Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.mft
File:                     4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.mft (raw, json)
Hash identifier:          6JDrt92JcwOrFSAfjPkDvhrl6Y5rS4vb4bgiv2KDwpM=
Subject key identifier:   CE:16:A1:6D:C6:C3:99:77:C3:F9:6E:E7:8D:D1:B8:5F:20:EB:DB:24
Authority key identifier: 4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1
Certificate issuer:       /CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
Certificate serial:       2B9EC5A544E8AC8A3F9930B769D90BCCC56B6AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.mft
Manifest number:          02E2
Signing time:             Mon 22 Jul 2024 03:26:20 +0000
Manifest this update:     Mon 22 Jul 2024 03:21:20 +0000
Manifest next update:     Tue 23 Jul 2024 03:57:20 +0000
Files and hashes:         1: 4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.crl (hash: gWAuvKAHUDofDWpt1AwRNLJiCrP2B/v+Elz9sxmxvu0=)
                          2: 33312e32342e3235332e302f32342d3234203d3e203136323736.roa (hash: lqqtBBWw7H+BIaFzlu+HUCeNDetSUo6AnfJBO7VI8lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9e:c5:a5:44:e8:ac:8a:3f:99:30:b7:69:d9:0b:cc:c5:6b:6a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
        Validity
            Not Before: Jul 22 03:21:20 2024 GMT
            Not After : Jul 23 03:57:20 2024 GMT
        Subject: CN=CE16A16DC6C39977C3F96EE78DD1B85F20EBDB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:df:64:52:c3:4c:27:94:50:9e:c7:15:3e:
                    b6:45:a6:42:9c:e2:38:8a:20:e3:3b:22:97:9d:e4:
                    27:f7:95:39:f9:7e:cd:d4:0b:1b:68:95:3e:95:6d:
                    3d:87:a6:e3:26:10:9c:06:43:3a:59:8b:04:c7:05:
                    6a:02:b7:f7:b9:f0:98:a8:ed:b6:09:9e:cb:ae:36:
                    af:ac:2b:3e:06:3e:0c:6d:ec:f9:58:23:8f:49:fb:
                    c5:5c:7a:92:55:51:f8:4f:fc:ea:ee:5a:eb:88:57:
                    92:88:9f:05:bb:79:08:bb:e1:90:75:1a:bd:32:db:
                    9a:68:08:1e:2e:8d:8d:89:38:84:ab:1a:e0:5f:b7:
                    2d:f4:1c:fc:14:77:91:e7:7c:9f:cd:0c:6f:8e:24:
                    e0:05:1f:f4:30:43:64:0c:15:b3:05:dd:e0:f7:d4:
                    b6:d5:d9:3d:23:07:03:21:01:f2:2e:5e:48:9c:22:
                    88:ae:b4:52:de:b3:88:53:e6:fc:8f:de:a5:ae:d5:
                    c1:8b:d3:be:31:08:f8:e0:a6:82:fb:24:f9:95:9b:
                    82:0b:e7:4d:39:a3:48:a2:05:4a:12:6e:82:33:f9:
                    d7:84:ae:eb:62:1f:9e:68:52:6d:d4:a8:17:94:07:
                    a8:f9:e0:69:07:fc:be:56:e8:28:2b:77:b9:41:cb:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:A1:6D:C6:C3:99:77:C3:F9:6E:E7:8D:D1:B8:5F:20:EB:DB:24
            X509v3 Authority Key Identifier:
                keyid:4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:6c:a6:70:d4:41:27:9f:9f:d9:16:5c:a4:5f:7b:36:a0:
         d6:62:4b:88:17:d3:28:31:bf:56:7d:bc:d9:28:77:1a:f9:f7:
         46:6c:cc:3f:96:a8:01:9a:49:a0:61:85:27:ef:3e:e9:fc:39:
         aa:e9:99:d9:10:a9:03:71:6e:b0:b9:d8:f3:79:78:d6:3a:f9:
         34:85:1c:a1:c1:c9:05:e8:cb:05:7e:23:d6:2f:fa:59:7c:09:
         e1:14:62:0a:96:3f:56:0a:6e:b2:57:6b:2f:45:01:b3:43:75:
         7d:45:78:55:c8:65:61:ba:80:23:25:0a:bf:5e:f8:13:21:a1:
         a1:fe:a3:ee:e9:e5:d5:22:1c:41:b6:c7:a1:84:d3:a3:bd:de:
         bb:1c:ae:00:79:58:25:06:b8:77:75:3e:14:4d:fc:cf:31:1b:
         6b:06:81:d5:0d:6c:a8:bc:4a:7f:7a:20:a6:82:1f:33:64:2c:
         fa:97:9e:d0:ba:20:94:61:ae:8d:f2:38:91:ea:2a:3b:4c:17:
         b3:3d:4e:0b:c9:fd:c4:d7:af:ce:79:c1:9e:22:df:a1:98:5f:
         80:bb:4b:a7:31:ac:81:15:ae:14:0a:10:a5:47:d0:9c:6f:05:
         5b:e2:ba:1a:fb:8a:03:39:03:43:ff:f4:db:73:a6:51:ac:26:
         07:41:d7:49
-----BEGIN CERTIFICATE-----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