Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.mft
File:                     F6253299001F2D1A01A517056CD577F41C34EB71.mft (raw, json)
Hash identifier:          IQx0XtwKQ/LxlIqvCUoAsyYmIk927t4xN7rzJRkskrI=
Subject key identifier:   2F:93:57:1F:E2:55:0C:C1:C1:01:29:AD:07:B3:A7:25:3F:BE:49:19
Authority key identifier: F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
Certificate issuer:       /CN=f6253299001f2d1a01a517056cd577f41c34eb71
Certificate serial:       4A1D355653F4605C923A4905787B5975A5257EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.mft
Manifest number:          0161
Signing time:             Mon 11 Dec 2023 11:40:59 +0000
Manifest this update:     Mon 11 Dec 2023 11:35:59 +0000
Manifest next update:     Tue 12 Dec 2023 14:23:59 +0000
Files and hashes:         1: F6253299001F2D1A01A517056CD577F41C34EB71.crl (hash: eGNQ7pu5tcPq1hKD6U9QurSq+M1oSF6sQFYcxs25GEQ=)
                          2: 3231322e31382e3131342e302f32342d3234203d3e20323136343433.roa (hash: rvIUEqP3IgcgSFiV9f2Y1e15KYui+ePrlN4RgtxWky4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1d:35:56:53:f4:60:5c:92:3a:49:05:78:7b:59:75:a5:25:7e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6253299001f2d1a01a517056cd577f41c34eb71
        Validity
            Not Before: Dec 11 11:35:59 2023 GMT
            Not After : Dec 12 14:23:59 2023 GMT
        Subject: CN=2F93571FE2550CC1C10129AD07B3A7253FBE4919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:de:6d:65:9c:4a:af:cb:b4:ef:03:01:a2:
                    14:2e:6b:2f:bb:9d:95:c5:07:a9:1d:df:8a:cd:75:
                    84:4e:a3:6e:18:5d:cc:d9:15:54:40:34:c5:92:0d:
                    f3:fc:08:95:20:9b:c0:bc:03:a2:ee:a1:28:33:1c:
                    9d:10:e2:34:59:20:20:a4:aa:2e:a2:49:78:56:01:
                    02:a9:ad:36:ae:11:27:c7:39:f3:03:5a:60:6e:b6:
                    be:0e:35:9e:17:ca:9e:66:f0:86:c8:4d:ba:58:a9:
                    0e:42:1c:b9:88:d5:45:20:62:68:1b:43:3a:1c:e3:
                    58:d0:69:8a:63:f9:ed:a6:e6:f4:b1:f7:6c:2f:84:
                    0b:40:fa:34:87:1e:77:fe:8d:d5:bf:24:35:79:20:
                    da:32:b8:67:3b:d1:68:b8:45:ff:ec:b1:7b:e1:69:
                    36:78:8a:93:fe:f1:ca:ce:39:c3:ed:22:06:36:f2:
                    d7:e0:8e:6c:37:f3:ec:95:9e:21:74:58:4f:85:16:
                    c6:7e:0f:73:9e:01:83:0d:92:79:a9:a9:67:f2:bc:
                    43:e2:9d:28:69:80:87:da:6c:41:90:f7:d2:ca:f4:
                    43:36:c7:67:6a:4a:86:90:43:37:7d:4f:ae:33:ad:
                    c4:13:96:42:4c:44:b4:1b:42:71:0c:b6:f5:67:71:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:93:57:1F:E2:55:0C:C1:C1:01:29:AD:07:B3:A7:25:3F:BE:49:19
            X509v3 Authority Key Identifier:
                keyid:F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e1:04:74:b2:f1:77:7c:83:5d:a1:57:bc:e2:81:8f:65:8a:
         60:ba:38:0a:dd:72:60:91:b4:80:56:5d:42:95:dd:18:5e:24:
         87:be:e6:e5:3a:1e:9f:e9:5f:ee:da:b5:5f:5e:ef:3c:29:82:
         ed:46:20:8f:e7:3d:d0:8f:3a:15:45:fd:ec:d0:1b:90:69:2c:
         35:c2:ae:d2:28:3a:7b:7c:74:1b:6a:db:de:10:d1:02:65:2f:
         30:b2:6e:e6:34:90:f3:ed:66:2d:c7:0e:13:bd:c2:41:d0:62:
         90:0a:75:5d:ed:d7:29:50:2a:7e:96:3d:09:e1:26:6a:1d:7d:
         49:a4:07:9b:d5:4c:25:24:5b:25:fe:73:0f:f0:02:93:e1:63:
         b3:5b:86:21:33:b3:78:22:51:28:8b:f8:92:f0:dc:8c:5d:f2:
         09:65:92:df:59:ac:3b:f6:e5:34:27:3e:99:d2:d0:34:19:da:
         b0:06:cc:3f:fb:3d:ee:d2:86:90:7d:2a:9e:78:82:d3:37:6f:
         41:c9:2d:7a:ee:9d:24:0e:08:d6:2e:2f:fd:0f:fb:66:c4:3c:
         e3:14:6b:41:be:b8:25:7c:47:86:f8:f8:c6:26:68:bd:4c:2b:
         1f:53:1b:f5:33:e6:20:d7:e2:0e:17:e8:22:7d:e4:c4:f2:f4:
         7c:e6:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----