Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/6402F0A2AD72EA63C2368A6F63CEEFA364B3B099.mft
File:                     6402F0A2AD72EA63C2368A6F63CEEFA364B3B099.mft (raw, json)
Hash identifier:          ChmoNxSag4h8lzX2VhoyzNBnxDhFyRgex5JmaNpEAYM=
Subject key identifier:   62:B9:B8:B6:34:7B:69:5C:05:A1:43:C0:4F:E1:7C:6B:1E:47:7C:5E
Authority key identifier: 64:02:F0:A2:AD:72:EA:63:C2:36:8A:6F:63:CE:EF:A3:64:B3:B0:99
Certificate issuer:       /CN=6402f0a2ad72ea63c2368a6f63ceefa364b3b099
Certificate serial:       77EE2D6EAA537EC9519C5280725EA6D5DA675500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZALwoq1y6mPCNopvY87vo2SzsJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/6402F0A2AD72EA63C2368A6F63CEEFA364B3B099.mft
Manifest number:          02
Signing time:             Fri 05 Jan 2024 06:04:33 +0000
Manifest this update:     Fri 05 Jan 2024 05:59:33 +0000
Manifest next update:     Sat 06 Jan 2024 06:12:33 +0000
Files and hashes:         1: AS203236.asa (hash: 6JShgXYfFRYGNq76B7TDIa/OyYz3dZWwwwCFQcMHN9g=)
                          2: 6402F0A2AD72EA63C2368A6F63CEEFA364B3B099.crl (hash: P6iee38mVhixER1N2KtbEsPBJe4a4jU2J2d+SvhiN5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ee:2d:6e:aa:53:7e:c9:51:9c:52:80:72:5e:a6:d5:da:67:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6402f0a2ad72ea63c2368a6f63ceefa364b3b099
        Validity
            Not Before: Jan  5 05:59:33 2024 GMT
            Not After : Jan  6 06:12:33 2024 GMT
        Subject: CN=62B9B8B6347B695C05A143C04FE17C6B1E477C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:3f:40:97:c9:b6:6b:df:3d:20:f0:ca:93:
                    f3:e4:74:e9:24:00:dd:06:2e:fd:32:e7:b6:f5:07:
                    78:ec:77:d4:f0:a8:00:68:54:e3:03:17:a7:69:db:
                    e0:a8:6c:63:95:5a:bc:1d:7c:97:19:da:db:b8:e1:
                    77:ea:6b:60:1d:ab:e6:c2:20:1d:d8:78:72:79:92:
                    6f:4b:32:61:74:be:1e:9f:86:15:c1:99:c1:53:68:
                    38:5d:70:4e:17:09:f0:82:71:35:43:09:f6:5f:e3:
                    be:87:36:14:22:7c:36:e5:e0:4a:af:3a:57:a3:e5:
                    53:4b:dc:81:1f:93:18:d7:3b:ce:1a:44:c4:82:61:
                    71:0d:79:4a:e6:24:4a:2f:07:4a:f9:6c:ed:ae:d0:
                    ad:83:ec:fe:47:48:9e:cd:70:17:ee:d5:91:fe:87:
                    02:2c:d2:d5:d5:8d:ae:8c:66:f4:f5:9f:78:e9:e8:
                    ef:62:3c:57:30:e5:8c:68:51:74:99:a4:d5:93:4c:
                    2e:55:30:b9:86:eb:3a:26:3e:42:6e:03:11:13:29:
                    82:52:7c:c2:88:88:d4:25:82:35:90:98:45:3e:c0:
                    32:76:09:d7:62:2e:cb:50:c9:0d:e3:1e:67:11:0c:
                    e2:fb:bc:60:7a:e5:1d:c6:c7:f8:cd:36:a7:38:0c:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B9:B8:B6:34:7B:69:5C:05:A1:43:C0:4F:E1:7C:6B:1E:47:7C:5E
            X509v3 Authority Key Identifier:
                keyid:64:02:F0:A2:AD:72:EA:63:C2:36:8A:6F:63:CE:EF:A3:64:B3:B0:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/6402F0A2AD72EA63C2368A6F63CEEFA364B3B099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZALwoq1y6mPCNopvY87vo2SzsJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/6402F0A2AD72EA63C2368A6F63CEEFA364B3B099.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4d:9b:60:a0:14:e6:16:04:7d:ab:44:19:32:a5:14:4e:73:
         9a:f9:3a:fe:aa:84:0a:08:c1:a1:77:67:c7:73:28:29:76:16:
         5c:a4:de:9b:d1:a3:e0:7b:f8:76:74:a8:fc:2b:45:36:c9:55:
         fe:9e:07:2f:a6:db:f3:66:fb:22:f7:22:54:d7:bf:30:c5:eb:
         b7:ed:3b:dd:0d:e1:62:8b:51:e2:ba:13:f6:a0:ed:09:55:78:
         f3:82:a0:49:92:7f:01:9f:25:56:c0:c6:c0:1b:82:f5:9f:bf:
         2f:80:c9:70:2b:bf:3d:29:ee:9b:ed:5d:02:07:9a:ad:c0:69:
         75:4d:be:12:a4:37:1e:d5:ac:92:ea:36:6e:90:1e:73:c3:b6:
         a2:80:70:06:6d:32:ce:cd:c8:3f:e3:7c:ed:ba:fd:e7:36:25:
         50:37:e7:ff:ef:c4:99:1c:4b:4a:6c:54:ab:7d:cf:d8:1b:29:
         c2:04:a7:40:db:e2:ae:c5:d1:30:b8:06:9b:61:50:0e:f6:02:
         ae:8f:05:86:b1:de:f6:0d:0c:49:65:43:f6:ad:58:30:69:39:
         90:55:f9:d7:0c:83:26:14:b2:86:1a:6f:ef:ca:45:c2:5f:87:
         91:62:e5:bb:3c:5c:90:84:8b:09:cf:75:3f:fb:dc:c9:69:78:
         f4:2c:fe:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----