Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.mft
File:                     D0C562313B009B2A94F2D151CAFD8521265D4ECD.mft (raw, json)
Hash identifier:          hy1GjB0glJMpkFgkvwQanydeUE68my+f9mWvX25aCpw=
Subject key identifier:   2A:3F:8B:55:CF:E1:5A:C3:78:4D:52:B9:CF:65:4C:7B:C6:98:E9:1E
Authority key identifier: D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD
Certificate issuer:       /CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
Certificate serial:       1265D390EB68E297B8B87001B8873B58158B3B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.mft
Manifest number:          E3
Signing time:             Fri 15 Dec 2023 05:30:59 +0000
Manifest this update:     Fri 15 Dec 2023 05:25:59 +0000
Manifest next update:     Sat 16 Dec 2023 08:52:59 +0000
Files and hashes:         1: D0C562313B009B2A94F2D151CAFD8521265D4ECD.crl (hash: ayE+EElkFqMF8Yygc4UWn6EAeWFvdfJnRThn1YrPM8M=)
                          2: 36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa (hash: iwl4IFfJw36ZBd6CyPMHvk08lLfqGxw7bqYtQwoMVNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:65:d3:90:eb:68:e2:97:b8:b8:70:01:b8:87:3b:58:15:8b:3b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
        Validity
            Not Before: Dec 15 05:25:59 2023 GMT
            Not After : Dec 16 08:52:59 2023 GMT
        Subject: CN=2A3F8B55CFE15AC3784D52B9CF654C7BC698E91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:44:d6:c6:44:31:1d:72:d8:a8:51:4c:d3:
                    bc:bf:be:2c:23:c8:e1:7a:fc:47:20:ff:43:b3:d9:
                    d4:dc:86:4d:32:16:9d:d6:e4:28:6d:5e:b2:c6:cd:
                    c0:7d:5b:c8:d2:cb:09:6c:24:19:b0:73:de:f0:5e:
                    f9:d5:62:78:be:97:67:f6:c7:db:0f:85:2d:7a:43:
                    bf:5f:8d:4a:97:59:10:a6:49:a8:53:68:42:22:f6:
                    8c:e2:e3:15:9c:ce:ed:ed:3c:7d:a8:ac:d7:f7:0f:
                    12:1d:f5:cb:ba:78:8a:6d:23:9c:29:3e:35:10:90:
                    5f:b1:48:69:7a:cb:48:7c:0e:bb:f4:c3:1e:8f:b0:
                    3c:f3:0f:0a:8f:8c:47:f1:62:f0:0b:8b:17:1a:91:
                    fb:fc:7e:79:10:ee:4e:91:a7:e9:6b:69:a4:99:9a:
                    6b:4d:7a:84:38:fb:98:06:be:f0:9a:3e:4a:32:95:
                    8c:71:71:59:4f:93:31:eb:34:cd:de:d9:77:04:ea:
                    f5:54:e4:d2:f6:5f:d4:38:17:8c:24:65:a6:7e:fd:
                    4f:34:6c:a1:ff:59:ea:73:fd:40:9a:8a:bb:24:cb:
                    51:57:7f:4b:01:77:72:d9:e4:81:79:ca:b6:80:25:
                    37:27:2a:f2:25:72:ae:3d:7e:ef:73:33:ac:a7:51:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3F:8B:55:CF:E1:5A:C3:78:4D:52:B9:CF:65:4C:7B:C6:98:E9:1E
            X509v3 Authority Key Identifier:
                keyid:D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:47:91:00:e3:f2:f9:67:17:91:ce:5d:dc:c0:8e:4b:b0:
         6d:bb:bf:3d:fa:76:93:97:7c:93:ff:0d:ce:af:a2:f8:3b:95:
         c3:25:94:d2:98:42:e3:b9:c0:2d:05:a0:67:d8:5b:1f:d1:ba:
         d7:fe:b5:1c:24:2b:97:29:33:24:c3:78:1c:c0:0c:58:74:4c:
         2b:b5:a0:5e:38:20:ed:44:14:ef:cd:0c:9b:44:cc:22:f2:80:
         5e:83:7f:f1:b1:0d:c9:be:a0:16:12:74:29:80:ec:b9:22:b8:
         3d:c6:e4:25:30:19:44:64:b5:35:35:70:f7:7d:89:61:e7:58:
         2a:a1:2b:bf:68:f7:d3:cb:98:4b:9d:88:7b:76:97:b8:78:ce:
         c7:bb:b8:07:c7:6e:0a:26:cb:0b:4c:27:12:6c:0e:dc:e3:9b:
         50:f8:0e:76:78:27:9a:92:53:09:1f:fd:71:fe:8c:e5:2b:70:
         42:ab:a8:67:d0:4c:21:be:4d:88:f0:85:47:b9:9e:31:db:9b:
         ef:2f:69:08:d2:e4:bf:e4:0e:33:46:a2:98:db:86:7b:5f:58:
         32:38:56:9d:c8:c3:93:12:4c:a9:91:cc:21:27:ab:d6:b0:17:
         91:48:e1:ba:32:3f:37:8d:80:32:b9:41:74:32:c0:4c:86:be:
         65:9b:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----