Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.mft
File:                     3A96802395455CA00679C41D5C056CAE95D4B57D.mft (raw, json)
Hash identifier:          hD7N6GmmTQ5J+RGVZ4CYH26WeM60hF+4iBZV2kNEuok=
Subject key identifier:   06:C1:66:E2:D5:53:56:CB:5A:CF:FE:1A:C2:12:47:EC:64:B9:22:9C
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Certificate issuer:       /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial:       6D46F9D63E4BAF420FD81027056B77F00459151F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.mft
Manifest number:          013F
Signing time:             Tue 12 Sep 2023 17:47:10 +0000
Manifest this update:     Tue 12 Sep 2023 17:42:10 +0000
Manifest next update:     Wed 13 Sep 2023 18:22:10 +0000
Files and hashes:         1: 33312e362e31362e302f32342d3234203d3e20383334.roa (hash: nWhv6sKPNNtuQtdCVq0IzCYN+ZHY8kETMwNgsv5FFDg=)
                          2: 33312e362e36312e302f32342d3234203d3e20383334.roa (hash: 2nta/0N0ol3geccLKiMZ8FOGzds4uD4yh2nZ4fiAEH4=)
                          3: 33312e362e33342e302f32342d3234203d3e203631333137.roa (hash: +qEe7UO5E/IOQBrl53OL2/VSzLv+hFh+rVu6jPw5Qmg=)
                          4: 33312e362e33362e302f32342d3234203d3e203631333137.roa (hash: PI3gGISdNrbO1ZUOzRKTJj62W7yQNeiw2NFFTOOg7wI=)
                          5: 33312e362e33382e302f32342d3234203d3e203631333137.roa (hash: FyIRJvkLob3CpH13yTwAYb0Iz8qp5LZynxrU+V210Yg=)
                          6: 33312e362e35362e302f32332d3234203d3e20383334.roa (hash: FCtPaMMWHcIZtHyvw3oKwKqTyKHdwuYfTQa/WtuFDsk=)
                          7: 33312e362e36322e302f32332d3234203d3e20383334.roa (hash: BTHmZ9FFoTujnFdTlKS5enCNsnc77T9blwF8wOyekdg=)
                          8: 33312e362e34352e302f32342d3234203d3e20383334.roa (hash: R1EiqW11kdBcSjvpk0OElIvZsrox8H1ZIVjWRREGecU=)
                          9: 33312e362e34382e302f32342d3234203d3e20383334.roa (hash: s0v5JLqyK76YrQevcDCqj7ccT0huDmKPe4GuRTUGukU=)
                          10: 33312e362e312e302f32342d3234203d3e20383334.roa (hash: IyK4oDxIt21JcV0Vw571iqolgNUxpnyZ7QUHnMZq25M=)
                          11: 3137382e3230382e3138362e302f32342d3234203d3e203631333137.roa (hash: 5yPcSy4Vfj9HiqZGxG2HDEfJ2hM7TFVbjZKEe91WtoU=)
                          12: 33312e362e33392e302f32342d3234203d3e203631333137.roa (hash: M5jcA6j8D53D3RGzxH7cXFkmbs2BLRcf9ewYK1F317c=)
                          13: 33312e362e35392e302f32342d3234203d3e20383334.roa (hash: P5ezF9O8uY9rbAqebS0QjgQp38FTtAcfntflpFxf0Nk=)
                          14: 3137382e3230382e3139302e302f32342d3234203d3e203631333137.roa (hash: JZ4WPpezrodXGFWvw4ffhDYItrFaVusRPWLE8nQ7HEQ=)
                          15: 33312e362e35322e302f32322d3234203d3e20383334.roa (hash: elN7sjjAw3eKGdYcbWkhlF1E7OMAiiRU8ee04Pz0/iw=)
                          16: 33312e362e34362e302f32332d3234203d3e20383334.roa (hash: ciEjaI3TUl/I0gGdwMz8y+3Gs67cwriyHUsYbSti+cU=)
