Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.mft
File:                     FEDF780271797F388E08561E5B53E5259D92C86A.mft (raw, json)
Hash identifier:          DgnEa8gJE6GWwXQwkL7pTO4tKRPX1aYAu7AUWJv9d2I=
Subject key identifier:   B8:8C:42:8E:89:B0:72:AE:F5:B4:D2:98:E7:BE:64:B9:38:F8:A9:A6
Authority key identifier: FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
Certificate issuer:       /CN=fedf780271797f388e08561e5b53e5259d92c86a
Certificate serial:       29BC0E66520F9F144DEC9EE04171E2731A51E486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.mft
Manifest number:          015E
Signing time:             Tue 05 Dec 2023 12:50:59 +0000
Manifest this update:     Tue 05 Dec 2023 12:45:59 +0000
Manifest next update:     Wed 06 Dec 2023 15:04:59 +0000
Files and hashes:         1: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 9HtCHEOxITNL8BucIYJ5acXc/Zy3XZ/kQrBGAD+uSf8=)
                          2: FEDF780271797F388E08561E5B53E5259D92C86A.crl (hash: SpEi0hraRwOEVPDg9WJWPkYt3nKGUJpq1ugw47BC7/U=)
                          3: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: cb3ta0ZICUw4TBhmpfDovuJmFoilBi40vbgr3V8jyjY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bc:0e:66:52:0f:9f:14:4d:ec:9e:e0:41:71:e2:73:1a:51:e4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fedf780271797f388e08561e5b53e5259d92c86a
        Validity
            Not Before: Dec  5 12:45:59 2023 GMT
            Not After : Dec  6 15:04:59 2023 GMT
        Subject: CN=B88C428E89B072AEF5B4D298E7BE64B938F8A9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:db:26:26:25:c8:bb:e9:f2:c2:14:13:cf:
                    29:84:6a:f2:4e:5c:59:0a:af:91:7b:fd:62:ca:5f:
                    af:16:91:2a:bb:9e:3f:d6:b5:9b:f0:b6:0e:d0:7e:
                    fe:4a:84:09:8f:ad:ff:51:e0:3c:bf:ca:f9:b4:3e:
                    12:a8:18:94:92:c5:0c:bc:a1:2e:40:35:0c:22:84:
                    0e:90:19:2a:50:cf:cd:24:c7:74:2a:7f:2d:c4:e3:
                    8a:a9:db:d5:a4:71:34:90:78:62:dc:f7:d4:b3:3d:
                    03:64:b5:a6:23:4b:05:83:e4:96:62:b0:a6:36:56:
                    a7:33:b7:86:e6:38:31:94:fc:80:a2:cc:6a:c4:64:
                    1a:d3:e0:47:5d:13:4a:3a:3d:70:70:7b:b9:93:a6:
                    2f:a6:20:f3:4f:7c:86:80:94:ea:52:1e:40:ae:d5:
                    3b:7a:7f:77:bc:2d:c0:cc:27:3f:07:84:6e:ec:dd:
                    04:82:01:a5:d6:f0:aa:da:68:d9:1b:29:42:5f:b9:
                    89:ac:ee:6c:84:63:92:73:06:0b:81:aa:b3:9c:8d:
                    95:1b:ed:5b:06:f3:e6:1a:26:c5:9f:1a:a8:96:ac:
                    f4:7e:79:c4:a4:3e:89:6f:21:b5:54:f9:84:e9:f6:
                    fe:eb:6e:98:dd:82:28:ad:46:1f:c3:0d:3d:d4:99:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8C:42:8E:89:B0:72:AE:F5:B4:D2:98:E7:BE:64:B9:38:F8:A9:A6
            X509v3 Authority Key Identifier:
                keyid:FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:41:00:44:8f:81:06:66:70:a5:2a:25:59:06:be:75:16:
         4b:e6:e5:85:b0:3a:83:12:1e:77:39:03:97:f2:7b:dd:c9:40:
         f2:bc:25:69:2f:bb:1d:7b:b2:50:da:4e:11:70:50:f3:ef:0a:
         09:0f:1b:46:33:c6:45:d9:2e:48:24:43:1a:61:37:a4:00:5c:
         19:39:19:25:05:db:9a:a9:d3:d0:cb:d1:a6:fb:05:a5:95:dd:
         e8:81:03:48:c7:f5:09:8e:85:28:d3:1b:a9:1c:3b:51:87:b8:
         60:fc:d9:68:c4:b7:17:68:6d:d3:f7:44:a3:ed:77:22:61:f1:
         31:be:67:f7:98:0f:d6:1d:b9:a5:ca:9b:54:e8:a1:ce:be:c9:
         09:f2:3f:b0:ee:c0:fb:6f:d4:e4:e7:0f:bf:5c:56:8f:19:fe:
         6b:60:fe:74:b4:26:5f:8e:d5:1a:9a:f8:fa:57:5b:c4:dd:81:
         29:6e:eb:bc:84:20:86:39:92:65:06:d8:1c:9c:f9:df:03:e8:
         61:88:71:1e:e9:fa:81:52:de:bf:0b:b7:be:50:f5:42:5f:b0:
         68:b9:e7:7b:12:e7:47:9a:19:23:11:7e:79:13:e1:c1:07:45:
         6a:32:fb:2a:70:61:27:05:a2:44:4f:fc:2f:83:9a:ae:5b:27:
         3e:bd:93:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:43 2025 by rpki-client