Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft
File:                     2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft (raw, json)
Hash identifier:          JLZqSViJi1zOitZUK1w13OCjJGddhnB+SgnNKQKSW5M=
Subject key identifier:   A5:38:37:85:8C:29:57:C4:2B:0D:01:32:26:A6:76:D5:51:69:8F:56
Authority key identifier: 26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1
Certificate issuer:       /CN=2699D31EA71B96E1A99C35B1F5626ACC517EE2E1
Certificate serial:       4054B6096652A040B8228D3EC8075E8FC6E713DD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft
Manifest number:          0178
Signing time:             Thu 24 Oct 2024 11:28:29 +0000
Manifest this update:     Thu 24 Oct 2024 11:23:29 +0000
Manifest next update:     Fri 25 Oct 2024 14:19:29 +0000
Files and hashes:         1: 2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.crl (hash: i3ecsF14tb34kb+Rj5eHm5PlZtjtM1/Eho8dKd7lG1s=)
                          2: 326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa (hash: 7wp0Ew4mNmmbkRjESOEZT2oGkWblndAOOk+JoYL9ivo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:54:b6:09:66:52:a0:40:b8:22:8d:3e:c8:07:5e:8f:c6:e7:13:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2699D31EA71B96E1A99C35B1F5626ACC517EE2E1
        Validity
            Not Before: Oct 24 11:23:29 2024 GMT
            Not After : Oct 25 14:19:29 2024 GMT
        Subject: CN=A53837858C2957C42B0D013226A676D551698F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:e0:39:b3:8e:91:b6:04:d6:cc:d3:4b:9c:
                    fd:a3:56:7b:9e:0b:09:e7:d0:e2:0e:a0:20:08:a0:
                    af:13:fe:3f:71:43:75:2a:01:ce:95:68:c9:57:9b:
                    8b:89:ed:f0:91:40:a8:18:fc:d1:ea:17:25:4e:19:
                    7f:0b:28:22:fd:db:d1:86:d7:cc:1f:39:ff:f2:e2:
                    62:eb:5a:39:89:ab:e1:75:bb:b8:49:a9:7d:c2:84:
                    ba:17:a5:59:13:bf:ef:41:0f:59:e1:09:04:68:10:
                    ca:be:33:2d:a5:c1:37:1b:3a:94:d1:05:1c:0c:7f:
                    73:73:7d:ce:c3:86:83:7d:36:bd:b1:84:17:28:3e:
                    78:2f:9d:95:f4:63:7c:88:65:b6:42:0e:e1:01:5a:
                    4b:9b:2b:6c:0b:6f:5f:d3:32:a7:8d:58:ee:69:bc:
                    1b:c9:41:51:fc:70:13:00:69:14:8a:b4:e8:ee:7e:
                    db:69:ae:0e:c6:53:a8:9f:7d:30:62:93:bd:3b:4f:
                    5c:a6:4a:13:d8:b9:c0:66:61:19:c0:50:7e:d0:0d:
                    51:40:2d:2f:de:30:d6:38:50:fd:e5:87:45:3c:31:
                    7b:6f:9f:38:91:39:f3:49:68:96:59:40:45:33:87:
                    ce:a4:fd:08:8a:0d:c4:b2:b3:73:31:70:7a:26:7c:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:38:37:85:8C:29:57:C4:2B:0D:01:32:26:A6:76:D5:51:69:8F:56
            X509v3 Authority Key Identifier:
                keyid:26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:56:c1:bd:d3:db:1c:9f:bd:fc:f1:fe:a9:9a:9e:01:32:b7:
         ad:36:fe:57:d8:c7:20:0b:50:b7:d9:4b:e9:b4:c0:1f:5c:9e:
         5f:5a:30:1a:92:8c:6e:1c:55:f1:45:9b:4f:54:48:a1:78:55:
         31:5b:de:e0:a2:f5:21:38:d8:63:44:86:da:e8:73:ad:c2:f2:
         68:af:6d:d1:6f:5c:d5:af:6c:41:ca:4f:20:fa:38:5b:75:6e:
         b3:52:fb:b5:37:72:7a:b7:3d:af:62:f3:0e:65:f2:c9:34:12:
         34:e9:04:93:ee:4e:25:69:e7:a0:4c:4b:ca:6c:94:0f:43:2d:
         e1:52:f7:7b:18:5b:98:df:68:26:f5:ac:65:03:29:d9:f5:34:
         c8:3d:36:89:46:86:0f:71:2e:6e:7d:da:ee:d3:a6:d7:0f:3d:
         2b:80:ab:36:86:22:e3:26:db:02:e5:c5:59:e9:86:c1:04:c0:
         3f:f1:da:4e:16:9f:25:64:ec:c1:ec:8b:72:80:8f:e9:73:0e:
         a3:67:89:68:7a:b4:43:80:ac:e4:ef:85:96:25:4d:22:fa:ce:
         51:66:66:01:9a:f9:45:1c:02:03:07:45:56:6d:46:a3:b5:1b:
         44:79:8a:00:7f:40:a9:02:f8:df:2c:26:b4:85:0c:bb:44:ea:
         81:39:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----