                          17: 33312e362e33372e302f32342d3234203d3e203631333137.roa (hash: ltSZddgBJIycVLOpqi+neQglu7cfav6p52lIgNG8ZUs=)
                          18: 33312e362e34302e302f32342d3234203d3e203631333137.roa (hash: SBzZ1iy9CEnDf+RiMMrFiS6W3ulqn8uxS9ePMTL4vmw=)
                          19: 3137382e3230382e3139312e302f32342d3234203d3e203631333137.roa (hash: AiTK83L4Ol3AnXpMMlm6qyHcXUxtyNcuJYwh/5Tjsg8=)
                          20: 33312e362e33352e302f32342d3234203d3e203631333137.roa (hash: BpiK+K/cVupnf8FqfNRb0fTcl4FZkb41cFhXaWh83EM=)
                          21: 3137382e3230382e3138342e302f32342d3234203d3e20383334.roa (hash: 83oXRGlsMJGF8n6gpgqqPGEYFd5z7g5EnTRWqN2er7o=)
                          22: 33312e362e35302e302f32332d3234203d3e20383334.roa (hash: Pj8DtzPi4bt9Yh1xVFhRZ0ia/zCYQ5ifDkgcM7aTPBA=)
                          23: 3137382e3230382e3138382e302f32342d3234203d3e203631333137.roa (hash: CDjYx/Z7FR8rXRiS5k7PKnu1umjhezAmInh8iAazLJo=)
                          24: 3A96802395455CA00679C41D5C056CAE95D4B57D.crl (hash: 8Qy0gMvpd0FCnx/JcPGl/Y813fOELpnR602fsXAJAGU=)
                          25: 33312e362e32342e302f32322d3234203d3e20383334.roa (hash: ORYxEx+mLoFkBnMpOv3kry3/iuoVMBIEtQwR4/88PaI=)
                          26: 33312e362e33332e302f32342d3234203d3e203631333137.roa (hash: CAjPNElJgOqI3SiDFH1jodNCHM/6q24wxstqycaIGv8=)
                          27: 3137382e3230382e3138372e302f32342d3234203d3e203631333137.roa (hash: m8bhlwr+/lak5dexkcJ7cKVNTEqk5J9N/I7047gIuvg=)
                          28: 3137382e3230382e3138302e302f32322d3234203d3e203439393939.roa (hash: TmhQE0EefTnGbajDiyC/Yx7n1ngZkFMVXdL0rqVDMlY=)
                          29: 3137382e3230382e3138302e302f32322d3234203d3e20383334.roa (hash: mHenUiKtpVrPuA+sS9mNtnvz16Zxwh5ZOSPHAnRIh0s=)
                          30: 3138352e32392e3136362e302f32342d3234203d3e20383334.roa (hash: 10ZpTky0pOBtAPGOcNmuP3cX8vOL9stpVhzi5Yx+uCg=)
                          31: 33312e362e322e302f32342d3234203d3e20383334.roa (hash: xdOM1bIaZfTR1YgG/1I88+q2FrGyM2rFN8P3JjsBj1s=)
                          32: 33312e362e33312e302f32342d3234203d3e203631333137.roa (hash: nwxkT8iL1Yh9Nzta8sfwB07hqmcfk0gPQ8sT8/Nqsk0=)
                          33: 3137382e3230382e3138392e302f32342d3234203d3e203631333137.roa (hash: 0KBZ3CqeFCBBmWgqHmRkcQRHBXS2Dp9y6LuTQUWXWNo=)
                          34: 33312e362e33322e302f32342d3234203d3e203631333137.roa (hash: P0EtBztHA0YEQbPYCTHD9b+2rMWeU7ShnvBmYo2eW/E=)
                          35: 33312e362e31322e302f32322d3234203d3e20383334.roa (hash: eLW64IYMr8N8dctWhg6IKCuxtY9TteB/354Q9uffQos=)
                          36: 3137382e3230382e3137382e302f32332d3234203d3e20383334.roa (hash: SQdxU1J6grJ+9DtV6N3j1FBzAdjf7cTxpcxVUUdwsbg=)
                          37: 33312e362e33342e302f32342d3234203d3e203632353739.roa (hash: payX1ijTtCTU8rr+ayR5ZQ21WXbleH3kym3tVw282/Q=)
