Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/4933E82359A31E92233CED54CD674AE9D68FB569.mft
File:                     4933E82359A31E92233CED54CD674AE9D68FB569.mft (raw, json)
Hash identifier:          35tdhuZnSQuz+Zx7gikFfI8k23hzA5jIiKU5/ia1+pM=
Subject key identifier:   69:2B:AE:15:7D:A4:79:5D:91:9C:56:C3:F6:10:91:E4:1E:BE:D7:29
Authority key identifier: 49:33:E8:23:59:A3:1E:92:23:3C:ED:54:CD:67:4A:E9:D6:8F:B5:69
Certificate issuer:       /CN=4933E82359A31E92233CED54CD674AE9D68FB569
Certificate serial:       487A4F401E2BB9A125D66C74842ED0481F8F4A3C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/4933E82359A31E92233CED54CD674AE9D68FB569.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/4933E82359A31E92233CED54CD674AE9D68FB569.mft
Manifest number:          14
Signing time:             Sat 13 Apr 2024 03:43:40 +0000
Manifest this update:     Sat 13 Apr 2024 03:38:40 +0000
Manifest next update:     Sun 14 Apr 2024 06:03:40 +0000
Files and hashes:         1: 4933E82359A31E92233CED54CD674AE9D68FB569.crl (hash: s1jUkODmBUORNQ28gVsw4zT++D1cF+HPhIBqC4ht1ww=)
                          2: 326130373a323438373a3a2f33322d3438203d3e20323135383238.roa (hash: vkuDOfDy9gmFhFLg4+zl0wMF3xsgiDaU0WJp0H8+3sc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7a:4f:40:1e:2b:b9:a1:25:d6:6c:74:84:2e:d0:48:1f:8f:4a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4933E82359A31E92233CED54CD674AE9D68FB569
        Validity
            Not Before: Apr 13 03:38:40 2024 GMT
            Not After : Apr 14 06:03:40 2024 GMT
        Subject: CN=692BAE157DA4795D919C56C3F61091E41EBED729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:34:37:fe:da:a6:60:d1:71:71:7f:5f:83:
                    59:5e:8f:06:82:ca:4e:e2:83:18:47:7a:fc:7a:5b:
                    49:84:05:4d:b1:0a:67:23:c2:02:30:c0:43:12:a6:
                    b9:b0:8e:c9:b0:cb:89:32:05:53:79:16:f6:41:23:
                    94:be:8f:bc:49:13:1e:f3:4d:6b:d8:7c:79:ff:87:
                    3d:f0:a7:cb:42:69:3e:03:82:96:a9:3c:89:ca:fa:
                    67:d0:9c:de:5d:a7:79:f7:aa:b5:94:4c:45:2a:cf:
                    6e:e3:61:21:8b:ad:de:69:43:35:12:b6:db:0e:62:
                    4f:fa:55:d2:97:73:23:01:4a:ee:1f:fc:c6:d0:ca:
                    bf:12:d3:41:dc:8d:87:1f:cf:cc:ca:71:70:e5:ed:
                    b5:d6:a9:37:61:e9:f9:41:9c:3f:01:e2:7c:95:8e:
                    4c:25:86:7b:78:66:d1:7f:97:22:f0:26:e4:bc:4a:
                    de:1f:17:ee:3b:ca:8a:a6:cd:2a:80:c7:10:dd:c1:
                    3c:ce:9c:d4:04:f2:4b:de:3c:d8:fd:c0:d1:a5:7b:
                    38:32:02:c3:5c:8e:96:bd:b6:c3:e4:9f:fb:a1:48:
                    68:25:6d:29:95:f8:ac:66:6d:e5:6a:af:2a:1c:59:
                    98:e0:9f:51:98:2a:ea:4c:47:8d:83:45:93:46:ca:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2B:AE:15:7D:A4:79:5D:91:9C:56:C3:F6:10:91:E4:1E:BE:D7:29
            X509v3 Authority Key Identifier:
                keyid:49:33:E8:23:59:A3:1E:92:23:3C:ED:54:CD:67:4A:E9:D6:8F:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/4933E82359A31E92233CED54CD674AE9D68FB569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/4933E82359A31E92233CED54CD674AE9D68FB569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/4933E82359A31E92233CED54CD674AE9D68FB569.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:67:d8:10:ca:8d:d8:cc:63:89:cb:dd:fb:73:5d:87:12:79:
         d9:7d:c7:60:3a:85:83:53:a9:4e:1a:d9:ef:8e:de:fd:b3:6b:
         e6:d6:49:14:10:c0:aa:a6:8f:7f:c6:75:9e:49:cc:92:17:4c:
         bb:ea:a2:fa:98:5c:f0:4b:41:c8:f0:54:90:e3:61:74:09:e6:
         8f:4a:17:92:99:9a:a1:79:f8:04:ae:c4:f9:fe:46:2c:b3:27:
         47:a0:33:58:d6:d3:13:d6:34:b4:cb:15:ca:e7:1a:33:f9:98:
         c4:3c:88:54:59:3a:cc:6f:49:88:a9:7c:6c:a3:45:6a:76:59:
         46:81:32:26:00:c2:6a:e2:5e:0b:a1:ff:c3:72:0a:98:d7:fe:
         57:51:2f:bb:34:01:6f:bc:d2:7d:66:79:f1:6e:4a:01:73:4c:
         5d:d8:8b:03:4b:1d:87:a7:35:55:ae:4a:84:47:c6:ae:e8:0e:
         e6:87:d7:f3:4e:f4:e4:13:e8:eb:b2:d6:77:b6:a0:0f:43:bb:
         6e:ff:32:25:c1:50:f5:a1:97:f1:3a:0e:ab:81:8d:87:04:d3:
         99:5e:f4:27:d3:10:34:59:a2:f4:54:df:bb:d5:85:9f:fa:58:
         f4:de:7b:16:83:a3:a4:30:94:a9:e1:6f:92:c2:52:62:17:6b:
         3d:3e:4c:3a
-----BEGIN CERTIFICATE-----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