Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.mft
File:                     1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.mft (raw, json)
Hash identifier:          QoY7KwA9qrlIqriX71h3rBA3wGetBB8AI5Tpp62vWAo=
Subject key identifier:   01:E9:AF:C9:96:7C:39:F5:4D:B8:F9:DD:65:1D:06:A3:9E:69:3C:8A
Authority key identifier: 1A:E2:E7:7F:2A:52:D0:9B:79:D5:4F:F6:10:7F:29:0A:B9:1F:DE:05
Certificate issuer:       /CN=1ae2e77f2a52d09b79d54ff6107f290ab91fde05
Certificate serial:       416B255CAD69FD850709B08B8635ED9EE2522889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuLnfypS0Jt51U_2EH8pCrkf3gU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.mft
Manifest number:          0160
Signing time:             Sun 10 Dec 2023 23:20:59 +0000
Manifest this update:     Sun 10 Dec 2023 23:15:59 +0000
Manifest next update:     Tue 12 Dec 2023 02:47:59 +0000
Files and hashes:         1: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: qUVtzc9rAVyjmWXMOxCWPueifZrggdmZNemUG+vVqH0=)
                          2: 1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.crl (hash: 3FGiOwZLjCnQq63NlC+OnkeQJ9hOoOnxAULK8q/JbSQ=)
                          3: 3134362e31392e3136372e302f32342d3234203d3e203633303233.roa (hash: /KpOjHYOPzsew2y0NiFVEAGrFGTq2skb9UiTr8+nH+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6b:25:5c:ad:69:fd:85:07:09:b0:8b:86:35:ed:9e:e2:52:28:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae2e77f2a52d09b79d54ff6107f290ab91fde05
        Validity
            Not Before: Dec 10 23:15:59 2023 GMT
            Not After : Dec 12 02:47:59 2023 GMT
        Subject: CN=01E9AFC9967C39F54DB8F9DD651D06A39E693C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:82:e5:5c:92:e8:f1:02:39:6b:eb:81:c6:
                    1b:42:ea:44:79:74:7d:21:6c:16:8a:95:62:de:7e:
                    ef:87:0a:85:86:9f:d1:b7:9a:07:35:19:04:4c:e5:
                    7c:bb:62:43:8b:31:4d:28:b8:4c:a5:6e:39:ee:88:
                    bf:98:26:cf:5a:ed:69:cc:0d:1c:7c:54:f9:7e:fb:
                    9d:28:3b:13:85:a0:a2:6e:81:b2:f6:48:41:52:e5:
                    33:74:38:85:f9:6b:ed:5f:91:d6:a3:7e:c8:11:3a:
                    fe:91:38:3a:03:29:ab:24:30:b6:5c:3e:44:c3:1d:
                    3e:9e:fb:98:1c:51:94:05:96:f2:da:53:df:2b:c8:
                    74:34:71:42:d2:41:06:ec:7e:01:5b:9c:af:f6:c3:
                    98:68:94:65:6a:3b:9d:48:bd:9d:d8:1b:05:f1:46:
                    d5:4b:e3:01:9d:89:34:f6:dd:e8:9f:d8:a0:06:cd:
                    ba:3d:e3:29:5d:b1:9d:0c:0f:4d:91:0d:76:96:ca:
                    fa:9c:88:a9:f8:55:45:e3:ad:f4:51:6b:ac:67:e2:
                    5f:f1:67:4d:6b:05:33:0d:a8:e8:fb:bf:8c:aa:0e:
                    01:a9:be:f5:b0:c2:e8:ad:c4:6e:95:f8:fa:61:6c:
                    0c:a2:4f:e8:de:52:4d:85:79:78:85:f3:b1:36:d2:
                    33:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E9:AF:C9:96:7C:39:F5:4D:B8:F9:DD:65:1D:06:A3:9E:69:3C:8A
