Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/DD3DADE2770CFA06E07166668407095F08C274F8.mft
File:                     DD3DADE2770CFA06E07166668407095F08C274F8.mft (raw, json)
Hash identifier:          1P10tu8BLKQTCOnjEjt/FlRsHwzsgrac2xti3mTA32s=
Subject key identifier:   61:9F:C2:80:17:73:32:28:6C:52:77:7E:23:AE:D3:08:99:68:14:AA
Authority key identifier: DD:3D:AD:E2:77:0C:FA:06:E0:71:66:66:84:07:09:5F:08:C2:74:F8
Certificate issuer:       /CN=dd3dade2770cfa06e07166668407095f08c274f8
Certificate serial:       2E8B754BB7F8D09163933954FDFCEAEE345E01EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3T2t4ncM-gbgcWZmhAcJXwjCdPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/DD3DADE2770CFA06E07166668407095F08C274F8.mft
Manifest number:          80
Signing time:             Tue 26 Dec 2023 13:16:02 +0000
Manifest this update:     Tue 26 Dec 2023 13:11:02 +0000
Manifest next update:     Wed 27 Dec 2023 16:55:02 +0000
Files and hashes:         1: 3139342e3134352e3233372e302f32342d3234203d3e20383334.roa (hash: k6ZwleVJ4rM1Pbd1HT8PHUZvFh4+jjJuwIqy33Wxvt0=)
                          2: DD3DADE2770CFA06E07166668407095F08C274F8.crl (hash: A9U2jiPK9CSW2UKDnQcFNfdnAUumytDicojXA85traw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8b:75:4b:b7:f8:d0:91:63:93:39:54:fd:fc:ea:ee:34:5e:01:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd3dade2770cfa06e07166668407095f08c274f8
        Validity
            Not Before: Dec 26 13:11:02 2023 GMT
            Not After : Dec 27 16:55:02 2023 GMT
        Subject: CN=619FC280177332286C52777E23AED308996814AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:7b:6b:2d:d8:16:d8:e2:59:23:91:a7:03:
                    06:23:23:e2:8a:5c:e8:0e:fd:60:13:a3:19:19:fc:
                    de:71:e8:39:b1:13:66:f6:e0:41:a4:d7:d5:3b:75:
                    13:3a:09:29:01:1a:37:43:ca:e9:55:8a:d6:56:81:
                    17:cd:31:bb:6c:30:07:fb:f0:52:c7:bb:eb:e9:dc:
                    97:a8:b6:0b:cc:2b:a8:9e:0f:a6:76:35:12:1c:2d:
                    24:d7:1c:44:c9:8c:a5:74:fa:c0:58:db:d3:c2:c8:
                    03:69:05:15:ac:1e:ca:ec:04:32:b1:a1:dc:4d:5c:
                    b3:56:d1:87:bf:d8:d7:ad:90:ac:0a:66:11:df:91:
                    4c:a1:13:4d:b8:ac:f9:6d:46:a7:ed:e4:9e:80:e6:
                    86:fb:54:a0:fb:3b:1d:21:46:ea:f7:c7:47:8c:23:
                    f7:0f:28:c4:21:0c:e9:5c:82:54:5f:e1:be:ad:ef:
                    9f:7b:a0:70:69:82:b9:11:a4:94:03:7c:97:5d:43:
                    db:7b:61:09:ef:cd:0f:c6:ba:07:d3:1b:11:7c:9c:
                    27:bb:75:e9:c9:0e:dd:37:31:3c:8f:50:e9:59:7e:
                    0d:6c:23:06:d0:25:a1:4b:01:d1:af:41:8b:a5:7f:
                    c8:d3:da:8f:42:2e:4f:98:10:ee:39:47:bd:66:6e:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9F:C2:80:17:73:32:28:6C:52:77:7E:23:AE:D3:08:99:68:14:AA
            X509v3 Authority Key Identifier:
