Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft
File:                     3986DB54152486D65338415899DEAD95A067B25E.mft (raw, json)
Hash identifier:          de/CMEInabhidNDGZA6JOjknR7pPVwff8V3cBolHdmw=
Subject key identifier:   D1:3C:6F:D1:DF:75:82:71:04:51:A1:9C:27:2E:01:E3:22:FB:91:DA
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       16367345777AF46DABBA6630F47C3926346E8191
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft
Manifest number:          012E
Signing time:             Mon 29 Apr 2024 13:20:56 +0000
Manifest this update:     Mon 29 Apr 2024 13:15:56 +0000
Manifest next update:     Tue 30 Apr 2024 15:23:56 +0000
Files and hashes:         1: D3A0F880745420FB2B86A2D1C198849D8B7C676C.cer (hash: +2rbyWk1MYflPpmBVIc2zsO3EFQqyPg9kjeStLK9Sc4=)
                          2: 3986DB54152486D65338415899DEAD95A067B25E.crl (hash: yrf4iLBWidltCrw/nsA196FmNUPDcESUPtsjqxdYqmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:73:45:77:7a:f4:6d:ab:ba:66:30:f4:7c:39:26:34:6e:81:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Apr 29 13:15:56 2024 GMT
            Not After : Apr 30 15:23:56 2024 GMT
        Subject: CN=D13C6FD1DF7582710451A19C272E01E322FB91DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:ff:4f:86:32:6d:31:11:2a:3b:d9:a8:35:
                    b5:38:ff:d0:18:54:fb:13:1d:19:a4:46:1b:17:ed:
                    3c:13:4b:c5:8a:c4:71:42:04:8f:65:87:50:75:6b:
                    aa:e6:fa:05:61:8f:d6:20:39:60:30:27:3a:6c:f6:
                    15:99:b9:c2:d6:9d:4f:20:04:d2:eb:8d:6b:88:07:
                    09:98:d5:53:4c:6b:cc:0b:41:ce:74:92:e7:6c:8d:
                    d9:83:5c:92:0d:3a:5f:22:d5:e0:df:0b:d2:aa:5d:
                    6a:44:56:f3:9e:29:01:2e:c6:2c:d2:1d:cf:fd:81:
                    bd:d1:cd:f7:02:46:99:c8:3b:ab:fa:e4:21:fe:82:
                    54:f9:2a:ee:d7:aa:d4:bf:3a:fd:fb:31:75:d1:2f:
                    6f:62:64:78:14:ac:ea:59:c7:91:69:6a:e9:7b:76:
                    0b:5f:91:52:b9:5b:2b:74:5e:2d:4e:2b:4b:8b:d1:
                    82:a8:d6:f9:27:98:0a:ba:a5:aa:46:a8:0d:23:a5:
                    ed:11:c4:72:90:98:32:9d:1a:5f:e0:84:44:f2:c0:
                    9b:91:83:d2:80:07:95:60:4b:f3:4e:eb:4a:70:ed:
                    8f:b6:e1:16:ef:b8:31:4c:c2:2b:c2:d9:e2:b1:40:
                    25:aa:ce:82:65:df:3a:35:52:05:0e:03:b1:88:1c:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3C:6F:D1:DF:75:82:71:04:51:A1:9C:27:2E:01:E3:22:FB:91:DA
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:43:24:5e:b7:55:81:b4:52:82:4b:8e:bf:4a:0f:e2:46:
         ce:87:e0:68:0c:05:3a:39:7c:6e:5f:47:5e:b1:a3:26:2f:01:
         c1:4e:2c:77:ed:e4:97:b3:16:b1:38:10:e9:26:a3:7f:5e:ba:
         91:5d:f4:52:f7:5b:b5:b0:cf:c9:10:52:05:66:1f:d5:ab:06:
         2a:22:3c:01:e8:d0:70:9c:5c:09:0c:bf:01:6c:17:78:c5:a0:
         ea:bd:23:40:c6:da:33:87:1e:1b:d9:5c:23:62:0a:d2:86:c1:
         d9:75:8f:71:d3:87:18:ca:28:32:63:14:9f:0f:f0:f7:2d:bb:
         dc:a2:36:28:34:11:74:fa:91:c5:b7:ae:a4:af:d9:4f:00:0d:
         24:de:f5:b9:23:ee:27:91:65:47:fd:37:c5:1c:05:68:70:59:
         a5:7f:c8:43:21:9a:a7:66:76:55:04:c5:52:e5:09:ac:6a:a7:
         6c:c9:a9:84:aa:f3:02:74:0c:96:3e:81:57:dd:5e:1f:a2:51:
         40:b4:7e:28:8b:96:89:6a:cd:0e:3a:aa:df:5b:da:e7:a9:9c:
         14:29:3d:dc:5b:84:bb:8a:e8:b8:2e:4d:8d:4a:07:f9:db:8e:
         12:bc:39:db:a0:1c:59:ea:02:b2:44:4d:a6:32:a3:7b:26:0f:
         b2:24:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----