Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.mft
File:                     ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.mft (raw, json)
Hash identifier:          VdZYvpetX8jcWqrGBDxtjIlenq2oXVUsukdL9Yt4/Ns=
Subject key identifier:   A4:3C:15:23:A1:79:AD:D7:BA:99:BC:42:40:E4:3A:3D:A7:DA:17:DA
Authority key identifier: EC:E0:27:C4:D8:12:BA:2B:0E:15:FF:6D:F8:08:BB:A3:EC:97:2A:D1
Certificate issuer:       /CN=ece027c4d812ba2b0e15ff6df808bba3ec972ad1
Certificate serial:       5263672A2B7325C816CA36DD63B3CF1800E124B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OAnxNgSuisOFf9t-Ai7o-yXKtE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.mft
Manifest number:          0146
Signing time:             Thu 23 Nov 2023 21:30:58 +0000
Manifest this update:     Thu 23 Nov 2023 21:25:58 +0000
Manifest next update:     Fri 24 Nov 2023 22:41:58 +0000
Files and hashes:         1: 3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa (hash: PeAPSu2Jaz+novxE7KZ0PSGg9aItfmKRZCiNun0/+9A=)
                          2: ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.crl (hash: Dw8lqTBuJvx1ixBQk2KP0pIJ+wU4q+p0bl3uFBNo1m4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:63:67:2a:2b:73:25:c8:16:ca:36:dd:63:b3:cf:18:00:e1:24:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece027c4d812ba2b0e15ff6df808bba3ec972ad1
        Validity
            Not Before: Nov 23 21:25:58 2023 GMT
            Not After : Nov 24 22:41:58 2023 GMT
        Subject: CN=A43C1523A179ADD7BA99BC4240E43A3DA7DA17DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:81:a5:ca:64:ef:ec:25:51:24:59:73:75:dc:
                    ad:20:98:3e:11:13:81:76:c4:26:a5:8d:d9:4f:77:
                    17:04:f9:25:a0:63:6f:83:16:f4:a0:77:19:cb:f5:
                    c8:54:ec:90:35:c5:5c:70:2f:49:2a:3d:67:d8:a7:
                    6b:1b:29:20:19:7e:f9:c9:8d:b0:6f:23:0a:c6:ea:
                    c8:f6:ed:75:15:45:9e:5d:3b:96:6e:92:cc:0c:71:
                    7d:d4:54:43:c5:88:2c:6b:f7:3e:df:a1:25:31:40:
                    76:a2:73:97:79:f5:a0:81:31:b3:02:de:a3:7c:9d:
                    8a:7c:9a:8e:b2:cb:0e:de:95:7c:38:d1:cd:59:59:
                    38:8e:d8:53:7d:1d:a0:b4:ab:04:a0:7d:8f:06:6b:
                    29:b5:d7:bc:fe:96:0a:3b:5a:88:fe:6b:3e:5d:f2:
                    86:58:36:e2:04:bd:45:85:ac:29:59:72:35:e3:ce:
                    1e:81:96:ba:6c:13:b4:76:b3:12:ff:83:cf:ce:95:
                    c8:b9:02:9a:0a:e0:0d:5f:b5:20:5e:a8:6d:b0:cf:
                    b0:46:0e:6b:ec:45:c3:d3:95:db:be:d7:dd:4a:7f:
                    fb:58:a3:16:7f:15:99:9b:fb:f9:fd:b1:97:34:ff:
                    6a:ec:7c:9b:33:c2:c3:f0:f1:f9:54:aa:46:a6:dc:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:15:23:A1:79:AD:D7:BA:99:BC:42:40:E4:3A:3D:A7:DA:17:DA
            X509v3 Authority Key Identifier:
                keyid:EC:E0:27:C4:D8:12:BA:2B:0E:15:FF:6D:F8:08:BB:A3:EC:97:2A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OAnxNgSuisOFf9t-Ai7o-yXKtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fa:44:63:e0:1c:5a:8f:e3:ab:eb:80:45:0e:ae:8b:88:8a:
         42:1e:72:60:be:74:43:45:a5:6d:5f:76:37:30:a1:00:c4:8a:
         c8:72:6b:fc:a6:e2:a8:cb:a0:c2:b5:97:ef:7c:33:5e:a7:97:
         59:aa:e3:5a:99:8e:6f:aa:b8:89:e7:9c:a5:c1:33:f8:4b:43:
         fe:46:a6:0a:2c:80:00:d0:2b:95:34:fb:2d:fd:11:1b:54:c1:
         c9:19:93:60:88:10:be:67:8f:3e:b0:93:99:22:36:79:45:3d:
         36:0b:fe:79:61:a3:f2:d6:42:45:b3:69:8a:70:94:13:e6:94:
         89:d1:8f:59:24:9f:f9:96:01:d9:ca:aa:c8:97:e2:5c:bb:4c:
         45:df:7f:34:f1:c2:a1:fd:18:1d:3d:d7:e0:13:2c:48:13:ec:
         37:00:ba:1e:b4:aa:c5:0f:16:ad:ff:c4:15:52:19:ba:d7:8c:
         99:f7:44:e9:85:0b:3a:14:89:f3:cf:d9:c8:37:d2:c4:32:ee:
         8e:6e:78:f7:3d:5d:b8:f2:35:4f:64:54:0a:71:8b:fb:4a:41:
         be:0c:40:f4:82:7b:34:80:77:3c:f3:a4:23:5c:d0:23:ba:1c:
         ac:f6:fa:e5:11:18:66:d8:c5:f4:f2:e0:8a:da:68:30:ef:22:
         a1:2b:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----