Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/1/66D2F438D4B7E19C3D74AB88A9B399F011B22519.mft
File:                     66D2F438D4B7E19C3D74AB88A9B399F011B22519.mft (raw, json)
Hash identifier:          ibLj3ePSlxK6ojS8CR8tZ+V/3uTmnBT+R3e0DM7ovEE=
Subject key identifier:   EB:1B:DC:63:6C:98:43:9B:9E:2C:D2:C5:80:EF:7C:75:9C:4E:F5:35
Authority key identifier: 66:D2:F4:38:D4:B7:E1:9C:3D:74:AB:88:A9:B3:99:F0:11:B2:25:19
Certificate issuer:       /CN=66D2F438D4B7E19C3D74AB88A9B399F011B22519
Certificate serial:       4F02324C5EB59003CC6D78E9B02623C5B5D77A2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/66D2F438D4B7E19C3D74AB88A9B399F011B22519.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/1/66D2F438D4B7E19C3D74AB88A9B399F011B22519.mft
Manifest number:          1C
Signing time:             Wed 06 Mar 2024 11:20:02 +0000
Manifest this update:     Wed 06 Mar 2024 11:15:02 +0000
Manifest next update:     Thu 07 Mar 2024 14:43:02 +0000
Files and hashes:         1: 326130373a323438373a3a2f33322d3438203d3e20323135383238.roa (hash: ShEqva2r8d8bObcmrfnav5xICzQvvswNsxHhvWjVuwE=)
                          2: 66D2F438D4B7E19C3D74AB88A9B399F011B22519.crl (hash: pgF0B7An+7a9CB1jqHXSzuUYq6VkxwXoUliozKKROxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:02:32:4c:5e:b5:90:03:cc:6d:78:e9:b0:26:23:c5:b5:d7:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D2F438D4B7E19C3D74AB88A9B399F011B22519
        Validity
            Not Before: Mar  6 11:15:02 2024 GMT
            Not After : Mar  7 14:43:02 2024 GMT
        Subject: CN=EB1BDC636C98439B9E2CD2C580EF7C759C4EF535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:33:40:2b:6b:65:be:82:2b:23:56:81:a7:e7:
                    a8:b5:59:2d:37:81:a5:d1:8c:6a:18:f4:37:11:4f:
                    1a:af:b2:2f:64:65:e5:5b:e9:9e:59:a9:b9:10:fe:
                    a0:78:d7:96:f6:3f:7e:e5:aa:6c:de:51:dc:9d:44:
                    31:1f:36:2b:ac:0d:8c:1c:75:79:84:8b:be:d4:64:
                    9f:8f:b5:de:17:50:aa:6d:a6:3f:52:e2:90:da:21:
                    46:58:36:5a:9e:1e:e8:69:84:17:d5:00:30:35:03:
                    99:e0:c6:f0:58:8d:9f:d1:9f:e8:d0:09:8c:12:04:
                    1f:27:63:55:6b:77:d4:2b:90:e2:e2:86:ee:95:cb:
                    81:11:cf:95:cc:ee:d6:87:ac:97:11:a5:7f:88:ea:
                    b4:35:d2:1a:bd:ba:55:f4:0a:d0:ec:b8:8e:36:27:
                    c7:ef:86:04:40:37:36:30:68:6f:47:98:5d:44:c8:
                    41:99:d5:bd:aa:4c:6c:26:7e:25:6f:e2:36:f7:3e:
                    e5:9d:8e:bb:da:16:ea:18:37:38:25:82:18:3d:06:
                    3e:ed:93:01:45:a1:f7:12:91:e0:e4:ed:c9:44:ab:
                    a8:95:36:44:76:ec:37:00:91:93:5c:72:3f:08:f5:
                    ef:e3:9d:40:e5:67:e3:47:60:d5:97:7a:3b:5f:13:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1B:DC:63:6C:98:43:9B:9E:2C:D2:C5:80:EF:7C:75:9C:4E:F5:35
            X509v3 Authority Key Identifier:
