Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.mft
File:                     49BFF87337858F783807140B411F622360B146C2.mft (raw, json)
Hash identifier:          wbL7tT3LVclr/8tGCQtsRSK68Q5qhJXoN3PCn980ZUY=
Subject key identifier:   82:DB:92:71:F7:D0:76:1D:2C:6B:D1:2C:2B:44:F9:AC:44:0F:8F:32
Authority key identifier: 49:BF:F8:73:37:85:8F:78:38:07:14:0B:41:1F:62:23:60:B1:46:C2
Certificate issuer:       /CN=49bff87337858f783807140b411f622360b146c2
Certificate serial:       03C399B24F67B44DCBDD0320EEDF6BB727C11163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sb_4czeFj3g4BxQLQR9iI2CxRsI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.mft
Manifest number:          FB
Signing time:             Wed 18 Sep 2024 12:50:38 +0000
Manifest this update:     Wed 18 Sep 2024 12:45:38 +0000
Manifest next update:     Thu 19 Sep 2024 14:12:38 +0000
Files and hashes:         1: 49BFF87337858F783807140B411F622360B146C2.crl (hash: TOcQXSlm1wPkRAu4Sb1g74E4Ly6qbGUM6KfNaUmPrKE=)
                          2: AS48752.asa (hash: BAZpoilyvFKjzZr1itAgsEiE/+AlJOJ+hLuL3JktJl4=)
                          3: AS202197.asa (hash: Sq9izfmRcWaoTgeRyrc7rldozgdnpeb784owJd4Qt7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c3:99:b2:4f:67:b4:4d:cb:dd:03:20:ee:df:6b:b7:27:c1:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bff87337858f783807140b411f622360b146c2
        Validity
            Not Before: Sep 18 12:45:38 2024 GMT
            Not After : Sep 19 14:12:38 2024 GMT
        Subject: CN=82DB9271F7D0761D2C6BD12C2B44F9AC440F8F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:61:ec:1b:86:52:4d:63:13:b2:6f:e6:d1:
                    48:b2:b6:db:ff:9f:9f:c3:d7:78:bd:d7:d0:b9:ca:
                    fa:57:13:1d:80:23:15:95:c0:63:ff:79:dc:92:c5:
                    3a:81:b6:ae:f9:85:a9:76:31:85:f1:08:86:54:74:
                    cd:30:d9:90:48:97:1e:0a:28:3f:6e:dc:50:51:b6:
                    e5:0e:bb:07:63:3d:2f:30:81:7e:47:29:5e:30:a4:
                    92:f8:2c:8b:33:05:38:83:ba:d1:23:68:87:63:ea:
                    e7:15:3e:e1:c3:92:67:54:c9:7d:2c:ee:10:27:b1:
                    34:19:11:50:a8:74:2a:04:2a:b2:7f:23:ea:ac:88:
                    1e:4d:98:0e:f1:6f:dd:eb:29:c5:60:ce:d9:af:75:
                    57:f0:9a:24:bb:f5:03:f4:e1:04:d7:c5:46:75:cc:
                    7e:7e:6b:6d:b8:39:f9:08:6b:f8:cc:e3:a7:d5:94:
                    35:4e:2f:0b:ba:f2:d4:da:50:d4:a0:3b:f4:6a:41:
                    65:f7:55:a8:9a:69:43:df:9c:d0:ad:1b:3a:ce:0c:
                    c3:24:f5:2d:ac:83:51:55:5f:9a:30:ad:a7:b5:cb:
                    65:8d:18:be:30:ab:f2:dd:29:99:c7:21:63:84:a7:
                    f3:7a:63:45:79:a7:a8:0d:a6:e1:68:7d:7d:5d:86:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:92:71:F7:D0:76:1D:2C:6B:D1:2C:2B:44:F9:AC:44:0F:8F:32
