Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.mft
File:                     4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.mft (raw, json)
Hash identifier:          v5uCupACyzdWDgxBNGJHRuHlohXFjOYkvuYCd2jfW0E=
Subject key identifier:   DE:F1:8C:40:29:2C:57:A1:A3:0F:3A:29:D9:FB:45:25:22:4F:FD:C8
Authority key identifier: 4D:DF:9D:47:83:13:35:C9:71:0D:CB:1A:0A:F7:D3:04:B2:70:0E:7F
Certificate issuer:       /CN=4ddf9d47831335c9710dcb1a0af7d304b2700e7f
Certificate serial:       71FE483776C0AC3F690568654CCE9E74D303932D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Td-dR4MTNclxDcsaCvfTBLJwDn8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.mft
Manifest number:          0161
Signing time:             Mon 11 Dec 2023 08:05:59 +0000
Manifest this update:     Mon 11 Dec 2023 08:00:59 +0000
Manifest next update:     Tue 12 Dec 2023 11:13:59 +0000
Files and hashes:         1: 4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.crl (hash: qsMc+0VSLBy4dwFx56Bm6Noe0iPGzyZI77N8hu5sZPI=)
                          2: 3134362e31392e33382e302f32342d3234203d3e203135333737.roa (hash: VTQjnPkWRsTUUL7QknMvgmT/2lmPAb/bGnpaaBTI/Jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fe:48:37:76:c0:ac:3f:69:05:68:65:4c:ce:9e:74:d3:03:93:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddf9d47831335c9710dcb1a0af7d304b2700e7f
        Validity
            Not Before: Dec 11 08:00:59 2023 GMT
            Not After : Dec 12 11:13:59 2023 GMT
        Subject: CN=DEF18C40292C57A1A30F3A29D9FB4525224FFDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:49:a0:d9:35:2a:b9:55:99:c1:72:d8:dc:
                    5b:50:e8:fd:0f:c4:b4:23:73:f3:1c:23:0c:8b:5e:
                    63:c9:fe:90:f7:25:d2:f9:1e:b9:69:dd:d4:22:2b:
                    aa:ad:b3:9b:87:56:6e:fb:e9:10:68:c8:22:51:cf:
                    cd:fa:21:44:b4:0b:86:73:74:42:9b:a5:d5:bc:35:
                    78:56:e6:44:2a:3f:e7:17:b1:18:b1:22:d3:dc:c3:
                    7e:1c:b0:98:39:5b:ba:28:45:ba:79:84:7c:58:47:
                    92:52:78:04:b3:01:01:0c:1f:03:38:f1:cc:c8:90:
                    20:40:31:9d:72:0a:80:b8:88:10:d3:bb:e1:39:15:
                    25:3a:fb:26:ce:91:b0:6e:f5:a1:7d:8a:9e:e6:d4:
                    b2:7d:9d:85:66:ea:6c:56:e9:99:38:38:3b:e8:c2:
                    6e:bd:60:93:a5:c8:38:3a:16:b9:6c:e5:63:a1:5a:
                    b3:fa:c7:20:b6:0f:36:bd:92:56:93:4f:d2:9d:2d:
                    04:1c:fb:1a:ac:34:2a:d7:04:c4:e7:5f:0a:20:10:
                    fc:44:37:5a:d1:61:09:9a:b3:e9:e4:4e:2d:c0:d2:
                    51:dd:9d:a2:04:fc:a9:b5:f6:b7:d3:17:16:18:65:
                    e3:3b:11:52:07:8f:8e:6f:9d:b5:e2:de:01:a8:fb:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F1:8C:40:29:2C:57:A1:A3:0F:3A:29:D9:FB:45:25:22:4F:FD:C8
