Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be5277a1-1b41-45c2-90a2-2309993f3b34/0/396A84E72935471D6AF5AE77F63C6A7AB4A6E62A.mft
File:                     396A84E72935471D6AF5AE77F63C6A7AB4A6E62A.mft (raw, json)
Hash identifier:          LjdfK+1c9qw4HqfgBn/zEkyJDF4KnnRDGNHcGqB+eGU=
Subject key identifier:   03:AA:C1:4D:9A:FA:2C:C8:DC:D3:DD:72:11:E0:B7:7A:8F:48:2D:50
Authority key identifier: 39:6A:84:E7:29:35:47:1D:6A:F5:AE:77:F6:3C:6A:7A:B4:A6:E6:2A
Certificate issuer:       /CN=396a84e72935471d6af5ae77f63c6a7ab4a6e62a
Certificate serial:       0ACA2E6E742758C1ADE66A7E09C6F706721F48E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWqE5yk1Rx1q9a539jxqerSm5io.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/be5277a1-1b41-45c2-90a2-2309993f3b34/0/396A84E72935471D6AF5AE77F63C6A7AB4A6E62A.mft
Manifest number:          05
Signing time:             Mon 11 Dec 2023 16:51:47 +0000
Manifest this update:     Mon 11 Dec 2023 16:46:47 +0000
Manifest next update:     Tue 12 Dec 2023 20:04:47 +0000
Files and hashes:         1: AS215978.asa (hash: r3zFMoojKbY2GtXYZjzKz/4lHnZcblbbbG6DQNDMYA0=)
                          2: 396A84E72935471D6AF5AE77F63C6A7AB4A6E62A.crl (hash: Ag9iUJMoFtbjATDQMNm0szVVOSK1BBa+TTQx2TJ0xJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ca:2e:6e:74:27:58:c1:ad:e6:6a:7e:09:c6:f7:06:72:1f:48:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396a84e72935471d6af5ae77f63c6a7ab4a6e62a
        Validity
            Not Before: Dec 11 16:46:47 2023 GMT
            Not After : Dec 12 20:04:47 2023 GMT
        Subject: CN=03AAC14D9AFA2CC8DCD3DD7211E0B77A8F482D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:01:19:49:4c:be:49:5f:28:d0:29:68:4e:
                    3b:6e:1c:6e:34:22:67:69:e9:8c:31:11:3d:10:6c:
                    67:72:3a:ff:06:78:c1:02:4f:0a:76:e1:54:3b:6b:
                    c3:17:04:eb:45:e6:11:25:7f:61:b5:8d:14:01:45:
                    60:0f:e6:fb:50:31:5a:75:80:cb:60:e4:8c:c2:d7:
                    21:0f:73:a3:e9:db:dc:5e:94:62:ac:b0:6a:1f:44:
                    c4:39:0c:4b:ae:d2:cb:be:a5:7a:d2:b7:e3:b5:56:
                    76:f4:0a:2c:5a:d2:e0:0d:ac:4b:d2:9a:53:d0:53:
                    12:d6:3e:ff:aa:66:a7:9b:50:d0:4f:cc:24:c0:a1:
                    a3:20:3e:13:7a:01:7e:40:35:9e:51:42:7a:bd:3e:
                    da:bf:c0:1d:88:a6:50:f1:3e:64:3c:56:81:15:c2:
                    03:eb:f6:11:7f:d1:93:96:a7:f4:df:8e:7e:48:3f:
                    69:27:3c:0c:64:f7:af:d6:15:98:ae:84:7a:ed:3e:
                    41:5c:e4:9c:f6:62:f4:8d:ea:c5:4d:ff:b6:4e:5d:
                    8e:2b:c0:d3:8e:39:7f:6c:d1:2b:11:54:96:eb:47:
                    f4:b6:d2:d9:39:8a:70:e2:c2:d7:e7:36:a7:82:28:
                    b8:95:81:a3:6f:1a:17:cc:db:f8:ea:2c:96:e4:7c:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AA:C1:4D:9A:FA:2C:C8:DC:D3:DD:72:11:E0:B7:7A:8F:48:2D:50
            X509v3 Authority Key Identifier:
                keyid:39:6A:84:E7:29:35:47:1D:6A:F5:AE:77:F6:3C:6A:7A:B4:A6:E6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/be5277a1-1b41-45c2-90a2-2309993f3b34/0/396A84E72935471D6AF5AE77F63C6A7AB4A6E62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWqE5yk1Rx1q9a539jxqerSm5io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be5277a1-1b41-45c2-90a2-2309993f3b34/0/396A84E72935471D6AF5AE77F63C6A7AB4A6E62A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:e5:37:4e:53:66:66:de:fa:65:c4:1c:d4:45:15:7e:24:
         8a:08:1c:79:97:b0:a3:52:c8:80:ed:c7:20:41:34:76:cd:e0:
         4f:d3:5d:dd:5c:16:0e:3d:9e:b9:95:b4:b8:61:a6:f6:8e:0c:
         99:b3:9e:96:3e:7b:1f:7a:ba:1e:85:bd:d6:b4:9b:2d:52:08:
         bb:29:ae:6f:a4:cf:78:ed:b2:18:60:37:4c:ba:06:ec:e2:14:
         5a:90:72:22:f0:60:38:ae:70:cd:2b:9a:1f:14:be:c3:0a:47:
         30:6e:ae:f6:f6:65:53:a3:92:db:7a:74:56:7d:b1:8d:26:d3:
         31:84:a4:12:50:29:21:4e:94:64:cf:52:8c:61:30:84:38:2b:
         d1:ae:9c:ee:e4:26:a3:80:3f:50:72:c0:4a:63:6d:cc:4b:07:
         e1:46:bd:a0:f7:0e:07:a7:2d:2b:73:22:4c:24:34:15:eb:bf:
         e6:d7:b4:41:d9:b9:20:09:d3:ef:71:52:f7:35:ff:09:b8:52:
         1b:f6:01:19:c5:38:b5:e4:67:90:b7:d9:b4:e7:a9:9f:ab:be:
         2f:ce:95:d4:e7:e6:24:a4:f1:5d:2a:ee:28:f1:dc:d9:fa:b3:
         b8:c1:66:1d:b1:82:5d:7e:15:c8:c5:98:02:69:a0:e5:ad:eb:
         f5:16:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----