            X509v3 Authority Key Identifier:
                keyid:49:BF:F8:73:37:85:8F:78:38:07:14:0B:41:1F:62:23:60:B1:46:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb_4czeFj3g4BxQLQR9iI2CxRsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:be:7a:93:71:a0:41:85:d0:06:50:50:26:b7:d1:20:a5:
         3b:1d:8e:68:68:99:d3:94:47:c1:87:d3:3e:b9:90:e1:87:a2:
         41:41:3a:c2:0a:58:cc:9d:95:93:08:7c:f6:e4:8e:43:f4:07:
         75:82:33:af:32:53:3c:d1:60:07:ad:6f:c8:2a:fa:82:13:8e:
         49:5f:9e:1f:c4:bc:bf:dd:c3:34:0e:f9:da:a7:61:1e:cd:3e:
         7c:8a:f9:67:28:66:31:27:15:61:af:79:7d:87:83:25:4d:ae:
         da:b1:ec:df:78:58:87:a9:63:3e:33:7b:8d:84:eb:74:0c:62:
         67:90:c2:d7:01:ef:82:e1:08:7e:5a:7e:fc:f9:5b:23:b0:05:
         a4:57:20:7a:a6:e1:65:bd:fd:86:c8:1e:28:37:43:30:ef:b1:
         6e:51:c2:bf:e5:39:0f:fb:11:89:79:e9:f9:6c:d0:55:fe:ba:
         6e:64:91:08:6c:b6:5d:58:89:2d:0e:3a:66:f9:9e:16:f2:1b:
         5c:f1:c8:04:cb:c6:80:2b:fc:ab:82:2a:15:e5:b2:8d:ec:23:
         e4:62:de:5a:cf:d5:75:5e:b7:a0:68:f3:c6:1f:25:01:4c:ed:
         f6:6c:9a:c5:6d:23:db:54:88:7a:a7:23:96:f1:f2:81:53:d7:
         e8:2d:6a:4d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUA8OZsk9ntE3L3QMg7t9rtyfBEWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDliZmY4NzMzNzg1OGY3ODM4MDcxNDBiNDExZjYyMjM2
MGIxNDZjMjAeFw0yNDA5MTgxMjQ1MzhaFw0yNDA5MTkxNDEyMzhaMDMxMTAvBgNV
BAMTKDgyREI5MjcxRjdEMDc2MUQyQzZCRDEyQzJCNDRGOUFDNDQwRjhGMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJNWHsG4ZSTWMTsm/m0Uiyttv/
n5/D13i919C5yvpXEx2AIxWVwGP/edySxTqBtq75hal2MYXxCIZUdM0w2ZBIlx4K
KD9u3FBRtuUOuwdjPS8wgX5HKV4wpJL4LIszBTiDutEjaIdj6ucVPuHDkmdUyX0s
7hAnsTQZEVCodCoEKrJ/I+qsiB5NmA7xb93rKcVgztmvdVfwmiS79QP04QTXxUZ1
zH5+a224OfkIa/jM46fVlDVOLwu68tTaUNSgO/RqQWX3VaiaaUPfnNCtGzrODMMk
9S2sg1FVX5owrae1y2WNGL4wq/LdKZnHIWOEp/N6Y0V5p6gNpuFofX1dhnblAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUgtuScffQdh0sa9EsK0T5rEQPjzIwHwYDVR0j
BBgwFoAUSb/4czeFj3g4BxQLQR9iI2CxRsIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2Q3YTU1MjctZmIxOS00NTY1LTk3MzMtZDQ1YTg3MDA1
MGU1LzAvNDlCRkY4NzMzNzg1OEY3ODM4MDcxNDBCNDExRjYyMjM2MEIxNDZDMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NiXzRjemVGajNnNEJ4UUxRUjlpSTJD
eFJzSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDdhNTUyNy1m
YjE5LTQ1NjUtOTczMy1kNDVhODcwMDUwZTUvMC80OUJGRjg3MzM3ODU4Rjc4Mzgw
NzE0MEI0MTFGNjIyMzYwQjE0NkMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLe+epNxoEGF0AZQUCa3
0SClOx2OaGiZ05RHwYfTPrmQ4YeiQUE6wgpYzJ2Vkwh89uSOQ/QHdYIzrzJTPNFg
B61vyCr6ghOOSV+eH8S8v93DNA752qdhHs0+fIr5ZyhmMScVYa95fYeDJU2u2rHs
33hYh6ljPjN7jYTrdAxiZ5DC1wHvguEIflp+/PlbI7AFpFcgeqbhZb39hsgeKDdD
MO+xblHCv+U5D/sRiXnp+WzQVf66bmSRCGy2XViJLQ46ZvmeFvIbXPHIBMvGgCv8
q4IqFeWyjewj5GLeWs/VdV63oGjzxh8lAUzt9myaxW0j21SIeqcjlvHygVPX6C1q
TQ==
-----END CERTIFICATE-----