Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.mft
File:                     C3044238BB4721D91399F8B02719DFD22EDF0087.mft (raw, json)
Hash identifier:          1lon/IL+sfhKjL3CinLof4CTplqRfFZ9kTbDtglrzgk=
Subject key identifier:   43:29:67:C3:69:0E:A1:16:37:D1:01:CA:AD:19:27:8D:95:8A:B8:7C
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       325191CA64CD8D817511B9BD33CDAF4799868821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.mft
Manifest number:          31
Signing time:             Tue 26 Dec 2023 07:54:06 +0000
Manifest this update:     Tue 26 Dec 2023 07:49:06 +0000
Manifest next update:     Wed 27 Dec 2023 09:49:06 +0000
Files and hashes:         1: 326131333a656634343a656530303a3a2f34302d3438203d3e20313939303532.roa (hash: iq7DchZB6NZFaN/jIITvQMv4xrDBb2rdLxaw6y32EoY=)
                          2: 326131333a656634343a663030393a3a2f34382d3438203d3e20323132323934.roa (hash: P4aJJsOyIBrb7nhXFM/uRqMxkZ4yCrjFxeqtCbgS03M=)
                          3: 3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa (hash: db9+8LDGy3AiNNNvdjyiBYqBDZp62sEa6bIs2TCp9cc=)
                          4: 326131333a656634343a663030323a3a2f34382d3438203d3e203630383538.roa (hash: gon4KTNRFnU2hnKJT+fAiN3UEhOc5lYXjfHvJlGDDZM=)
                          5: 326131333a656634343a3a2f33322d3438203d3e20323136333938.roa (hash: +Yn+hQ0eOM5fDGb64tugT9dONHXBan5/I+AB9NssRCg=)
                          6: 326131333a656634353a3a2f33322d3438203d3e20323136333938.roa (hash: KbOfJgT6i755CFaTxccmpMI+sdE2518lG1Z5LCDQaRs=)
                          7: 326131333a656634303a3a2f33322d3438203d3e20313939303532.roa (hash: gkJG13Z8bb/SNB5AaVlySotrOuV812q9wQ3NNM/lx7Y=)
                          8: 326131333a656634313a623030303a3a2f33362d3438203d3e20323039383036.roa (hash: rOPitNMCm4m81Q7uhI0EfVJM65OxZAhWkz9rjq2VM+8=)
                          9: 326131333a656634373a3a2f33322d3332203d3e20323136313536.roa (hash: vVXywtkWes6xlJtoXeF1SQSJOdcjFXrUZLtbpYJEq8k=)
                          10: 326131333a656634343a663030373a3a2f34382d3438203d3e20323136333938.roa (hash: inN/4Z3q3gYqusn4wPLo3QS34TxUmMKAvIEEqROaLWk=)
                          11: 326131333a656634343a663030383a3a2f34382d3438203d3e203632343134.roa (hash: Bfcg2nTBlD7bGM/di30Z5YpIn65j5CoHUYgw91K9s1Y=)
                          12: 326131333a656634313a623030303a3a2f33362d3438203d3e20313939353832.roa (hash: /WDhmqhdRR5mOn4hx/TgtZ/aJdBB3f7ptkQ6wEX2GNM=)
                          13: 326131333a656634343a663030363a3a2f34382d3438203d3e20323136323839.roa (hash: 5MOfZOfOjhAeRxb/O8u7y34GczQVP1q/dwC1od/QwrE=)
                          14: 326131333a656634343a313a3a2f34382d3438203d3e20323136333938.roa (hash: CCigd+cqwq7KlU8G6eb6a+M11yUonFORn1y7cSiz52o=)
                          15: 326131333a656634303a3a2f32392d3239203d3e20323136333938.roa (hash: jFrSnhDgqQR4iXkKsCdFKdUpn6L+HS5o8Ai61BNUo4s=)
