Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft
File:                     41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft (raw, json)
Hash identifier:          hkpJV2cdk6mm9U4eFULFSZYug9NGLZS7jB3KhX2Oz7A=
Subject key identifier:   60:2E:82:59:BE:4D:8E:E2:55:5D:E8:45:00:B1:CE:4D:8C:A1:F9:7B
Authority key identifier: 41:CF:30:FB:DC:22:0B:6E:4A:6F:A6:77:92:B3:B2:48:EE:CF:65:70
Certificate issuer:       /CN=41CF30FBDC220B6E4A6FA67792B3B248EECF6570
Certificate serial:       7CA2D901A94F88E77B1BFBD983BD92D61A57AD95
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft
Manifest number:          44
Signing time:             Sun 04 Aug 2024 18:06:58 +0000
Manifest this update:     Sun 04 Aug 2024 18:01:58 +0000
Manifest next update:     Mon 05 Aug 2024 21:49:58 +0000
Files and hashes:         1: 326130373a353463313a633530303a3a2f34342d3434203d3e20323134373537.roa (hash: OMd8Y0gsCpyZd+CqCpDRQ1qndFKgBUaSH/pEoBw5k9g=)
                          2: 41CF30FBDC220B6E4A6FA67792B3B248EECF6570.crl (hash: QggWGwQJaHRa9QoqiHmO9kyCugEA30QiRTgWPhsUW58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a2:d9:01:a9:4f:88:e7:7b:1b:fb:d9:83:bd:92:d6:1a:57:ad:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CF30FBDC220B6E4A6FA67792B3B248EECF6570
        Validity
            Not Before: Aug  4 18:01:58 2024 GMT
            Not After : Aug  5 21:49:58 2024 GMT
        Subject: CN=602E8259BE4D8EE2555DE84500B1CE4D8CA1F97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:dd:35:0a:b3:91:47:d0:c8:8b:e4:a6:db:
                    d9:f1:c2:60:39:fc:da:7a:a4:7a:2a:26:13:18:82:
                    f5:90:e1:82:72:a4:fc:ea:90:bd:e5:5b:26:da:e3:
                    be:14:b0:06:53:d9:08:a8:18:88:e4:6c:f1:a1:2e:
                    b3:d5:aa:07:93:d0:1c:01:65:d8:b8:b0:4b:73:02:
                    ea:ee:02:18:7d:27:26:af:62:3b:a1:0d:48:5f:fe:
                    f3:88:02:88:c6:0d:8b:dc:50:01:53:de:78:5f:73:
                    5a:15:ee:42:9e:b1:56:83:f4:17:68:64:24:3c:63:
                    8d:2d:cf:23:8f:85:2f:ea:b5:76:8f:32:22:05:ba:
                    28:4a:81:21:0b:64:35:fc:f1:db:8a:51:07:ef:16:
                    e5:14:fb:5e:f7:2d:60:c6:69:e4:c1:ae:37:c9:d7:
                    e0:e1:a3:a7:e1:4e:96:89:43:1c:ae:ac:28:6e:00:
                    c5:0c:b2:9c:94:a3:67:da:26:c5:d4:47:42:54:0f:
                    0b:3e:61:6b:08:41:61:22:c2:05:bc:54:e1:bc:2f:
                    f9:33:c9:1f:0a:7b:4d:2c:64:07:31:31:41:7d:db:
                    3c:18:49:03:b8:2c:61:ca:9e:e0:fe:b1:34:46:60:
                    f5:54:3c:33:52:a5:de:8f:3a:4e:65:13:51:c5:72:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2E:82:59:BE:4D:8E:E2:55:5D:E8:45:00:B1:CE:4D:8C:A1:F9:7B
            X509v3 Authority Key Identifier:
                keyid:41:CF:30:FB:DC:22:0B:6E:4A:6F:A6:77:92:B3:B2:48:EE:CF:65:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:17:e4:d0:0b:60:6a:86:17:55:be:08:54:d9:18:f0:66:5a:
         bb:3e:f9:bb:f0:f3:94:bd:03:c9:9e:6f:d5:b6:ce:4d:cd:3f:
         f3:5b:d4:a6:e1:d2:a1:76:9d:a8:2f:f0:53:ec:01:cb:3b:5b:
         45:5a:cc:6a:ad:b4:81:4b:84:48:49:dd:71:ca:01:41:a8:61:
         20:69:71:bc:15:ac:f3:71:99:63:7e:6e:04:c3:7e:50:f3:3b:
         e1:d9:b1:54:4f:ab:60:4e:c0:1d:ae:71:f6:62:11:0f:f8:b1:
         84:bd:c7:85:ef:08:9a:1c:a6:7d:8d:e4:cc:ce:d8:21:5a:9b:
         d7:1d:c7:36:2d:3c:79:04:2e:25:e1:44:8e:9a:a5:b7:2c:a7:
         c7:ad:bc:ad:e3:61:0c:0f:5c:62:25:eb:6d:59:1f:ca:7d:8d:
         be:7f:3b:db:34:80:77:53:4a:59:2f:fb:9a:f7:b2:ea:dc:83:
         5c:bf:0b:77:b6:44:79:95:b3:66:30:ec:39:8e:f7:e0:0c:84:
         6d:25:21:4d:9d:09:ea:91:20:34:6d:61:f3:e1:ef:78:92:cd:
         a4:b4:87:d9:c6:83:d5:51:61:45:4c:ce:56:f8:79:a3:f9:be:
         c2:9d:f9:36:75:fb:70:31:09:98:2e:c9:59:7b:99:0d:ac:30:
         18:5d:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----