            X509v3 Authority Key Identifier:
                keyid:4D:DF:9D:47:83:13:35:C9:71:0D:CB:1A:0A:F7:D3:04:B2:70:0E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td-dR4MTNclxDcsaCvfTBLJwDn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:d4:40:6d:18:a4:ba:65:d6:98:5d:48:8f:71:42:66:e7:
         50:3b:a2:84:a2:e8:f3:cb:4d:a7:e0:7d:11:50:c6:97:a6:12:
         fc:05:e2:9f:b0:c0:d0:1e:3d:26:1a:f5:46:ab:d6:99:99:92:
         78:76:b9:86:24:33:73:9c:15:7c:29:0a:73:15:c6:b2:8e:01:
         77:51:aa:22:24:8c:a0:03:3b:80:bd:98:22:8d:14:b6:a4:9a:
         22:3f:a5:4e:48:bb:17:44:7f:68:80:12:3b:d9:ed:e9:2c:bc:
         9d:4d:f8:5b:2b:8b:63:dd:8e:a1:3d:01:8b:a9:2d:f7:dc:87:
         8b:d5:57:8a:f5:36:af:25:9a:16:a9:e1:59:aa:0b:c1:c1:fd:
         2b:98:1c:17:8d:60:b3:c2:46:29:46:2e:f6:55:c6:84:4d:ad:
         02:a9:c6:17:1c:29:eb:92:d1:ed:62:88:27:2b:8b:ef:8b:10:
         1b:e0:78:a8:e3:80:41:d0:b5:86:c5:8a:0d:ad:95:df:80:22:
         42:e9:10:49:c1:42:d4:a0:b9:3e:f7:28:ca:a0:5c:b8:bf:e7:
         fc:5a:9c:df:8e:a4:a8:5c:2a:07:c1:68:01:85:8a:f1:8c:84:
         2d:1b:da:5d:b5:00:0b:ef:98:e5:da:40:68:a1:15:88:ae:c7:
         35:b5:ba:17
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcf5IN3bArD9pBWhlTM6edNMDky0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGRkZjlkNDc4MzEzMzVjOTcxMGRjYjFhMGFmN2QzMDRi
MjcwMGU3ZjAeFw0yMzEyMTEwODAwNTlaFw0yMzEyMTIxMTEzNTlaMDMxMTAvBgNV
BAMTKERFRjE4QzQwMjkyQzU3QTFBMzBGM0EyOUQ5RkI0NTI1MjI0RkZEQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbEmg2TUquVWZwXLY3FtQ6P0P
xLQjc/McIwyLXmPJ/pD3JdL5Hrlp3dQiK6qts5uHVm776RBoyCJRz836IUS0C4Zz
dEKbpdW8NXhW5kQqP+cXsRixItPcw34csJg5W7ooRbp5hHxYR5JSeASzAQEMHwM4
8czIkCBAMZ1yCoC4iBDTu+E5FSU6+ybOkbBu9aF9ip7m1LJ9nYVm6mxW6Zk4ODvo
wm69YJOlyDg6Frls5WOhWrP6xyC2Dza9klaTT9KdLQQc+xqsNCrXBMTnXwogEPxE
N1rRYQmas+nkTi3A0lHdnaIE/Km19rfTFxYYZeM7EVIHj45vnbXi3gGo++ZBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3vGMQCksV6GjDzop2ftFJSJP/cgwHwYDVR0j
BBgwFoAUTd+dR4MTNclxDcsaCvfTBLJwDn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDdhZGUxYjMtMzJkMi00ZTdkLWE5MTQtZDdhYWE0Mzhl
MGM5LzAvNERERjlENDc4MzEzMzVDOTcxMERDQjFBMEFGN0QzMDRCMjcwMEU3Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RkLWRSNE1UTmNseERjc2FDdmZUQkxK
d0RuOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80N2FkZTFiMy0z
MmQyLTRlN2QtYTkxNC1kN2FhYTQzOGUwYzkvMC80RERGOUQ0NzgzMTMzNUM5NzEw
RENCMUEwQUY3RDMwNEIyNzAwRTdGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeezUQG0YpLpl1phdSI9x
QmbnUDuihKLo88tNp+B9EVDGl6YS/AXin7DA0B49Jhr1RqvWmZmSeHa5hiQzc5wV
fCkKcxXGso4Bd1GqIiSMoAM7gL2YIo0UtqSaIj+lTki7F0R/aIASO9nt6Sy8nU34
WyuLY92OoT0Bi6kt99yHi9VXivU2ryWaFqnhWaoLwcH9K5gcF41gs8JGKUYu9lXG
hE2tAqnGFxwp65LR7WKIJyuL74sQG+B4qOOAQdC1hsWKDa2V34AiQukQScFC1KC5
PvcoyqBcuL/n/Fqc346kqFwqB8FoAYWK8YyELRvaXbUAC++Y5dpAaKEViK7HNbW6
Fw==
-----END CERTIFICATE-----