Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft
File:                     84B73A995F7E469C0FFD988D851B866DACA9AB74.mft (raw, json)
Hash identifier:          Pbyujt81Oc/DQC8fTBd0SHt1ThjDuk/PywpE8kK+24U=
Subject key identifier:   9F:33:46:6A:C4:4B:41:EB:A0:52:0B:8F:F9:96:9C:1B:51:DF:F0:8C
Authority key identifier: 84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74
Certificate issuer:       /CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
Certificate serial:       2A4CFB507BB4DD9690D02622F2B8A9264D0BECDB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft
Manifest number:          022F
Signing time:             Thu 24 Oct 2024 12:53:30 +0000
Manifest this update:     Thu 24 Oct 2024 12:48:30 +0000
Manifest next update:     Fri 25 Oct 2024 13:59:30 +0000
Files and hashes:         1: 84B73A995F7E469C0FFD988D851B866DACA9AB74.crl (hash: hgqd+JfsMtNwt42Da2jng64j8QkanSNXJ47Gi2ekqag=)
                          2: 326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa (hash: Ba/addKhejg17hZOADf/qh5k4qOtPpkMw6dX67YpIys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4c:fb:50:7b:b4:dd:96:90:d0:26:22:f2:b8:a9:26:4d:0b:ec:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
        Validity
            Not Before: Oct 24 12:48:30 2024 GMT
            Not After : Oct 25 13:59:30 2024 GMT
        Subject: CN=9F33466AC44B41EBA0520B8FF9969C1B51DFF08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:2f:04:b9:77:7b:c6:92:73:7f:6a:1d:29:
                    d5:da:25:ef:fd:17:69:56:cf:04:43:f2:94:2b:13:
                    a1:47:99:30:88:2b:14:a2:70:0d:3b:bb:72:ff:2d:
                    55:8d:0c:39:4b:64:b1:60:a9:81:f7:2f:28:18:6e:
                    ab:c2:8a:62:57:17:76:27:1a:a5:1b:a9:42:81:8f:
                    b3:a7:4a:55:ed:60:dc:8f:ef:15:96:70:86:d0:99:
                    53:ee:3b:c6:87:62:e4:1b:79:10:97:d7:b6:07:58:
                    90:20:d8:27:9e:ba:0e:62:e7:b6:3f:99:5d:7e:b4:
                    9b:ab:7f:e1:e7:dd:fc:a8:85:6a:0d:83:95:46:67:
                    41:03:53:64:e1:06:a0:b4:cc:9a:85:94:80:33:97:
                    47:f0:3a:3f:cc:1a:b7:0f:86:47:9b:6d:03:0e:9b:
                    07:c9:24:d4:90:cc:0b:34:fc:d9:e2:72:ae:4b:c5:
                    99:bc:79:67:96:e2:fa:c5:4c:74:b3:95:b1:ac:c3:
                    c0:83:9d:b8:3b:e0:b9:bb:9b:b6:f8:bd:b9:d3:4c:
                    16:8f:9b:d7:cb:ad:39:28:3f:70:11:08:41:52:7f:
                    47:ef:67:9c:8b:b1:58:d1:08:1f:af:ba:47:e4:b0:
                    4b:49:fa:e3:c0:99:d9:06:fa:30:d2:85:8e:e4:bf:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:33:46:6A:C4:4B:41:EB:A0:52:0B:8F:F9:96:9C:1B:51:DF:F0:8C
            X509v3 Authority Key Identifier:
                keyid:84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d3:f4:2a:3b:83:b5:3b:d4:66:b6:27:0e:3e:20:b5:ea:61:
         29:69:96:1c:4c:a2:20:bd:99:d9:0b:e6:2c:c9:3c:2d:1a:ee:
         e3:80:45:da:e2:78:1d:1e:9c:1c:35:1e:ee:32:9f:82:3c:0c:
         65:9e:e7:f6:bb:06:7f:ff:fd:69:01:cf:dd:dd:fb:0d:de:c3:
         b7:9d:1d:c2:f9:b9:b3:bf:26:62:b3:cc:68:6e:de:3d:5a:19:
         7c:36:dc:ea:0d:b4:3b:0c:47:46:47:d5:53:cb:82:10:ed:c3:
         2b:df:03:8e:d7:b0:75:d5:69:35:10:98:5e:8f:62:7f:bf:09:
         76:dc:24:f5:45:e8:45:15:cd:56:b5:fd:9d:40:be:0f:f9:b2:
         55:8d:1c:fd:65:4e:d0:ef:bf:2f:3b:6a:57:c9:f8:99:2c:f7:
         74:b6:90:de:3c:d2:78:4c:87:9f:03:39:b2:da:77:b5:98:b1:
         a0:5c:1d:58:82:13:dc:b5:82:2b:4e:47:99:47:0b:00:56:1f:
         c1:d4:10:96:c4:a6:38:a4:6d:40:69:75:27:56:be:25:ad:a2:
         d6:91:12:4d:e9:60:e7:58:9d:46:a7:7a:ee:ac:fc:db:6f:2b:
         9e:08:c9:3b:9f:30:7f:45:29:09:8a:e8:67:40:65:98:70:23:
         d0:c7:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----