Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.mft
File:                     4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.mft (raw, json)
Hash identifier:          jyvrjt1prKMUT9mpqak0vaFLPp3QJiYbCJp8fU1nOUU=
Subject key identifier:   77:9F:AC:C6:AB:E7:CE:64:16:FB:3D:5A:85:59:E5:18:79:53:23:EB
Authority key identifier: 4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
Certificate issuer:       /CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Certificate serial:       01BDEF0627ED28E8F1D15A64649E9781D1C74010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.mft
Manifest number:          A5
Signing time:             Thu 16 May 2024 02:17:04 +0000
Manifest this update:     Thu 16 May 2024 02:12:04 +0000
Manifest next update:     Fri 17 May 2024 06:11:04 +0000
Files and hashes:         1: 4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.crl (hash: dlDbZzsuxD2pIFqsqe/dTI9Bl4Siuj//OH/LhLh7kAU=)
                          2: 38302e37352e3232312e302f32342d3234203d3e203539383935.roa (hash: mv4Wo5yibtpPyYeLD+42oXSWX7CDvVofVZMITXEhhRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bd:ef:06:27:ed:28:e8:f1:d1:5a:64:64:9e:97:81:d1:c7:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
        Validity
            Not Before: May 16 02:12:04 2024 GMT
            Not After : May 17 06:11:04 2024 GMT
        Subject: CN=779FACC6ABE7CE6416FB3D5A8559E518795323EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:d7:96:68:ed:04:20:de:da:e2:15:1d:4c:
                    32:a1:b2:69:c8:8a:55:1d:52:e0:51:2f:da:dd:cb:
                    99:c3:28:92:7a:8f:35:b7:17:79:b8:d9:7d:20:c2:
                    4c:f3:79:70:af:de:37:d9:9c:3b:77:85:1a:c3:fe:
                    ee:67:e2:a1:4d:4b:9a:df:8e:33:a6:6d:2d:2a:56:
                    04:05:e4:71:eb:b3:37:f4:7a:0c:9c:36:7d:e6:c2:
                    49:f6:8d:4e:86:42:df:64:b0:26:0e:05:e5:6e:34:
                    bd:cd:af:07:70:b0:a6:f0:b8:6e:91:52:34:f8:09:
                    1e:29:e0:32:e6:28:a6:72:7b:58:08:e1:00:54:0d:
                    1f:7a:d3:30:75:1f:56:20:bb:bb:bf:6b:37:89:19:
                    82:d0:0d:02:ca:06:21:9c:43:81:4e:2d:ec:23:d6:
                    ba:b8:a9:25:a1:dd:6e:97:ea:97:6a:ee:e0:90:3c:
                    e4:df:94:f7:cd:d4:e8:f1:32:b1:9e:3d:20:fe:37:
                    91:5c:d1:bc:6a:0d:ea:8f:93:fc:b3:09:24:1e:7d:
                    94:25:26:0d:60:42:d0:79:62:27:d8:06:97:34:7b:
                    b0:98:40:9d:24:a8:6f:5d:42:ce:ed:f8:6c:79:82:
                    65:b4:c7:b7:78:0c:df:8d:0a:57:53:e5:2f:9e:bb:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9F:AC:C6:AB:E7:CE:64:16:FB:3D:5A:85:59:E5:18:79:53:23:EB
