Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.mft
File:                     3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.mft (raw, json)
Hash identifier:          QeTKY3UlWyN++iQ9ILhspiI23KIj/3OxLkakJUUqV6Y=
Subject key identifier:   B7:36:37:50:28:D0:99:48:F1:38:FF:16:C8:F6:0E:66:CB:E8:21:2F
Authority key identifier: 3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7
Certificate issuer:       /CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
Certificate serial:       36A62AC6276B2A59DBB86D731D7C75930309EC4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.mft
Manifest number:          0A
Signing time:             Wed 05 Apr 2023 00:21:19 +0000
Manifest this update:     Wed 05 Apr 2023 00:16:19 +0000
Manifest next update:     Thu 06 Apr 2023 04:18:19 +0000
Files and hashes:         1: 34352e3134352e3234322e302f32342d3234203d3e203433323630.roa (hash: G4Ux9ND6c67oFPoptZNYk3RRIBDJ6fEnT/Jq3sLNQLM=)
                          2: 34352e3134352e3234312e302f32342d3234203d3e203536393133.roa (hash: zv0Grn1FwCxAF/2I2cu749Sba9HhnjPpQdEWhycXHxE=)
                          3: 3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.crl (hash: LyKzW06iR3EVjmUlsbGPtcLoF4Fcbz7ya6vZ79Duq2I=)
                          4: 34352e3134352e3234302e302f32342d3234203d3e203536393133.roa (hash: IfLNb9wk0eHurDu2/2anDa+V3useNLPoWBukXPDQ5OE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a6:2a:c6:27:6b:2a:59:db:b8:6d:73:1d:7c:75:93:03:09:ec:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
        Validity
            Not Before: Apr  5 00:16:19 2023 GMT
            Not After : Apr  6 04:18:19 2023 GMT
        Subject: CN=B736375028D09948F138FF16C8F60E66CBE8212F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:a4:9c:75:f3:ac:76:b1:ff:23:88:a9:43:
                    71:42:65:db:55:09:e4:2c:be:6b:3b:11:ac:be:20:
                    79:04:ba:d4:aa:68:3b:8d:e3:54:f5:03:a7:6d:9c:
                    ff:4b:47:9b:ac:d5:94:11:96:e5:6e:88:44:20:0c:
                    71:9c:c5:84:36:5e:3d:57:c0:3f:49:62:f6:5e:66:
                    d8:38:85:43:6c:af:83:83:3f:7f:60:05:aa:96:2e:
                    dc:b3:25:38:54:42:bd:97:2c:ab:f6:1b:8a:42:f4:
                    e2:6a:0e:af:c3:d3:ae:e3:7c:a3:b3:45:e2:f8:b3:
                    0e:97:ea:67:fa:23:38:9f:6e:cf:b1:ef:e2:96:c1:
                    5f:7b:11:0d:8f:ea:b7:8e:d4:26:87:2e:32:2c:03:
                    d7:01:01:0d:2e:84:98:58:25:29:d7:6d:8a:79:4e:
                    b8:3f:1c:ae:63:a3:b2:cd:31:94:e7:1a:58:c6:04:
                    31:98:44:86:dd:ce:55:55:f2:3f:5e:ac:c7:7a:50:
                    f5:38:7f:75:13:18:b6:54:30:fb:6b:fe:b8:34:0f:
                    d1:bc:e3:21:54:83:f6:d3:fe:6d:7a:89:10:6a:45:
                    3a:8f:be:78:14:77:73:56:09:1a:e9:ca:18:7d:60:
                    6b:2c:7c:f7:91:c6:79:6d:d9:9e:74:e5:34:a5:c1:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:37:50:28:D0:99:48:F1:38:FF:16:C8:F6:0E:66:CB:E8:21:2F
            X509v3 Authority Key Identifier:
                keyid:3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8a:d1:ab:d7:19:84:19:84:f2:1e:28:41:02:41:48:76:eb:
         60:f0:1c:c6:24:96:a2:b0:78:7c:25:34:e4:12:d2:0b:be:45:
         31:9f:d5:ca:3f:c3:63:bf:97:95:e2:44:b3:61:6e:6f:9d:31:
         70:3b:a0:6a:78:1b:78:72:e4:0b:d9:a6:f0:3b:8e:f4:5f:68:
         3d:11:cd:8c:f4:0c:a3:a9:7f:a4:0b:bf:d0:d0:b2:1d:36:7c:
         f5:27:74:21:44:c5:2e:c7:60:6d:b1:b7:4c:f7:2a:7d:d6:ac:
         1c:09:ae:2c:21:15:4c:66:5d:fb:38:22:54:b4:da:8a:0b:db:
         d8:f2:c8:36:e9:58:ef:18:09:f3:73:51:cc:f6:aa:ca:e1:a4:
         7b:8a:38:5f:98:97:75:33:62:71:d5:33:d0:bb:b0:12:12:17:
         1a:01:d3:0c:03:4a:d2:1e:ab:a6:06:56:0e:30:fc:80:d8:95:
         5c:09:6c:f2:d0:1c:33:3d:ec:c9:d3:e6:ed:d3:35:06:12:7b:
         a6:d2:5a:d2:c4:2e:47:7d:f5:d0:24:b8:ff:ee:b3:b2:cf:07:
         33:20:83:44:75:93:4f:5c:45:52:2f:59:aa:4d:97:54:df:83:
         db:5e:d5:f2:8c:74:6c:a8:c9:cc:16:b8:40:4b:c1:4b:38:28:
         cd:e9:57:4f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNqYqxidrKlnbuG1zHXx1kwMJ7E0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlZTk1MmJhZDRlZmVkMGVlNWIxNzkzN2E3NWZiZWM4
NjFkYmZmNzAeFw0yMzA0MDUwMDE2MTlaFw0yMzA0MDYwNDE4MTlaMDMxMTAvBgNV
BAMTKEI3MzYzNzUwMjhEMDk5NDhGMTM4RkYxNkM4RjYwRTY2Q0JFODIxMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmaScdfOsdrH/I4ipQ3FCZdtV
CeQsvms7Eay+IHkEutSqaDuN41T1A6dtnP9LR5us1ZQRluVuiEQgDHGcxYQ2Xj1X
wD9JYvZeZtg4hUNsr4ODP39gBaqWLtyzJThUQr2XLKv2G4pC9OJqDq/D067jfKOz
ReL4sw6X6mf6Izifbs+x7+KWwV97EQ2P6reO1CaHLjIsA9cBAQ0uhJhYJSnXbYp5
Trg/HK5jo7LNMZTnGljGBDGYRIbdzlVV8j9erMd6UPU4f3UTGLZUMPtr/rg0D9G8
4yFUg/bT/m16iRBqRTqPvngUd3NWCRrpyhh9YGssfPeRxnlt2Z505TSlwU8jAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtzY3UCjQmUjxOP8WyPYOZsvoIS8wHwYDVR0j
BBgwFoAUP+6VK61O/tDuWxeTenX77IYdv/cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjEzOGY1ODEtZThiMi00NDE2LTgzMDItNzE2YjZjZTY1
MjA2LzAvM0ZFRTk1MkJBRDRFRkVEMEVFNUIxNzkzN0E3NUZCRUM4NjFEQkZGNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtNlZLNjFPX3REdVd4ZVRlblg3N0lZ
ZHZfYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iMTM4ZjU4MS1l
OGIyLTQ0MTYtODMwMi03MTZiNmNlNjUyMDYvMC8zRkVFOTUyQkFENEVGRUQwRUU1
QjE3OTM3QTc1RkJFQzg2MURCRkY3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqorRq9cZhBmE8h4oQQJB
SHbrYPAcxiSWorB4fCU05BLSC75FMZ/Vyj/DY7+XleJEs2Fub50xcDugangbeHLk
C9mm8DuO9F9oPRHNjPQMo6l/pAu/0NCyHTZ89Sd0IUTFLsdgbbG3TPcqfdasHAmu
LCEVTGZd+zgiVLTaigvb2PLINulY7xgJ83NRzPaqyuGke4o4X5iXdTNicdUz0Luw
EhIXGgHTDANK0h6rpgZWDjD8gNiVXAls8tAcMz3sydPm7dM1BhJ7ptJa0sQuR331
0CS4/+6zss8HMyCDRHWTT1xFUi9Zqk2XVN+D217V8ox0bKjJzBa4QEvBSzgozelX
Tw==
-----END CERTIFICATE-----