Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6f60d80d-fbc6-4d4e-a80a-7432661231c1/0/645DCA3803C426E878ABB4682AEB5249FE5704EE.mft
File:                     645DCA3803C426E878ABB4682AEB5249FE5704EE.mft (raw, json)
Hash identifier:          FufBt1uXOWYXUIVrwayL2cV782qR+KkkvSr9VPS5BRI=
Subject key identifier:   B5:F5:9D:F2:76:18:A1:A7:D5:38:D6:17:9C:11:CA:05:0B:3D:1B:6B
Authority key identifier: 64:5D:CA:38:03:C4:26:E8:78:AB:B4:68:2A:EB:52:49:FE:57:04:EE
Certificate issuer:       /CN=645dca3803c426e878abb4682aeb5249fe5704ee
Certificate serial:       27B5E687A828EBE1D266F0766F8B3E510403F6F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZF3KOAPEJuh4q7RoKutSSf5XBO4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6f60d80d-fbc6-4d4e-a80a-7432661231c1/0/645DCA3803C426E878ABB4682AEB5249FE5704EE.mft
Manifest number:          0D
Signing time:             Tue 27 Feb 2024 18:11:30 +0000
Manifest this update:     Tue 27 Feb 2024 18:06:30 +0000
Manifest next update:     Wed 28 Feb 2024 21:25:30 +0000
Files and hashes:         1: AS202197.asa (hash: Zeofl56V4HELm460bJpoqQcuHITHopWW76GmEVp36R4=)
                          2: 645DCA3803C426E878ABB4682AEB5249FE5704EE.crl (hash: bm+zfzFEbktf9CUltXwpEUmgNTfCF/6x0p3Jz907LnY=)
                          3: AS48752.asa (hash: G12a5+xToPrcgn/45IkqDSXC9NPuvV7AOzT1G5YE1KM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b5:e6:87:a8:28:eb:e1:d2:66:f0:76:6f:8b:3e:51:04:03:f6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=645dca3803c426e878abb4682aeb5249fe5704ee
        Validity
            Not Before: Feb 27 18:06:30 2024 GMT
            Not After : Feb 28 21:25:30 2024 GMT
        Subject: CN=B5F59DF27618A1A7D538D6179C11CA050B3D1B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1d:2f:a2:d9:3c:f3:f9:76:aa:6b:93:b3:dc:
                    df:73:fe:57:13:c0:79:ed:f0:76:a9:e7:a4:05:91:
                    ab:ca:30:ca:37:dd:94:eb:c2:27:b8:98:95:a3:18:
                    e4:39:95:53:59:3e:e0:e9:1c:cf:77:52:0c:44:cd:
                    0d:ac:f3:8f:ee:5e:c4:bb:43:a8:67:ec:43:ad:20:
                    12:0b:55:30:2e:3b:bd:9c:0b:0e:ff:88:d9:ef:2a:
                    03:3d:d2:08:2a:ad:38:96:a9:8e:ad:6f:d7:cf:fe:
                    58:43:08:32:09:dd:9c:ce:ac:64:42:d2:6c:b3:00:
                    6b:6b:bc:c3:95:1d:fb:d8:25:21:ce:10:60:a3:88:
                    4a:4a:2d:8f:e0:39:54:eb:31:17:20:bb:42:12:89:
                    55:4a:60:74:5b:1d:5d:ee:9a:3c:0e:7d:d3:3f:bc:
                    e3:e7:f1:0f:e3:a6:f0:88:f9:28:41:2b:95:52:9d:
                    d8:d8:4b:f7:cf:05:1c:ec:b5:89:c0:b5:d1:59:64:
                    16:50:03:25:47:ba:13:9a:8d:12:50:8d:81:ff:2b:
                    6c:f9:26:9b:e4:4b:9a:2b:0f:e9:2a:38:fb:65:5d:
                    b4:7d:4a:e9:0f:54:a6:d7:ea:a8:8a:fd:7a:85:80:
                    40:0f:9b:6a:f7:77:c7:4b:61:bc:67:6b:61:ea:8c:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F5:9D:F2:76:18:A1:A7:D5:38:D6:17:9C:11:CA:05:0B:3D:1B:6B
            X509v3 Authority Key Identifier:
                keyid:64:5D:CA:38:03:C4:26:E8:78:AB:B4:68:2A:EB:52:49:FE:57:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6f60d80d-fbc6-4d4e-a80a-7432661231c1/0/645DCA3803C426E878ABB4682AEB5249FE5704EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZF3KOAPEJuh4q7RoKutSSf5XBO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6f60d80d-fbc6-4d4e-a80a-7432661231c1/0/645DCA3803C426E878ABB4682AEB5249FE5704EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8e:81:f4:43:4c:42:f0:d9:0d:66:6d:57:76:e1:41:6e:41:
         19:bb:5b:54:b2:66:10:5a:7c:13:33:dc:6c:43:e5:28:33:b7:
         5d:09:1a:e2:a3:1e:26:03:df:4b:72:89:7e:39:d2:fd:e6:be:
         a9:26:22:b4:b5:5c:23:93:6a:e8:f1:88:1b:13:88:a0:f4:58:
         ef:c4:cc:10:cc:7f:61:fa:0e:29:08:83:74:a9:04:64:bb:23:
         26:fe:60:30:62:cb:e4:d2:81:e8:99:02:97:77:d8:db:6f:ed:
         13:64:db:82:2e:9d:43:3d:9a:01:4c:4f:30:f7:e7:04:9c:a9:
         5d:34:ef:a7:40:e0:89:23:80:2b:b3:85:9a:0b:81:cc:24:82:
         1f:13:d3:89:a4:78:91:06:51:25:d4:30:6c:82:f6:f1:31:2d:
         db:10:db:41:3a:f3:de:3e:d9:c0:b0:07:cb:ac:b2:3b:cc:f3:
         fa:0d:3e:5f:2b:99:d7:55:95:b8:3f:84:9b:20:1c:dd:cb:6b:
         20:17:55:4c:90:33:5d:35:e2:2c:eb:87:01:74:9b:76:bf:ac:
         d2:59:52:9b:71:4e:2d:6a:d8:36:0c:23:22:4b:ea:ad:d5:5e:
         25:cb:96:3f:65:4c:ce:3c:51:43:b4:50:e6:68:9b:28:f1:37:
         dd:53:5c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----