Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.mft
File:                     493377F0BD467548DA4CCD542329A7156B8972A2.mft (raw, json)
Hash identifier:          itkmj59sRhyRBT6OYNtq8mhi5z6+JDrQnQmq6GYvuq0=
Subject key identifier:   45:61:DD:4F:71:BF:A6:48:DB:C3:5F:66:EB:23:85:16:AF:C8:02:B5
Authority key identifier: 49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
Certificate issuer:       /CN=493377f0bd467548da4ccd542329a7156b8972a2
Certificate serial:       1636D8A0FF82A87FA50046027BCD9C2A6A9FDA96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.mft
Manifest number:          0156
Signing time:             Thu 30 Nov 2023 09:50:58 +0000
Manifest this update:     Thu 30 Nov 2023 09:45:58 +0000
Manifest next update:     Fri 01 Dec 2023 12:40:58 +0000
Files and hashes:         1: 3134362e31392e32332e302f32342d3234203d3e203631333137.roa (hash: P+g/RSKt4HAxR9HohWdfZOzZyozkGT2slBFYD2b43hk=)
                          2: 493377F0BD467548DA4CCD542329A7156B8972A2.crl (hash: u8TgwW+YEfcZ39Bz3NiFAa0KvjFjE+uky86xYpgfCpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:d8:a0:ff:82:a8:7f:a5:00:46:02:7b:cd:9c:2a:6a:9f:da:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493377f0bd467548da4ccd542329a7156b8972a2
        Validity
            Not Before: Nov 30 09:45:58 2023 GMT
            Not After : Dec  1 12:40:58 2023 GMT
        Subject: CN=4561DD4F71BFA648DBC35F66EB238516AFC802B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:1a:65:46:43:d8:19:5a:eb:63:54:13:7e:
                    66:49:d9:9e:db:57:84:2c:cf:4c:0e:88:68:3b:33:
                    b4:30:55:a6:fd:02:f4:ba:1f:ad:aa:d4:9d:95:ec:
                    a7:5b:3a:bc:af:57:3d:f9:9b:2f:3c:53:9e:92:71:
                    a4:09:39:bd:a6:fa:5e:0c:ea:88:65:03:80:91:ca:
                    79:59:ac:9e:d6:ab:68:88:04:36:f5:63:77:68:ca:
                    cb:08:9e:e2:43:82:93:13:57:d6:60:89:d7:93:98:
                    c8:95:ad:99:4b:4e:b9:83:ee:0d:ea:44:56:a9:b4:
                    73:4b:89:93:d6:4c:e6:a8:50:5e:82:78:96:d2:1b:
                    af:b3:d5:eb:f6:7e:17:dc:40:85:ad:c2:b6:18:81:
                    a7:eb:73:8e:10:d9:4a:84:80:c1:86:97:0a:b7:fb:
                    83:17:1d:0f:06:6e:67:7e:ea:f9:14:79:8d:84:74:
                    e1:64:7d:d7:27:c1:7f:df:03:81:de:9f:1f:48:4d:
                    28:1e:78:88:b7:e7:84:28:00:49:00:01:57:24:9b:
                    24:ab:8d:27:94:92:f7:ab:f2:33:a0:c6:45:cd:95:
                    27:d6:35:8a:ac:14:ed:c0:74:d7:75:dd:ff:fb:a1:
                    86:d9:14:ec:08:7a:31:ff:e8:5d:fa:fc:4b:9a:5d:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:61:DD:4F:71:BF:A6:48:DB:C3:5F:66:EB:23:85:16:AF:C8:02:B5
            X509v3 Authority Key Identifier:
                keyid:49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:4d:c4:83:c6:76:2c:70:54:a8:4b:c7:e0:b4:20:16:d8:29:
         f6:41:3d:97:2f:ba:c6:31:d0:17:e8:26:ec:a7:27:97:d5:e8:
         f4:7e:3e:c7:fb:1d:41:a9:b6:c1:d8:2b:7a:95:7e:7e:23:12:
         a5:4b:6f:35:88:e6:fa:2d:c0:13:f9:41:29:a8:b7:0a:c3:f8:
         64:c5:22:65:8e:48:63:8c:57:cf:85:ff:84:87:24:d4:cf:6b:
         b0:f8:e7:a0:23:5d:f2:4d:38:80:78:92:a2:06:62:84:89:cf:
         3d:de:86:78:9e:8a:88:90:4d:05:9b:ff:7f:e9:22:d7:07:34:
         95:2e:be:5a:ab:6b:3d:bf:9a:84:dd:eb:6a:0e:73:ce:5e:91:
         af:1c:ca:0b:d4:bc:02:21:0e:45:23:f8:25:29:cc:0b:92:e4:
         51:51:dc:38:92:49:c0:0c:d0:97:50:80:89:bb:57:15:aa:f1:
         df:ca:50:5f:4c:47:1f:4f:e4:e4:db:57:17:a2:66:4f:de:60:
         16:77:77:8f:58:13:a0:59:4a:bd:bc:0d:6b:68:8c:65:ec:88:
         20:d7:8c:4b:4a:a4:b0:22:3a:78:23:10:65:06:c5:da:ae:1e:
         a5:36:e7:ef:79:44:53:af:02:9e:44:18:39:d6:6d:02:7c:07:
         e3:74:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----