                          38: 3137382e3230382e3137372e302f32342d3234203d3e20383334.roa (hash: 1je6rHsRyJCGxv4CKLaVCdmjpJEqtSHH0PoG4S4QJCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:46:f9:d6:3e:4b:af:42:0f:d8:10:27:05:6b:77:f0:04:59:15:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
        Validity
            Not Before: Sep 12 17:42:10 2023 GMT
            Not After : Sep 13 18:22:10 2023 GMT
        Subject: CN=06C166E2D55356CB5ACFFE1AC21247EC64B9229C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:b9:a9:a2:16:e3:c0:54:ff:a4:9e:2c:ae:
                    08:c2:61:d4:22:58:1b:4b:9b:3f:b8:2b:e7:4a:a1:
                    ac:de:9b:41:87:03:88:1b:5c:7d:86:44:c5:ce:e3:
                    3f:a9:aa:d4:ff:7b:15:fc:3a:ba:41:17:39:ab:1d:
                    72:90:aa:0d:62:70:d5:ba:a5:6e:19:68:60:4c:a7:
                    d0:8d:31:ef:96:f7:13:c0:a3:bf:37:96:9b:87:35:
                    86:6f:04:b6:9c:ca:03:5e:ac:b7:df:71:4b:8f:53:
                    e3:f9:5f:6d:98:53:29:9a:32:73:e4:ce:c2:4e:0f:
                    18:88:d2:f7:ad:83:ca:04:01:ac:4f:56:57:eb:eb:
                    21:1c:91:d0:00:29:9b:e4:54:28:6f:00:1e:42:18:
                    f5:2b:b2:71:36:c1:c5:f1:db:f4:41:07:8c:a5:e8:
                    21:53:60:c7:f9:1e:21:f1:80:a1:a0:bc:ed:cc:97:
                    c9:6d:fa:96:fe:cf:52:ae:2d:76:d7:5d:c6:4f:d8:
                    02:ac:e2:db:73:8d:85:27:54:b0:92:e8:a7:f2:91:
                    ea:87:d1:74:b8:22:36:5f:55:9a:d9:8c:a1:ed:ac:
                    90:68:42:9f:52:f3:be:62:9f:af:a2:6e:e6:e4:69:
                    6b:ce:18:7b:e1:7a:dc:d3:05:fb:a8:39:a2:81:6b:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:66:E2:D5:53:56:CB:5A:CF:FE:1A:C2:12:47:EC:64:B9:22:9C
            X509v3 Authority Key Identifier:
                keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:31:36:ef:c8:b1:76:66:89:32:d9:6b:65:01:79:19:47:
         52:2f:4a:93:f2:d4:da:a4:65:b3:d6:78:ff:ea:3d:cb:4b:ad:
         26:d9:fc:1b:6a:49:2f:45:24:10:fb:34:7e:1a:ee:4a:d4:74:
         bc:0e:4b:ac:d3:d9:6e:48:fa:91:71:f5:c5:b6:bf:ef:93:ae:
         6a:67:07:2d:f6:38:01:cd:d7:ce:e6:8c:68:69:3e:a2:7b:ca:
         83:eb:98:f0:56:ef:9c:d3:9b:9e:49:85:d0:b4:47:ca:cb:0b:
         ec:6e:de:b9:cc:da:af:5f:fc:56:8b:62:82:e1:b7:58:5a:96:
         be:d6:16:d4:74:9e:c3:cf:fe:bf:88:9d:6d:c1:48:44:76:a0:
         d0:a1:5e:f0:f7:32:cf:cf:51:79:6a:da:74:75:f9:75:8d:f3:
         cd:09:4b:1a:6e:4a:0b:e1:26:ce:94:ef:ef:33:15:d6:03:45:
         2d:cf:38:9f:be:7a:54:ce:f9:59:21:b6:8c:ab:95:fd:12:16:
         08:50:f7:1c:5c:c9:82:55:80:81:a2:f6:31:24:24:91:21:44:
         d5:9e:08:a0:ec:67:d0:03:61:f0:7b:ab:b8:71:47:e3:5a:31:
         90:b3:b8:65:d8:3e:7d:13:58:89:e4:33:44:d2:b3:d2:71:07:
         6c:5f:94:b4
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org