Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.mft
File:                     8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.mft (raw, json)
Hash identifier:          Uy1y/P7B9mbeoGkD8ZiltvZVkFTysyLa4Te+hVDlNYo=
Subject key identifier:   41:B4:2D:2D:FD:55:20:AC:D0:1E:BE:8E:8A:14:F6:1C:FE:34:92:6C
Authority key identifier: 8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
Certificate issuer:       /CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Certificate serial:       05111AB2946C70B5AC9E1BA090C73DBACDECE587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.mft
Manifest number:          014A
Signing time:             Fri 24 Nov 2023 05:00:58 +0000
Manifest this update:     Fri 24 Nov 2023 04:55:58 +0000
Manifest next update:     Sat 25 Nov 2023 08:14:58 +0000
Files and hashes:         1: 8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.crl (hash: czJ0Bi4ayqbmsa2Ax81NNUftTQ8JGhWON6vNbLGDrI0=)
                          2: 3134362e31392e3231362e302f32342d3234203d3e20323033373930.roa (hash: yC0wn685WtI0SVgoTDATwgqqWRqPaGIuyqwwwS/dFLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:11:1a:b2:94:6c:70:b5:ac:9e:1b:a0:90:c7:3d:ba:cd:ec:e5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
        Validity
            Not Before: Nov 24 04:55:58 2023 GMT
            Not After : Nov 25 08:14:58 2023 GMT
        Subject: CN=41B42D2DFD5520ACD01EBE8E8A14F61CFE34926C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:0e:b6:74:4a:17:43:d4:a8:12:ba:94:28:
                    32:8b:3f:8c:36:db:20:68:5f:54:ad:81:4a:b0:a4:
                    9f:79:45:d4:7f:d8:fb:97:1b:5b:b7:e4:46:43:d3:
                    d3:19:b2:4d:47:d2:c7:b7:04:05:5a:af:d4:61:50:
                    94:38:3f:d4:6d:82:5d:f9:85:93:73:33:6b:08:ff:
                    64:0c:59:41:7a:fe:b4:fa:2c:23:5d:4c:0a:a4:a8:
                    9c:c4:31:b9:86:86:1c:6b:f6:89:42:c2:cc:a2:64:
                    ef:63:52:06:a6:b3:c7:3e:10:1b:a8:90:09:33:5e:
                    b1:88:11:f1:a8:e5:b7:c7:4c:28:1a:54:e9:1c:33:
                    63:5a:12:16:55:04:cb:65:74:5c:d1:10:3b:d0:2f:
                    6b:15:ed:c3:0e:0c:e4:cc:77:7b:92:01:6d:b7:79:
                    ae:2f:87:30:11:b5:78:d0:03:13:9d:61:72:d1:53:
                    2b:b0:81:54:a5:d7:15:bc:04:c7:df:8a:d9:09:63:
                    a6:65:f7:95:d1:d6:29:4f:d0:b8:51:67:e3:d0:cd:
                    1c:67:2a:95:6d:f8:cf:d7:34:16:ba:2d:c4:78:ad:
                    c8:67:f3:94:8f:73:0c:05:d0:da:a5:d7:70:4d:bc:
                    f6:bf:0c:fd:da:0a:65:e6:ad:2c:d7:57:7a:eb:ac:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:2D:2D:FD:55:20:AC:D0:1E:BE:8E:8A:14:F6:1C:FE:34:92:6C
            X509v3 Authority Key Identifier:
                keyid:8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:85:e6:3c:3c:e3:ad:1d:81:dc:88:5c:6a:1a:d5:50:a4:4b:
         be:14:db:d6:d2:27:87:55:ef:55:e6:71:b1:92:d8:7e:ff:c0:
         90:e3:16:c6:1f:1f:08:0c:d2:c5:05:76:3b:8a:02:1c:2c:73:
         ce:a9:f4:2c:c6:bc:75:0c:a6:a3:81:f1:6d:f5:48:3a:04:74:
         29:68:f7:46:19:a7:d8:58:6d:37:96:78:77:59:05:af:d9:9a:
         b5:0e:1b:6c:00:87:84:bd:f8:7f:ca:9b:34:19:07:3b:7f:46:
         53:da:a5:b5:a3:9b:d9:72:d7:e6:b9:1a:02:33:08:40:10:57:
         18:25:b5:55:93:50:c4:90:77:00:39:e5:67:4f:64:0f:f2:6d:
         e5:cd:e4:86:7d:73:f0:fb:f4:20:79:1a:7a:20:84:46:ad:ae:
         f7:dd:05:35:b4:c7:6a:08:f9:72:dd:f2:f5:19:bc:a3:05:0b:
         6e:dc:c5:fc:46:ea:a8:ec:af:c3:a8:a6:ff:08:97:0a:8d:8d:
         18:9b:5e:88:75:18:31:12:16:a3:6b:ef:d0:f9:b5:ac:a8:24:
         c3:93:40:b3:aa:b1:71:e4:ff:6b:15:0f:8a:ad:b3:7b:23:cb:
         9b:03:ec:72:4f:c7:1d:64:a8:49:b7:2b:21:e7:6b:26:04:53:
         d2:94:20:60
-----BEGIN CERTIFICATE-----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