                          16: 326131333a656634343a663030623a3a2f34382d3438203d3e203434343233.roa (hash: bf8ofuHLQs6Qyyh+BuX5v8EKRVu9BNmyLTkV+pXhgkA=)
                          17: C3044238BB4721D91399F8B02719DFD22EDF0087.crl (hash: mItrfcgyWjKQs+vxbzxpqCVIJb2S/TqjGQpyuZD70os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:51:91:ca:64:cd:8d:81:75:11:b9:bd:33:cd:af:47:99:86:88:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 26 07:49:06 2023 GMT
            Not After : Dec 27 09:49:06 2023 GMT
        Subject: CN=432967C3690EA11637D101CAAD19278D958AB87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:27:26:7a:a6:6e:ec:1e:ba:53:df:e4:d9:
                    2b:66:ab:00:35:59:5a:ca:b6:2b:66:10:2e:0d:89:
                    57:77:78:84:2e:0b:f6:54:3b:14:08:39:40:8b:cb:
                    d3:94:8e:6e:c1:7c:3d:fe:f3:55:f4:ad:d3:c6:80:
                    5e:b2:c1:f9:75:ba:e0:aa:72:36:4a:39:f4:07:39:
                    24:65:6f:be:60:b7:be:0f:77:a4:5e:17:67:2a:0e:
                    98:9a:bf:c9:22:e4:0e:94:50:b4:58:a7:8f:7b:fc:
                    39:62:28:99:12:11:38:57:a5:19:c4:66:0d:87:c3:
                    5f:5d:39:b0:30:76:17:b3:c7:c0:d8:fe:58:04:9e:
                    0f:24:b7:b7:4b:c3:3b:f6:91:3e:ae:52:e1:82:0f:
                    81:4f:08:d6:cf:c9:7d:30:ce:12:e0:fd:7e:73:bc:
                    e6:d6:67:bf:03:6d:eb:8d:9a:df:f0:8a:68:72:b1:
                    47:79:80:60:dc:70:1f:b4:e8:f7:f0:67:ad:d3:fe:
                    4a:49:4a:15:ad:08:72:b3:f6:e9:f1:ca:3e:21:00:
                    bf:f9:ee:59:af:f6:53:a5:29:db:66:ee:ec:da:c2:
                    b8:6a:85:af:a2:e5:c3:8a:0b:32:ed:70:ca:a7:0a:
                    7f:ec:74:a8:ba:66:ee:a2:65:e2:cb:68:13:45:48:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:29:67:C3:69:0E:A1:16:37:D1:01:CA:AD:19:27:8D:95:8A:B8:7C
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:e7:36:d6:08:3a:0e:f4:90:3c:09:bb:bd:c0:6d:90:9e:
         90:bb:68:61:4b:73:b2:e0:d9:aa:6a:de:3f:1f:95:5b:1e:e7:
         eb:f6:ef:fd:f0:89:21:3f:28:fb:bc:f2:71:ca:0d:46:bd:05:
         49:7d:3b:b6:cd:08:54:e2:26:a9:6b:23:15:27:dc:d2:13:46:
         56:c3:15:40:3c:b1:e6:7e:a4:fc:95:e4:1f:cb:7b:98:29:02:
         00:65:9d:32:40:0d:47:7a:56:95:4f:8f:5b:c8:e1:b4:6c:f1:
         12:61:ee:7b:73:d1:bd:19:aa:6e:c3:ca:64:c9:87:e5:36:18:
         e1:7c:e6:90:c9:b1:6c:d5:d4:1e:8a:9d:2f:9f:e3:f6:0d:3a:
         51:87:f6:bd:fe:f7:4b:80:88:26:80:25:2a:d3:4b:fb:16:37:
         bf:c2:69:0d:7d:a4:2f:e7:36:f0:59:b4:74:dc:2c:35:bb:40:
         aa:e4:07:94:a6:09:40:52:e9:07:37:cf:e9:31:79:06:80:6a:
         e3:d5:89:64:a7:d4:94:7c:64:3f:17:ab:b6:f2:51:b2:14:7c:
         9f:d0:b5:bb:e7:1b:29:dc:3a:3a:d5:65:52:18:b5:b3:2e:f2:
         09:f8:81:78:6c:ff:99:09:86:a3:0e:7f:aa:72:af:3a:86:bc:
         a1:d8:f1:dc
-----BEGIN CERTIFICATE-----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Generated at Tue Dec 26 14:48:41 2023 by rpki-client on console-ams.rpki-client.org