Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.mft
File:                     4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.mft (raw, json)
Hash identifier:          3NLPC8GfI1W3+poAZBCwLSOLjG4HbvVCyDbh/bGr6GQ=
Subject key identifier:   67:DE:13:DC:B7:C7:E5:03:4F:45:48:31:34:97:F3:E1:A7:7C:24:AB
Authority key identifier: 40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1
Certificate issuer:       /CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
Certificate serial:       24D47769DA5A54094A7AA17EA950CD911BB80E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.mft
Manifest number:          1C
Signing time:             Fri 12 Apr 2024 18:01:31 +0000
Manifest this update:     Fri 12 Apr 2024 17:56:31 +0000
Manifest next update:     Sat 13 Apr 2024 19:00:31 +0000
Files and hashes:         1: 39312e3231372e3231392e302f32342d3234203d3e20383334.roa (hash: ucea/GVup/4PYClGKs0xpNUkAQKnkbKywABR0ngAJG4=)
                          2: 326131323a363263303a3a2f32392d3239203d3e203531373431.roa (hash: dyqGcb2nSCOn4UIPZ4EKvS8CKY3q7g8KhlEwYJNO6jQ=)
                          3: 4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.crl (hash: 9bEdzNjdUtFyof/23rkiHzWKuTInZLY+GlOkVSbQpS4=)
                          4: 326131323a363263303a3a2f34382d3438203d3e203531373431.roa (hash: PivynMWwq5P8aQaW6CmsYU2+IwGWMW/+8hQW9we+Np0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d4:77:69:da:5a:54:09:4a:7a:a1:7e:a9:50:cd:91:1b:b8:0e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
        Validity
            Not Before: Apr 12 17:56:31 2024 GMT
            Not After : Apr 13 19:00:31 2024 GMT
        Subject: CN=67DE13DCB7C7E5034F4548313497F3E1A77C24AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:2f:e9:8f:49:0a:a2:b2:c3:22:2a:34:aa:
                    26:89:9f:1d:1a:41:d3:f0:58:c3:05:f1:d0:f8:bc:
                    ec:fb:14:ba:97:5b:1a:36:8a:22:ab:a1:71:53:91:
                    9f:c6:d7:14:8e:57:67:95:c8:af:f2:01:cc:10:a9:
                    df:25:c4:46:fc:46:56:7f:9a:82:1b:88:23:8b:da:
                    ee:28:e1:cb:01:42:d2:7d:b4:3b:db:24:95:67:29:
                    9b:38:f4:7e:8b:45:e0:45:b1:3f:f2:97:ad:7d:c2:
                    59:ff:99:cb:f0:4f:ce:cf:7b:d3:7c:a5:23:01:d7:
                    f6:7c:62:21:c4:80:a6:99:2f:bf:56:7e:04:b2:14:
                    d5:77:0a:78:30:2e:fc:ec:45:18:1a:9b:4c:ef:be:
                    79:c2:f0:02:9c:cd:33:2d:45:f4:32:36:4b:a4:d4:
                    11:d4:d9:0d:9c:f5:d1:76:06:6f:f3:27:5e:a2:4c:
                    93:c6:06:d2:72:f9:1d:08:e3:7b:dc:90:1d:4a:c1:
                    49:2b:a5:d7:d6:59:3c:d3:f7:a9:46:5f:53:d7:a1:
                    dd:5a:be:5e:8d:40:0e:a3:f8:76:42:0d:10:60:95:
                    f4:cd:01:c4:fe:31:57:8f:f2:f8:09:d2:88:57:62:
                    b7:c8:e4:3f:79:0f:9e:74:f3:ee:b9:69:61:ba:3f:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DE:13:DC:B7:C7:E5:03:4F:45:48:31:34:97:F3:E1:A7:7C:24:AB
            X509v3 Authority Key Identifier:
                keyid:40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d1:33:33:2e:92:ca:d5:25:93:84:92:1f:0e:ef:25:28:78:
         e7:bd:5e:1a:6b:66:91:7c:5b:13:25:29:f9:cd:33:24:d1:9a:
         85:e9:63:aa:a3:c3:8a:1e:a6:b8:32:ce:e0:5b:5b:87:27:c0:
         a1:22:ba:a9:a6:56:d8:21:e6:e8:c7:cf:d0:57:f4:ed:e6:00:
         bb:2a:1e:04:7c:9e:96:25:05:07:46:c8:5a:ec:2d:41:6d:e7:
         f1:54:c4:a2:16:98:45:a2:e4:5a:bf:1d:cc:e1:04:b1:b7:ab:
         c1:79:0a:0e:00:6d:df:4a:e1:a0:ff:6e:f2:83:d1:4c:8c:89:
         a4:5e:b1:54:b0:0f:c0:a0:03:16:54:28:94:c1:e3:88:eb:ee:
         a3:11:51:b6:04:91:49:70:13:22:3b:da:2a:12:e5:b5:b8:ce:
         d2:02:f4:6d:f3:f7:d9:24:3c:7b:60:c0:fc:06:f7:59:41:36:
         92:0a:41:32:e6:44:0e:d8:a9:25:8c:49:95:ea:ac:15:25:75:
         a4:04:8d:83:0d:27:7b:6f:9c:bf:27:0c:4e:a5:a0:ee:29:ed:
         8e:d8:99:17:dc:de:bb:17:23:4a:8a:b3:1d:a6:ba:7a:01:5c:
         cf:63:81:95:a3:fd:a6:be:7a:c2:66:56:ea:4b:85:56:d2:4d:
         dd:fa:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----