Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.mft
File:                     8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.mft (raw, json)
Hash identifier:          jcGco1VGiEjbaD9i/AagVSGUk+NhUeToZh0+gYliDeA=
Subject key identifier:   85:12:5A:F1:C9:C3:4E:E9:84:CC:31:AB:47:5D:25:4A:56:49:23:F0
Authority key identifier: 8F:FB:5B:F8:CE:41:06:EB:27:D0:5B:DB:7F:81:F6:0B:40:E4:8E:B8
Certificate issuer:       /CN=8ffb5bf8ce4106eb27d05bdb7f81f60b40e48eb8
Certificate serial:       30A1C8C0337BFF6241FEA9338ECBFBA6B8351918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_tb-M5BBusn0Fvbf4H2C0Dkjrg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.mft
Manifest number:          FB
Signing time:             Sun 24 Sep 2023 20:57:34 +0000
Manifest this update:     Sun 24 Sep 2023 20:52:34 +0000
Manifest next update:     Tue 26 Sep 2023 00:56:34 +0000
Files and hashes:         1: 3139332e33352e3232362e302f32342d3234203d3e20323038373936.roa (hash: WXVNJNusmqwxRyLzkemzxnkdMspayhg4GR5B/n3xnBM=)
                          2: 8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.crl (hash: rPeUrgavok2PkdnqF4SFieNdGFMzmJYAZ0qQYOvbCFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a1:c8:c0:33:7b:ff:62:41:fe:a9:33:8e:cb:fb:a6:b8:35:19:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffb5bf8ce4106eb27d05bdb7f81f60b40e48eb8
        Validity
            Not Before: Sep 24 20:52:34 2023 GMT
            Not After : Sep 26 00:56:34 2023 GMT
        Subject: CN=85125AF1C9C34EE984CC31AB475D254A564923F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:a0:00:ed:83:dd:96:14:1c:e3:b4:30:e9:
                    d4:ac:24:6c:2a:bf:6a:d9:40:21:33:40:e0:ab:b3:
                    b7:42:55:1b:cc:ba:ea:33:f1:7a:29:bf:f6:9a:ed:
                    3d:27:1a:b6:1b:38:34:6d:a6:97:8e:e3:4e:c4:3d:
                    fb:0b:96:70:62:4e:4c:69:f0:a1:f5:88:63:d6:4e:
                    a8:27:15:80:1f:cb:d1:78:17:91:b9:87:d1:c5:25:
                    e3:46:7d:c3:08:29:12:af:42:b1:17:29:62:72:d1:
                    76:45:1b:d5:e8:f8:df:c0:5e:3d:60:b9:5d:c7:75:
                    f1:2d:97:15:a7:9d:38:5c:b0:ca:35:3e:2e:9e:63:
                    93:3d:de:a0:eb:e8:bf:19:f0:dc:d3:b0:19:8b:be:
                    40:fe:b7:96:0a:5c:aa:d5:99:ec:01:1a:b2:54:0a:
                    35:7f:dd:9a:65:01:03:8f:30:40:91:f3:82:a2:67:
                    ff:3a:cc:ec:97:74:ba:ff:e0:93:74:af:72:3f:8d:
                    6d:20:e3:46:3d:67:e9:be:e4:f7:84:3d:58:f5:86:
                    d3:6b:cc:d9:dd:64:0d:b6:c5:d4:ea:3e:3b:33:8f:
                    14:e7:c1:24:60:2c:ab:53:d4:28:00:7c:58:5e:f6:
                    d2:75:59:be:1c:4b:82:ec:4e:c9:d3:30:4b:b0:a0:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:5A:F1:C9:C3:4E:E9:84:CC:31:AB:47:5D:25:4A:56:49:23:F0
            X509v3 Authority Key Identifier:
                keyid:8F:FB:5B:F8:CE:41:06:EB:27:D0:5B:DB:7F:81:F6:0B:40:E4:8E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_tb-M5BBusn0Fvbf4H2C0Dkjrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:34:09:64:2b:da:f6:a8:88:4e:78:fc:df:61:31:22:81:fa:
         98:0c:b6:ca:2e:bc:86:e4:b1:e6:d7:fc:36:8f:d0:ed:6d:b4:
         bf:e0:3c:f6:61:e4:b7:d5:03:54:40:6e:9d:a9:60:f7:d2:4b:
         04:35:c3:06:e2:7f:8e:2d:54:de:90:6d:7d:f5:73:10:af:8a:
         82:9d:f2:9a:bc:15:8f:f8:89:4b:cd:5f:30:33:20:09:ce:b4:
         3e:bc:e4:24:c6:45:2a:84:28:7e:eb:7c:9d:f1:37:cc:59:d5:
         0a:bf:d9:73:84:6e:7c:6e:69:ad:18:4e:0e:0e:bc:31:8f:bd:
         05:af:74:43:a3:91:cd:79:05:04:43:d6:c8:8e:47:e9:53:60:
         76:6e:65:f0:94:43:dd:15:2c:4f:c2:a6:48:8d:2b:c7:7e:8d:
         42:9a:0c:96:ed:be:d6:21:02:bd:21:29:a5:b1:f1:a6:a8:3f:
         8e:45:6e:27:0e:29:4d:28:c6:b9:1a:a3:4e:b6:e5:0d:c2:0d:
         8a:1c:fb:28:58:f2:46:e9:0c:61:96:5e:5a:77:73:9a:ea:43:
         11:7e:48:8e:46:fa:10:16:a9:35:4a:33:78:4b:8f:2b:3b:86:
         4e:7c:16:ad:e6:f6:15:dd:c8:24:3e:9a:fc:14:3d:5e:ae:99:
         05:9d:bd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----