Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9d149027-0d2c-4d25-95be-821aa20e2747/0/93DE6BA32228E5772CEEA7C4AA73252E8969A532.mft
File:                     93DE6BA32228E5772CEEA7C4AA73252E8969A532.mft (raw, json)
Hash identifier:          FA/2mtSsMBwDkXfxbJWMakWbUOEq+BlEN0xg6/ygR8Q=
Subject key identifier:   6B:79:F5:5D:37:74:42:D8:3C:15:D0:0B:F3:DF:2A:A7:50:A7:8B:82
Authority key identifier: 93:DE:6B:A3:22:28:E5:77:2C:EE:A7:C4:AA:73:25:2E:89:69:A5:32
Certificate issuer:       /CN=93de6ba32228e5772ceea7c4aa73252e8969a532
Certificate serial:       5E6D61AD948935007A8F71E6A4FDB279FF72E145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k95royIo5Xcs7qfEqnMlLolppTI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9d149027-0d2c-4d25-95be-821aa20e2747/0/93DE6BA32228E5772CEEA7C4AA73252E8969A532.mft
Manifest number:          01
Signing time:             Tue 09 Apr 2024 17:30:03 +0000
Manifest this update:     Tue 09 Apr 2024 17:25:03 +0000
Manifest next update:     Wed 10 Apr 2024 18:10:03 +0000
Files and hashes:         1: 93DE6BA32228E5772CEEA7C4AA73252E8969A532.crl (hash: WGrhAkimZO/y1v3pTJFdnWFohViuCKBYjbLVjPxZWpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6d:61:ad:94:89:35:00:7a:8f:71:e6:a4:fd:b2:79:ff:72:e1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93de6ba32228e5772ceea7c4aa73252e8969a532
        Validity
            Not Before: Apr  9 17:25:03 2024 GMT
            Not After : Apr 10 18:10:03 2024 GMT
        Subject: CN=6B79F55D377442D83C15D00BF3DF2AA750A78B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:50:64:41:5d:cb:eb:c5:ce:9a:76:9f:e2:
                    c6:fd:34:cd:35:c4:96:9b:04:72:74:86:a0:da:1c:
                    a6:ad:a8:d1:4a:c1:6f:81:41:cc:9d:3e:8d:e3:2b:
                    fe:46:ad:3b:90:32:43:2f:60:9d:eb:24:82:b6:b2:
                    a4:aa:0c:b3:1f:3a:c9:1a:05:fd:52:ef:82:27:45:
                    19:32:b5:ca:44:18:78:52:61:2a:0b:86:54:27:d7:
                    a4:58:1d:66:dd:33:0c:c1:8b:51:f6:e9:8f:b4:f9:
                    f3:33:5d:c2:1f:2e:c5:92:fc:0e:e3:cb:61:d8:34:
                    d7:68:32:66:0a:ba:06:b6:da:03:2b:b6:01:dc:94:
                    fd:1d:42:f5:e2:08:d9:5b:0e:0d:6f:dd:fa:df:d1:
                    46:18:d3:3e:60:8c:72:53:06:1f:aa:f1:40:29:58:
                    4c:4d:99:72:d9:3a:83:5d:7d:00:7b:ef:eb:e9:4b:
                    73:26:d4:0d:39:18:70:d2:86:b9:28:81:31:6c:ae:
                    34:10:c7:65:a6:87:7d:42:d9:d6:ac:44:a9:75:a0:
                    36:df:da:b9:90:b9:5b:08:e4:d0:8d:9c:de:50:ba:
                    76:9a:4e:00:ca:03:de:9c:77:55:f3:da:99:65:e1:
                    94:bf:aa:79:2f:19:00:8b:1b:89:61:5a:15:f0:00:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:79:F5:5D:37:74:42:D8:3C:15:D0:0B:F3:DF:2A:A7:50:A7:8B:82
            X509v3 Authority Key Identifier:
                keyid:93:DE:6B:A3:22:28:E5:77:2C:EE:A7:C4:AA:73:25:2E:89:69:A5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9d149027-0d2c-4d25-95be-821aa20e2747/0/93DE6BA32228E5772CEEA7C4AA73252E8969A532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k95royIo5Xcs7qfEqnMlLolppTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9d149027-0d2c-4d25-95be-821aa20e2747/0/93DE6BA32228E5772CEEA7C4AA73252E8969A532.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:90:f2:d1:9d:08:16:64:5b:cf:58:63:8a:ed:84:b7:ed:
         c8:1e:01:48:3b:7a:6a:38:22:10:98:5d:e1:ea:d3:7d:b9:d4:
         5a:c9:61:ee:4a:a0:d6:df:01:f0:60:39:b3:d7:11:b7:f6:00:
         e1:7c:1b:f1:50:db:01:c8:c7:2a:01:4e:14:18:19:98:f9:48:
         73:14:e9:ae:aa:a9:10:cf:b7:02:cd:c0:b9:df:2c:31:3f:87:
         1e:03:01:80:37:df:7a:9d:ca:64:c1:9c:f4:fc:ec:32:a8:39:
         84:89:5b:9f:f1:15:bf:a3:a9:aa:52:39:ca:85:2f:02:1c:36:
         3c:a7:9d:be:73:e1:ec:d5:b5:59:44:6c:fb:33:8c:d0:f9:72:
         56:00:15:a6:65:ca:88:2d:6c:3d:4d:2d:11:54:c1:3b:27:20:
         15:75:c6:60:62:1d:d7:b0:94:29:b5:e9:bc:a0:73:d8:71:59:
         d7:9d:2c:5d:61:c5:ae:b9:0d:75:e2:24:8d:e5:b2:01:80:6b:
         1f:4e:66:ec:f8:a0:2d:7b:ef:bf:7c:01:90:b1:8e:9c:88:a0:
         fc:ac:24:1c:c5:3b:76:0d:34:be:43:3f:4d:2b:5c:8b:5f:5f:
         95:f7:ab:c7:17:c9:82:90:97:fe:29:4f:41:aa:46:74:50:d3:
         ae:8a:04:b5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXm1hrZSJNQB6j3HmpP2yef9y4UUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNkZTZiYTMyMjI4ZTU3NzJjZWVhN2M0YWE3MzI1MmU4
OTY5YTUzMjAeFw0yNDA0MDkxNzI1MDNaFw0yNDA0MTAxODEwMDNaMDMxMTAvBgNV
BAMTKDZCNzlGNTVEMzc3NDQyRDgzQzE1RDAwQkYzREYyQUE3NTBBNzhCODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xFBkQV3L68XOmnaf4sb9NM01
xJabBHJ0hqDaHKatqNFKwW+BQcydPo3jK/5GrTuQMkMvYJ3rJIK2sqSqDLMfOska
Bf1S74InRRkytcpEGHhSYSoLhlQn16RYHWbdMwzBi1H26Y+0+fMzXcIfLsWS/A7j
y2HYNNdoMmYKuga22gMrtgHclP0dQvXiCNlbDg1v3frf0UYY0z5gjHJTBh+q8UAp
WExNmXLZOoNdfQB77+vpS3Mm1A05GHDShrkogTFsrjQQx2Wmh31C2dasRKl1oDbf
2rmQuVsI5NCNnN5QunaaTgDKA96cd1Xz2pll4ZS/qnkvGQCLG4lhWhXwAA5vAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUa3n1XTd0Qtg8FdAL898qp1Cni4IwHwYDVR0j
BBgwFoAUk95royIo5Xcs7qfEqnMlLolppTIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWQxNDkwMjctMGQyYy00ZDI1LTk1YmUtODIxYWEyMGUy
NzQ3LzAvOTNERTZCQTMyMjI4RTU3NzJDRUVBN0M0QUE3MzI1MkU4OTY5QTUzMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2s5NXJveUlvNVhjczdxZkVxbk1sTG9s
cHBUSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZDE0OTAyNy0w
ZDJjLTRkMjUtOTViZS04MjFhYTIwZTI3NDcvMC85M0RFNkJBMzIyMjhFNTc3MkNF
RUE3QzRBQTczMjUyRTg5NjlBNTMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKmQ8tGdCBZkW89YY4rt
hLftyB4BSDt6ajgiEJhd4erTfbnUWslh7kqg1t8B8GA5s9cRt/YA4Xwb8VDbAcjH
KgFOFBgZmPlIcxTprqqpEM+3As3Aud8sMT+HHgMBgDffep3KZMGc9PzsMqg5hIlb
n/EVv6OpqlI5yoUvAhw2PKedvnPh7NW1WURs+zOM0PlyVgAVpmXKiC1sPU0tEVTB
OycgFXXGYGId17CUKbXpvKBz2HFZ150sXWHFrrkNdeIkjeWyAYBrH05m7PigLXvv
v3wBkLGOnIig/KwkHMU7dg00vkM/TStci19flferxxfJgpCX/ilPQapGdFDTrooE
tQ==