:
                    ea:c3:3b:0c:7a:d0:81:d3:d7:78:d7:23:d9:d3:47:
                    9f:fa:d6:70:fd:22:09:bb:ef:b1:37:59:04:5a:91:
                    33:f3:07:fc:20:86:9e:61:af:a3:0c:ce:70:94:67:
                    cf:2c:c1:e8:45:af:c4:cc:21:0d:c3:a1:ae:71:be:
                    dc:69:e0:fb:fe:d9:39:21:12:60:b0:41:17:14:8e:
                    eb:26:cc:14:c8:4d:b0:7f:de:3d:4c:47:7f:75:23:
                    e1:34:2b:b6:a1:d0:25:48:99:3e:0c:ae:19:4a:52:
                    06:35:f6:f7:fb:d4:8d:0c:5a:4b:41:9d:e9:6c:2f:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:DF:E8:05:A1:05:47:2C:F7:D5:A5:AE:1E:33:C0:E4:9C:90:61
            X509v3 Authority Key Identifier:
                keyid:CB:0B:EA:11:19:3C:8C:D0:B7:40:AF:2D:77:70:DA:E5:2E:6C:E0:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21fb547e-2a3d-46a0-a5f2-4edd0950c83c/0/CB0BEA11193C8CD0B740AF2D7770DAE52E6CE076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywvqERk8jNC3QK8td3Da5S5s4HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21fb547e-2a3d-46a0-a5f2-4edd0950c83c/0/CB0BEA11193C8CD0B740AF2D7770DAE52E6CE076.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d3:c4:f6:14:09:70:cb:c7:85:d7:59:b2:1a:05:20:e5:74:
         1d:a9:9d:99:84:55:77:e5:71:70:0c:cf:fc:b6:13:1a:d4:bd:
         bc:51:1a:dd:9d:7e:32:b6:51:8a:35:bd:9c:5b:c5:3c:3e:40:
         1c:dc:77:1e:59:d0:81:0a:d2:e9:e3:81:bf:97:90:6b:17:ee:
         4c:2a:96:c7:09:5d:df:28:bf:8c:95:63:46:c2:5a:05:f4:c0:
         1e:9a:e5:84:01:d3:be:07:6b:7a:d2:60:6c:59:89:dc:98:93:
         94:71:9c:01:c5:ed:4b:1b:79:ce:a5:a3:86:d1:59:5c:5a:fb:
         70:db:03:63:27:85:bc:3c:fa:f5:20:21:9f:96:0c:32:ac:b8:
         04:aa:59:ff:df:84:6d:33:2c:57:b2:43:df:4f:fa:cd:fb:6b:
         2c:8d:25:7d:a6:7c:81:50:6c:3f:4c:82:3a:3b:30:f6:a6:db:
         c1:14:b7:5a:ee:bb:cf:10:e8:4b:9a:48:f0:1c:29:c6:f1:34:
         8f:69:3b:9d:1b:d5:4e:c9:8e:88:f6:e3:1f:1d:f4:dd:92:77:
         d9:25:6c:77:33:6f:c6:ae:0e:18:c1:5e:8b:ee:c0:7e:66:52:
         93:93:3c:d7:20:0c:7e:fd:fc:9a:44:d9:ab:11:7e:dd:fa:f0:
         90:e5:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----