                keyid:DD:3D:AD:E2:77:0C:FA:06:E0:71:66:66:84:07:09:5F:08:C2:74:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/DD3DADE2770CFA06E07166668407095F08C274F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T2t4ncM-gbgcWZmhAcJXwjCdPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/DD3DADE2770CFA06E07166668407095F08C274F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7e:7b:bf:78:14:60:d4:4e:fb:f4:24:b2:b7:82:58:55:aa:
         7e:10:dc:33:c0:6a:4b:63:93:ae:7a:3e:cf:3e:5a:4c:29:12:
         78:be:b6:2d:3a:b1:9a:3d:49:61:53:10:00:e2:0f:5e:b0:17:
         26:44:46:19:2f:76:bc:01:f3:ab:bf:84:4d:1f:22:bb:99:66:
         6f:bd:b9:29:50:97:fc:1b:26:e8:42:dc:0d:00:a8:3c:a4:77:
         c4:f7:36:36:40:19:2b:e4:f0:5c:e6:fa:19:50:ad:b2:6e:cd:
         49:81:c6:ce:8f:34:6c:e7:b4:dd:43:03:46:87:38:b2:8f:84:
         0b:b2:cd:c1:79:0e:ff:c8:18:06:6a:31:9d:ec:4f:d7:0f:d7:
         cc:a5:97:0c:48:70:5e:1e:4c:4f:b9:90:04:b2:8f:ec:b9:2d:
         41:95:22:80:cc:8d:82:14:eb:7a:01:a5:50:4f:71:b9:e8:46:
         fc:e3:f0:e3:cd:3f:ff:8c:63:04:4c:06:9c:c5:31:1f:1b:7b:
         4d:33:49:bd:4b:46:48:b2:fb:66:38:bb:57:09:30:53:f3:af:
         d8:d7:db:e9:fc:ea:69:71:4c:25:68:e4:55:d2:ce:a5:85:fe:
         2d:eb:4d:b4:fe:90:8d:96:ce:9c:2b:d6:40:5d:bd:83:a6:d7:
         41:6b:3b:50
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULot1S7f40JFjkzlU/fzq7jReAeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGQzZGFkZTI3NzBjZmEwNmUwNzE2NjY2ODQwNzA5NWYw
OGMyNzRmODAeFw0yMzEyMjYxMzExMDJaFw0yMzEyMjcxNjU1MDJaMDMxMTAvBgNV
BAMTKDYxOUZDMjgwMTc3MzMyMjg2QzUyNzc3RTIzQUVEMzA4OTk2ODE0QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4HtrLdgW2OJZI5GnAwYjI+KK
XOgO/WAToxkZ/N5x6DmxE2b24EGk19U7dRM6CSkBGjdDyulVitZWgRfNMbtsMAf7
8FLHu+vp3JeotgvMK6ieD6Z2NRIcLSTXHETJjKV0+sBY29PCyANpBRWsHsrsBDKx
odxNXLNW0Ye/2NetkKwKZhHfkUyhE024rPltRqft5J6A5ob7VKD7Ox0hRur3x0eM
I/cPKMQhDOlcglRf4b6t7597oHBpgrkRpJQDfJddQ9t7YQnvzQ/GugfTGxF8nCe7
denJDt03MTyPUOlZfg1sIwbQJaFLAdGvQYulf8jT2o9CLk+YEO45R71mbp+7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUYZ/CgBdzMihsUnd+I67TCJloFKowHwYDVR0j
BBgwFoAU3T2t4ncM+gbgcWZmhAcJXwjCdPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjlmOGMxYTMtNGUxMy00OWQwLWE2MzktNWJiNTIxOWI4
ZjViLzAvREQzREFERTI3NzBDRkEwNkUwNzE2NjY2ODQwNzA5NUYwOEMyNzRGOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNUMnQ0bmNNLWdiZ2NXWm1oQWNKWHdq
Q2RQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOWY4YzFhMy00
ZTEzLTQ5ZDAtYTYzOS01YmI1MjE5YjhmNWIvMC9ERDNEQURFMjc3MENGQTA2RTA3
MTY2NjY4NDA3MDk1RjA4QzI3NEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa357v3gUYNRO+/QksreC
WFWqfhDcM8BqS2OTrno+zz5aTCkSeL62LTqxmj1JYVMQAOIPXrAXJkRGGS92vAHz
q7+ETR8iu5lmb725KVCX/Bsm6ELcDQCoPKR3xPc2NkAZK+TwXOb6GVCtsm7NSYHG
zo80bOe03UMDRoc4so+EC7LNwXkO/8gYBmoxnexP1w/XzKWXDEhwXh5MT7mQBLKP
7LktQZUigMyNghTregGlUE9xuehG/OPw480//4xjBEwGnMUxHxt7TTNJvUtGSLL7
Zji7VwkwU/Ov2Nfb6fzqaXFMJWjkVdLOpYX+LetNtP6QjZbOnCvWQF29g6bXQWs7
UA==
-----END CERTIFICATE-----