                keyid:66:D2:F4:38:D4:B7:E1:9C:3D:74:AB:88:A9:B3:99:F0:11:B2:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/1/66D2F438D4B7E19C3D74AB88A9B399F011B22519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/66D2F438D4B7E19C3D74AB88A9B399F011B22519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/1/66D2F438D4B7E19C3D74AB88A9B399F011B22519.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:23:b0:af:c9:b0:76:43:bf:24:9e:12:36:04:e7:39:b1:a1:
         af:ce:d3:9d:48:db:65:9f:52:cb:e3:07:99:94:6b:b6:76:a7:
         d0:42:d5:a1:c3:e2:30:f9:f4:6f:d2:72:2f:d3:1e:6e:b2:ed:
         b8:f2:70:fe:ea:5d:ad:4d:f6:45:5a:8b:7e:66:be:af:2e:c8:
         51:ae:2b:15:73:f5:36:d9:fd:df:cc:a8:75:27:c9:5a:f2:42:
         1f:ce:70:88:57:df:98:37:cd:89:53:40:14:16:e4:e5:17:6f:
         6a:b5:07:32:43:48:37:c4:dd:fe:d3:98:96:06:ee:89:96:55:
         67:5e:dc:5e:ad:a6:27:2d:d7:7d:0f:d9:d4:6d:3c:8a:f0:1b:
         6c:fc:ea:7d:ce:27:be:5e:d6:8b:e2:9e:62:5f:5a:e1:f5:ac:
         1a:37:61:49:26:bb:ac:30:7f:41:4b:40:42:fb:05:d2:e7:55:
         2a:a0:cb:1b:6b:77:52:3e:7b:e5:ac:f7:37:62:80:7f:f2:c0:
         2f:1b:e1:81:80:1a:a8:f4:63:69:17:a4:bb:79:cb:8b:2b:48:
         9a:a6:b3:e1:48:fd:5f:09:ff:6a:c7:d7:25:2b:59:60:7d:64:
         a6:c6:03:ed:d9:45:89:bf:1f:92:55:b7:5c:6a:6c:c0:2b:c3:
         06:75:12:02
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUTwIyTF61kAPMbXjpsCYjxbXXeiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZEMkY0MzhENEI3RTE5QzNENzRBQjg4QTlCMzk5RjAx
MUIyMjUxOTAeFw0yNDAzMDYxMTE1MDJaFw0yNDAzMDcxNDQzMDJaMDMxMTAvBgNV
BAMTKEVCMUJEQzYzNkM5ODQzOUI5RTJDRDJDNTgwRUY3Qzc1OUM0RUY1MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpM0Ara2W+gisjVoGn56i1WS03
gaXRjGoY9DcRTxqvsi9kZeVb6Z5ZqbkQ/qB415b2P37lqmzeUdydRDEfNiusDYwc
dXmEi77UZJ+Ptd4XUKptpj9S4pDaIUZYNlqeHuhphBfVADA1A5ngxvBYjZ/Rn+jQ
CYwSBB8nY1Vrd9QrkOLihu6Vy4ERz5XM7taHrJcRpX+I6rQ10hq9ulX0CtDsuI42
J8fvhgRANzYwaG9HmF1EyEGZ1b2qTGwmfiVv4jb3PuWdjrvaFuoYNzglghg9Bj7t
kwFFofcSkeDk7clEq6iVNkR27DcAkZNccj8I9e/jnUDlZ+NHYNWXejtfE58fAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU6xvcY2yYQ5ueLNLFgO98dZxO9TUwHwYDVR0j
BBgwFoAUZtL0ONS34Zw9dKuIqbOZ8BGyJRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzEvNjZEMkY0MzhENEI3RTE5QzNENzRBQjg4QTlCMzk5RjAxMUIyMjUxOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTFjODI2OS00NTFlLTRk
MGQtOTNlNC1kMTExZWM4ZGRjZWUvMC82NkQyRjQzOEQ0QjdFMTlDM0Q3NEFCODhB
OUIzOTlGMDExQjIyNTE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzljMGVkMDQ2LWZhOTUtNDVjMy05MTQ2LTk3MWRiOGE5ZThiYi8xLzY2RDJGNDM4
RDRCN0UxOUMzRDc0QUI4OEE5QjM5OUYwMTFCMjI1MTkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjI7Cv
ybB2Q78knhI2BOc5saGvztOdSNtln1LL4weZlGu2dqfQQtWhw+Iw+fRv0nIv0x5u
su248nD+6l2tTfZFWot+Zr6vLshRrisVc/U22f3fzKh1J8la8kIfznCIV9+YN82J
U0AUFuTlF29qtQcyQ0g3xN3+05iWBu6JllVnXtxeraYnLdd9D9nUbTyK8Bts/Op9
zie+XtaL4p5iX1rh9awaN2FJJrusMH9BS0BC+wXS51UqoMsba3dSPnvlrPc3YoB/
8sAvG+GBgBqo9GNpF6S7ecuLK0iaprPhSP1fCf9qx9clK1lgfWSmxgPt2UWJvx+S
VbdcamzAK8MGdRIC
-----END CERTIFICATE-----