Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/0/818A36A41666E404EE48D5FF480736085907B4F3.mft
File:                     818A36A41666E404EE48D5FF480736085907B4F3.mft (raw, json)
Hash identifier:          KzxSLg1wvLgkUy8VsE5nqNgNhPOsrCK7Ufo6NNXu9ss=
Subject key identifier:   76:68:A3:3F:AF:65:93:09:03:A3:04:E3:DB:E0:B8:43:3D:F5:E3:E7
Authority key identifier: 81:8A:36:A4:16:66:E4:04:EE:48:D5:FF:48:07:36:08:59:07:B4:F3
Certificate issuer:       /CN=818a36a41666e404ee48d5ff480736085907b4f3
Certificate serial:       79DAFA5CF13FB7B06B0C65A4674604EF76BA0D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYo2pBZm5ATuSNX_SAc2CFkHtPM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/0/818A36A41666E404EE48D5FF480736085907B4F3.mft
Manifest number:          31
Signing time:             Sat 28 Sep 2024 17:32:54 +0000
Manifest this update:     Sat 28 Sep 2024 17:27:54 +0000
Manifest next update:     Sun 29 Sep 2024 19:18:54 +0000
Files and hashes:         1: AS214757.asa (hash: nDkzy9/dc9Bywki2wpbNBx4hwXyhxaDcKikjpqGY0pU=)
                          2: 818A36A41666E404EE48D5FF480736085907B4F3.crl (hash: wbpswHywV23Af3Urq/yNbN4eYSog/RzDsONk9zLXHtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:da:fa:5c:f1:3f:b7:b0:6b:0c:65:a4:67:46:04:ef:76:ba:0d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818a36a41666e404ee48d5ff480736085907b4f3
        Validity
            Not Before: Sep 28 17:27:54 2024 GMT
            Not After : Sep 29 19:18:54 2024 GMT
        Subject: CN=7668A33FAF65930903A304E3DBE0B8433DF5E3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:8f:a2:79:62:af:b9:04:31:62:c7:96:9a:
                    cc:ae:30:00:b8:85:34:3d:67:77:eb:1e:c3:9f:15:
                    36:3d:7b:01:27:a6:48:31:14:60:aa:ea:95:b0:d2:
                    15:f3:e2:74:17:ff:ea:ea:4b:e8:e6:51:f8:d8:41:
                    51:44:0e:33:71:99:70:70:a8:93:d0:f8:db:91:ac:
                    fc:bc:85:68:a3:eb:79:cc:6d:33:ba:07:d3:c2:cc:
                    51:b4:83:63:75:63:dc:4e:6a:fb:72:8d:7e:52:32:
                    45:64:b9:43:19:a7:6e:c5:82:63:c8:91:40:f2:4d:
                    53:ee:1d:9a:2a:3e:0e:9d:6f:c0:4a:35:77:56:b3:
                    2b:de:c0:cd:1a:77:db:76:14:b6:ed:69:2b:04:d8:
                    a5:d8:ac:66:d2:6c:21:1e:81:1f:c9:24:87:72:2a:
                    f1:aa:e1:57:eb:cc:00:fb:0b:fc:ef:cc:45:b0:11:
                    c3:8f:4e:c1:28:51:9b:a8:63:f1:1b:b8:f4:4f:23:
                    8a:6f:7a:cd:8e:0d:ce:bb:ee:b4:c9:53:30:56:3b:
                    21:b8:70:d4:a4:b6:21:87:7b:b9:51:ba:14:24:1c:
                    12:8f:e9:2f:ca:e2:b9:6a:09:00:79:f3:10:92:f3:
                    9f:bc:48:40:94:f4:b1:60:41:a9:5d:b4:58:b0:13:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:68:A3:3F:AF:65:93:09:03:A3:04:E3:DB:E0:B8:43:3D:F5:E3:E7
            X509v3 Authority Key Identifier:
                keyid:81:8A:36:A4:16:66:E4:04:EE:48:D5:FF:48:07:36:08:59:07:B4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/0/818A36A41666E404EE48D5FF480736085907B4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYo2pBZm5ATuSNX_SAc2CFkHtPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/0/818A36A41666E404EE48D5FF480736085907B4F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:6c:c4:09:d2:c1:a0:7f:68:50:9f:84:da:f5:ec:04:9a:
         ca:9c:12:cf:e6:47:5f:31:b5:15:ff:ff:95:5a:28:8f:23:91:
         3a:8f:b8:47:54:a0:ad:2f:7a:dd:0d:e8:ca:25:35:29:f6:4e:
         4a:a7:8e:93:c8:3d:fc:e7:ca:70:0d:1b:5d:ac:86:bb:77:b8:
         0a:8c:ec:54:7a:c6:a6:f1:dd:63:36:2d:cf:f3:43:ce:01:50:
         86:b6:74:dc:1c:05:0a:f0:ef:bb:15:ba:5e:bf:ef:c4:09:b1:
         39:ea:61:5c:e4:57:a1:9a:27:e7:05:c3:d5:c0:ea:c7:e8:90:
         48:a5:1e:56:f5:3c:73:20:dd:40:10:d1:27:e8:d6:bf:07:90:
         0d:f4:2f:98:6f:5e:c5:0a:97:0a:73:6f:72:82:33:d9:fb:b2:
         19:29:b2:c7:fd:55:06:43:f9:9f:58:e2:f7:0a:e1:a6:16:b0:
         8a:f5:e6:ab:bf:35:56:45:39:fd:42:e4:10:12:54:09:b6:43:
         1f:eb:b0:06:9d:de:35:45:fe:91:16:ae:0c:ab:8d:5a:e5:b5:
         7e:cc:a4:c9:93:bd:2b:e5:83:42:46:a3:b0:51:c2:3e:b3:c5:
         6e:c7:6e:07:81:9b:85:b8:a0:9e:b4:ee:41:5a:15:1a:9a:41:
         46:48:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----