            X509v3 Authority Key Identifier:
                keyid:4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:75:e9:d9:8b:3a:f9:87:6f:10:0b:db:9f:12:ea:7b:df:59:
         8e:01:da:ee:5d:fd:63:c7:ba:2c:93:85:cd:2d:43:c2:88:7f:
         1a:dc:2a:1a:6f:86:9b:74:9f:93:55:cd:6f:c7:ec:88:4a:98:
         2a:ab:4a:79:96:9e:f1:e6:c7:84:d7:b2:f8:04:7d:9c:61:06:
         a1:1a:77:f1:83:94:60:b0:ae:e4:e9:8f:1f:3a:f4:28:9c:0c:
         89:7b:9e:57:26:02:5b:5e:18:6e:8d:c9:6f:13:3d:5e:90:69:
         6d:ab:8b:66:9d:03:9e:19:5f:f4:eb:b0:fc:f2:15:37:a3:7f:
         b9:79:2f:6e:7e:74:0e:46:03:ec:49:81:04:1f:5f:64:31:a2:
         4b:f7:05:fe:e6:58:4a:65:74:6f:61:87:63:3a:1d:af:24:29:
         27:2c:a3:43:a0:2d:32:fd:86:e1:15:4c:fa:28:c8:b6:b3:da:
         31:87:b1:84:0d:51:e7:cd:3f:09:16:e3:20:b0:33:9c:41:c4:
         a2:b5:a0:98:97:b3:ff:85:c4:6d:fe:94:fc:d2:24:43:29:d2:
         f5:ab:8a:86:26:e6:c4:b3:a0:de:f9:c4:3d:24:01:16:15:f0:
         42:60:33:2e:1a:db:f3:ab:5e:58:65:85:60:9d:20:00:43:cf:
         3d:52:99:12
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAb3vBiftKOjx0VpkZJ6XgdHHQBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGFjZDJkNTE5MjJiMmUxNjEyZTVmODJjMzk0ZjJkMTk4
MDBkMWRkZjAeFw0yNDA1MTYwMjEyMDRaFw0yNDA1MTcwNjExMDRaMDMxMTAvBgNV
BAMTKDc3OUZBQ0M2QUJFN0NFNjQxNkZCM0Q1QTg1NTlFNTE4Nzk1MzIzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AteWaO0EIN7a4hUdTDKhsmnI
ilUdUuBRL9rdy5nDKJJ6jzW3F3m42X0gwkzzeXCv3jfZnDt3hRrD/u5n4qFNS5rf
jjOmbS0qVgQF5HHrszf0egycNn3mwkn2jU6GQt9ksCYOBeVuNL3NrwdwsKbwuG6R
UjT4CR4p4DLmKKZye1gI4QBUDR960zB1H1Ygu7u/azeJGYLQDQLKBiGcQ4FOLewj
1rq4qSWh3W6X6pdq7uCQPOTflPfN1OjxMrGePSD+N5Fc0bxqDeqPk/yzCSQefZQl
Jg1gQtB5YifYBpc0e7CYQJ0kqG9dQs7t+Gx5gmW0x7d4DN+NCldT5S+eu/kjAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUd5+sxqvnzmQW+z1ahVnlGHlTI+swHwYDVR0j
BBgwFoAUSs0tUZIrLhYS5fgsOU8tGYANHd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzJlMzBmNmYtYTMzMi00OWFkLTg2OGUtZjM4ZWQzYTcy
NjAzLzAvNEFDRDJENTE5MjJCMkUxNjEyRTVGODJDMzk0RjJEMTk4MDBEMURERi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NzMHRVWklyTGhZUzVmZ3NPVTh0R1lB
TkhkOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MmUzMGY2Zi1h
MzMyLTQ5YWQtODY4ZS1mMzhlZDNhNzI2MDMvMC80QUNEMkQ1MTkyMkIyRTE2MTJF
NUY4MkMzOTRGMkQxOTgwMEQxRERGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3Xp2Ys6+YdvEAvbnxLq
e99ZjgHa7l39Y8e6LJOFzS1Dwoh/GtwqGm+Gm3Sfk1XNb8fsiEqYKqtKeZae8ebH
hNey+AR9nGEGoRp38YOUYLCu5OmPHzr0KJwMiXueVyYCW14Ybo3JbxM9XpBpbauL
Zp0Dnhlf9Ouw/PIVN6N/uXkvbn50DkYD7EmBBB9fZDGiS/cF/uZYSmV0b2GHYzod
ryQpJyyjQ6AtMv2G4RVM+ijItrPaMYexhA1R580/CRbjILAznEHEorWgmJez/4XE
bf6U/NIkQynS9auKhibmxLOg3vnEPSQBFhXwQmAzLhrb86teWGWFYJ0gAEPPPVKZ
Eg==
-----END CERTIFICATE-----