            X509v3 Authority Key Identifier:
                keyid:1A:E2:E7:7F:2A:52:D0:9B:79:D5:4F:F6:10:7F:29:0A:B9:1F:DE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuLnfypS0Jt51U_2EH8pCrkf3gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:88:4e:51:c1:79:2e:78:18:d5:d2:8e:43:ba:da:e4:be:09:
         c8:a1:c3:d3:60:a2:ea:20:3c:7b:10:bd:63:a8:0b:e2:c6:2a:
         cf:6a:51:f7:46:0c:df:d2:62:6c:ab:0c:f2:ef:7f:43:80:65:
         f9:d1:95:90:f9:ff:01:0a:da:e0:ad:67:d7:14:55:48:d1:8e:
         f6:95:9e:08:ab:d7:53:dd:7a:ff:18:36:90:df:ee:78:5d:e8:
         9a:1b:be:00:5b:43:0a:ef:1d:11:08:4c:58:de:e2:59:c9:47:
         a0:f7:b3:a4:4c:42:e6:4b:a0:d7:85:50:b0:52:7a:3a:e0:48:
         4c:3b:d1:63:03:a1:50:8d:4e:f8:03:ca:df:bd:0c:92:c2:f9:
         99:42:30:84:71:63:b4:20:d8:d8:4b:40:24:d4:ae:e0:d5:3e:
         03:8e:21:11:ec:51:12:f5:8b:09:ad:cf:30:10:d0:d2:cc:61:
         6f:be:15:dc:40:a8:08:99:a3:57:5f:5f:41:49:b5:0b:e5:75:
         03:f0:43:7b:3f:9f:33:c4:fc:6a:08:2d:61:21:93:30:73:90:
         b4:8f:16:46:af:41:28:e3:88:93:9b:57:4e:05:6d:5f:95:42:
         bd:b9:b5:43:27:ae:5d:60:ed:0e:08:1f:7b:a9:4c:ed:09:9c:
         7d:a3:6b:75
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQWslXK1p/YUHCbCLhjXtnuJSKIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWFlMmU3N2YyYTUyZDA5Yjc5ZDU0ZmY2MTA3ZjI5MGFi
OTFmZGUwNTAeFw0yMzEyMTAyMzE1NTlaFw0yMzEyMTIwMjQ3NTlaMDMxMTAvBgNV
BAMTKDAxRTlBRkM5OTY3QzM5RjU0REI4RjlERDY1MUQwNkEzOUU2OTNDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOq4LlXJLo8QI5a+uBxhtC6kR5
dH0hbBaKlWLefu+HCoWGn9G3mgc1GQRM5Xy7YkOLMU0ouEylbjnuiL+YJs9a7WnM
DRx8VPl++50oOxOFoKJugbL2SEFS5TN0OIX5a+1fkdajfsgROv6RODoDKaskMLZc
PkTDHT6e+5gcUZQFlvLaU98ryHQ0cULSQQbsfgFbnK/2w5holGVqO51IvZ3YGwXx
RtVL4wGdiTT23eif2KAGzbo94yldsZ0MD02RDXaWyvqciKn4VUXjrfRRa6xn4l/x
Z01rBTMNqOj7v4yqDgGpvvWwwuitxG6V+PphbAyiT+jeUk2FeXiF87E20jN7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAemvyZZ8OfVNuPndZR0Go55pPIowHwYDVR0j
BBgwFoAUGuLnfypS0Jt51U/2EH8pCrkf3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAxYmU3NGQtYzAwYy00YzE0LTg4ZjUtNTkxY2M0YTQy
OTdlLzAvMUFFMkU3N0YyQTUyRDA5Qjc5RDU0RkY2MTA3RjI5MEFCOTFGREUwNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0d1TG5meXBTMEp0NTFVXzJFSDhwQ3Jr
ZjNnVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80MDFiZTc0ZC1j
MDBjLTRjMTQtODhmNS01OTFjYzRhNDI5N2UvMC8xQUUyRTc3RjJBNTJEMDlCNzlE
NTRGRjYxMDdGMjkwQUI5MUZERTA1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7ohOUcF5LngY1dKOQ7ra
5L4JyKHD02Ci6iA8exC9Y6gL4sYqz2pR90YM39JibKsM8u9/Q4Bl+dGVkPn/AQra
4K1n1xRVSNGO9pWeCKvXU916/xg2kN/ueF3omhu+AFtDCu8dEQhMWN7iWclHoPez
pExC5kug14VQsFJ6OuBITDvRYwOhUI1O+APK370MksL5mUIwhHFjtCDY2EtAJNSu
4NU+A44hEexREvWLCa3PMBDQ0sxhb74V3ECoCJmjV19fQUm1C+V1A/BDez+fM8T8
aggtYSGTMHOQtI8WRq9BKOOIk5tXTgVtX5VCvbm1QyeuXWDtDggfe6lM7QmcfaNr
dQ==
-----END CERTIFICATE-----