Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft
File:                     341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft (raw, json)
Hash identifier:          uzobBmoAJR4JXxZXVhORc4aM5Y1xCZXss0Fv2fmwf8U=
Subject key identifier:   F8:32:64:A1:46:C8:A9:00:2F:99:F1:2F:B9:63:E2:A3:6D:70:51:75
Authority key identifier: 34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6
Certificate issuer:       /CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6
Certificate serial:       422CE16D510A834E41665517F0D21F25C94EF341
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft
Manifest number:          13
Signing time:             Tue 25 Jun 2024 18:02:48 +0000
Manifest this update:     Tue 25 Jun 2024 17:57:48 +0000
Manifest next update:     Wed 26 Jun 2024 19:41:48 +0000
Files and hashes:         1: 326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (hash: 0PZ2HJID9XheP2ZR30M5e+uc9KFWb33URoG3R3EDvcw=)
                          2: 341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.crl (hash: VC7FXWvReYQa5EnhvieTRsXFzVru8tMEkgxbUDbdZLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2c:e1:6d:51:0a:83:4e:41:66:55:17:f0:d2:1f:25:c9:4e:f3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6
        Validity
            Not Before: Jun 25 17:57:48 2024 GMT
            Not After : Jun 26 19:41:48 2024 GMT
        Subject: CN=F83264A146C8A9002F99F12FB963E2A36D705175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:2c:b4:82:86:70:f8:c7:2e:f8:9e:9a:f1:
                    2a:bc:87:4c:9e:31:8c:6a:31:23:9c:ae:f6:39:18:
                    d5:6d:90:f5:3f:83:2c:2e:47:3b:62:89:fa:7a:34:
                    ac:40:da:7d:5c:ac:09:58:d3:5a:9d:b0:d0:d7:f4:
                    29:ee:f0:68:b3:48:4d:88:08:86:bd:66:c3:0d:f7:
                    3a:c4:a6:94:30:81:f1:42:40:21:20:a3:b5:cd:e2:
                    cc:65:ff:c8:0c:12:57:c9:e6:f6:5c:21:de:59:e9:
                    35:05:0f:1d:10:d9:83:e5:bc:cf:35:ca:c2:93:bd:
                    d3:29:34:5b:15:4c:59:08:8d:d9:17:a1:9a:97:7f:
                    63:1f:50:da:18:93:5a:26:05:c8:45:9c:d6:a3:d6:
                    8c:9c:83:ee:e8:fd:9f:81:e8:73:51:ce:03:3a:74:
                    58:62:e3:85:20:e4:81:31:b3:91:94:a1:97:4c:09:
                    a3:12:ee:44:e3:00:c2:c2:ed:23:e8:f6:c8:9a:e7:
                    43:48:3f:bd:ab:fe:83:65:60:5d:29:4f:31:18:ae:
                    25:cd:ab:64:e1:58:a8:d4:a9:14:99:8c:86:e0:31:
                    3b:ef:cf:ec:2a:24:8d:fc:0e:a4:22:61:6a:bf:d1:
                    4c:01:ad:48:06:03:49:39:88:05:64:15:94:1a:2c:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:32:64:A1:46:C8:A9:00:2F:99:F1:2F:B9:63:E2:A3:6D:70:51:75
            X509v3 Authority Key Identifier:
                keyid:34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:84:9a:5b:a0:af:df:02:2e:1c:1e:6a:af:b5:ff:3e:66:
         93:47:c4:4a:4a:c0:d6:56:0e:00:95:7e:33:8d:d6:b1:c2:4c:
         e9:02:f7:99:9f:9a:bf:e2:93:21:58:45:63:0a:32:40:1f:60:
         b0:21:00:86:50:c9:65:bd:ec:47:55:a0:cd:95:72:ae:85:b0:
         f1:ed:6c:22:fe:29:71:40:75:f2:8b:97:c4:a9:0e:cf:45:53:
         56:25:43:cd:19:ba:a9:f1:00:4c:0d:1c:a2:bb:f6:6c:71:a4:
         80:f3:ae:ae:69:c5:f4:fc:d0:89:ea:e8:16:e5:f5:fb:69:37:
         59:96:9e:26:9b:68:b5:6e:31:9b:17:66:6e:c7:6b:38:27:0b:
         b3:93:d7:5c:62:94:62:72:ac:77:6c:33:19:e7:6d:e4:78:05:
         90:a9:ec:11:bf:5b:3a:20:9a:66:0d:2b:55:6b:74:14:29:d5:
         13:c0:aa:9f:83:c1:52:f9:6b:db:29:b1:40:de:af:35:fd:10:
         7d:cd:7c:07:a4:c3:85:bf:ce:c7:58:3f:cb:48:a1:6b:67:48:
         dc:23:59:ef:fb:d2:93:4f:40:9d:7e:66:40:81:38:5c:bb:cb:
         cc:d6:a1:dc:1e:1d:c3:ab:01:dd:5e:a7:70:32:ac:3b:f7:14:
         2a:d8:a0:b9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUQizhbVEKg05BZlUX8NIfJclO80EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQxREQyNDc4MjBCN0QyQUQ0RjA4NUZGN0Y1OTg4QURG
MTBGNEFDNjAeFw0yNDA2MjUxNzU3NDhaFw0yNDA2MjYxOTQxNDhaMDMxMTAvBgNV
BAMTKEY4MzI2NEExNDZDOEE5MDAyRjk5RjEyRkI5NjNFMkEzNkQ3MDUxNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEiy0goZw+Mcu+J6a8Sq8h0ye
MYxqMSOcrvY5GNVtkPU/gywuRztiifp6NKxA2n1crAlY01qdsNDX9Cnu8GizSE2I
CIa9ZsMN9zrEppQwgfFCQCEgo7XN4sxl/8gMElfJ5vZcId5Z6TUFDx0Q2YPlvM81
ysKTvdMpNFsVTFkIjdkXoZqXf2MfUNoYk1omBchFnNaj1oycg+7o/Z+B6HNRzgM6
dFhi44Ug5IExs5GUoZdMCaMS7kTjAMLC7SPo9sia50NIP72r/oNlYF0pTzEYriXN
q2ThWKjUqRSZjIbgMTvvz+wqJI38DqQiYWq/0UwBrUgGA0k5iAVkFZQaLEBBAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU+DJkoUbIqQAvmfEvuWPio21wUXUwHwYDVR0j
BBgwFoAUNB3SR4ILfSrU8IX/f1mIrfEPSsYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGE5ZjIxNWQtYTk3OC00MDJjLTkwNjQtNGRlNGZkNDk0
M2FmLzEvMzQxREQyNDc4MjBCN0QyQUQ0RjA4NUZGN0Y1OTg4QURGMTBGNEFDNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi
YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8zNDFERDI0NzgyMEI3RDJBRDRGMDg1RkY3
RjU5ODhBREYxMEY0QUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2RhOWYyMTVkLWE5NzgtNDAyYy05MDY0LTRkZTRmZDQ5NDNhZi8xLzM0MUREMjQ3
ODIwQjdEMkFENEYwODVGRjdGNTk4OEFERjEwRjRBQzYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPVISa
W6Cv3wIuHB5qr7X/PmaTR8RKSsDWVg4AlX4zjdaxwkzpAveZn5q/4pMhWEVjCjJA
H2CwIQCGUMllvexHVaDNlXKuhbDx7Wwi/ilxQHXyi5fEqQ7PRVNWJUPNGbqp8QBM
DRyiu/ZscaSA866uacX0/NCJ6ugW5fX7aTdZlp4mm2i1bjGbF2Zux2s4Jwuzk9dc
YpRicqx3bDMZ523keAWQqewRv1s6IJpmDStVa3QUKdUTwKqfg8FS+WvbKbFA3q81
/RB9zXwHpMOFv87HWD/LSKFrZ0jcI1nv+9KTT0CdfmZAgThcu8vM1qHcHh3DqwHd
XqdwMqw79xQq2KC5
-----END CERTIFICATE-----