Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/15/8940788569C637D13B936A2072BB13FCFECE9E32.mft
File:                     8940788569C637D13B936A2072BB13FCFECE9E32.mft (raw, json)
Hash identifier:          EsWqWLm9idXuFriL2fCkOgMBEhdlbqoLgafQSVnIb7c=
Subject key identifier:   F2:67:DE:C1:9E:9B:20:08:40:CB:91:34:CD:7B:65:41:EA:A0:3B:55
Authority key identifier: 89:40:78:85:69:C6:37:D1:3B:93:6A:20:72:BB:13:FC:FE:CE:9E:32
Certificate issuer:       /CN=8940788569c637d13b936a2072bb13fcfece9e32
Certificate serial:       3B841EA0826A751CEB205F7E787A8A500D2B01FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iUB4hWnGN9E7k2ogcrsT_P7OnjI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/15/8940788569C637D13B936A2072BB13FCFECE9E32.mft
Manifest number:          12
Signing time:             Sun 07 Jul 2024 17:18:52 +0000
Manifest this update:     Sun 07 Jul 2024 17:13:52 +0000
Manifest next update:     Mon 08 Jul 2024 18:36:52 +0000
Files and hashes:         1: 8940788569C637D13B936A2072BB13FCFECE9E32.crl (hash: RjBGkcOw2/5vlc7gydWWCcXlC3mdYHT9zGisvNbgmWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:84:1e:a0:82:6a:75:1c:eb:20:5f:7e:78:7a:8a:50:0d:2b:01:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8940788569c637d13b936a2072bb13fcfece9e32
        Validity
            Not Before: Jul  7 17:13:52 2024 GMT
            Not After : Jul  8 18:36:52 2024 GMT
        Subject: CN=F267DEC19E9B200840CB9134CD7B6541EAA03B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:bb:6c:7f:6b:a5:5b:53:ce:eb:9b:04:ed:
                    ce:a8:0c:15:af:d4:68:f8:67:8c:56:87:ca:a3:0e:
                    0a:50:30:a5:a5:15:5e:93:3a:c2:fe:ec:ab:a4:51:
                    5b:19:14:54:d3:21:c9:0a:d0:cf:a3:e5:14:6b:51:
                    06:6a:33:4d:7d:36:9f:94:70:95:ab:41:a5:4a:6c:
                    03:5c:de:18:f1:5a:af:f9:77:82:8a:0a:6a:31:79:
                    c6:5a:e1:c5:5a:cf:38:fe:8d:f1:56:51:7c:45:dc:
                    32:8a:cc:c4:df:9c:dd:7b:21:3e:88:52:76:98:43:
                    34:54:69:1e:f6:26:bd:31:b3:9d:f9:a8:00:2c:2f:
                    df:ea:69:34:f4:08:f7:c7:06:6f:9e:cb:9e:e2:3a:
                    f7:c1:e8:93:f4:cb:67:dd:8e:1b:e0:bc:b4:1d:5a:
                    07:e5:d2:0d:db:43:83:6e:3f:a2:3e:5e:98:24:5a:
                    98:8e:f4:a7:77:58:94:5e:f7:9c:5e:b9:1b:a9:91:
                    27:97:5f:43:4b:02:35:56:66:2d:29:d7:8b:cf:3b:
                    56:ce:59:a7:7c:2c:db:c7:e3:c3:8d:75:e8:5e:d7:
                    23:03:e3:47:fe:14:65:5c:eb:34:9c:aa:67:b1:14:
                    71:d1:a4:4d:8c:9a:77:bf:02:b9:90:c9:03:a8:68:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:67:DE:C1:9E:9B:20:08:40:CB:91:34:CD:7B:65:41:EA:A0:3B:55
            X509v3 Authority Key Identifier:
                keyid:89:40:78:85:69:C6:37:D1:3B:93:6A:20:72:BB:13:FC:FE:CE:9E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/15/8940788569C637D13B936A2072BB13FCFECE9E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUB4hWnGN9E7k2ogcrsT_P7OnjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/15/8940788569C637D13B936A2072BB13FCFECE9E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d7:06:31:3d:37:bc:d7:56:ab:08:43:1b:76:47:3e:8b:c2:
         21:fd:0c:ea:85:31:19:3b:dd:d4:0e:8a:9b:20:ec:60:bc:0b:
         c0:0a:fd:ed:26:ad:c9:14:6b:94:69:59:e7:c0:d2:a7:dc:29:
         47:48:b7:ec:e8:c4:ba:0f:31:07:7d:fb:fd:9b:51:93:3a:a8:
         38:5b:c9:c7:db:35:4e:1b:ef:9d:2c:90:da:a9:d8:ca:d0:0d:
         d0:d3:16:a1:85:a6:e2:66:54:64:1c:0d:7b:a9:11:fb:e0:8e:
         c7:f4:93:84:e0:e0:31:3d:b4:89:d4:bc:4a:0d:57:78:11:bb:
         ad:92:bb:ae:64:b7:1a:9b:6b:58:56:58:2f:d8:46:a5:d3:9f:
         58:7b:2e:01:6e:80:1f:8c:c9:ed:60:9f:56:6f:ec:0b:2d:cb:
         c0:56:c0:50:9c:4c:42:fc:d4:35:0c:4d:ee:de:af:f1:57:c9:
         70:58:f1:aa:37:cb:b0:dc:33:22:aa:d0:e5:a6:ef:22:06:d6:
         88:10:7b:3a:43:f5:f1:03:4c:0d:a3:1f:84:78:fe:cc:37:ed:
         f6:de:d2:31:5c:cf:f4:c5:25:e5:f5:58:72:4b:13:9c:c1:d4:
         6b:7f:32:28:72:06:22:25:f9:b5:6e:04:62:93:34:28:e5:7c:
         d3:72:57:5c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUO4QeoIJqdRzrIF9+eHqKUA0rAfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk0MDc4ODU2OWM2MzdkMTNiOTM2YTIwNzJiYjEzZmNm
ZWNlOWUzMjAeFw0yNDA3MDcxNzEzNTJaFw0yNDA3MDgxODM2NTJaMDMxMTAvBgNV
BAMTKEYyNjdERUMxOUU5QjIwMDg0MENCOTEzNENEN0I2NTQxRUFBMDNCNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvc7tsf2ulW1PO65sE7c6oDBWv
1Gj4Z4xWh8qjDgpQMKWlFV6TOsL+7KukUVsZFFTTIckK0M+j5RRrUQZqM019Np+U
cJWrQaVKbANc3hjxWq/5d4KKCmoxecZa4cVazzj+jfFWUXxF3DKKzMTfnN17IT6I
UnaYQzRUaR72Jr0xs535qAAsL9/qaTT0CPfHBm+ey57iOvfB6JP0y2fdjhvgvLQd
Wgfl0g3bQ4NuP6I+XpgkWpiO9Kd3WJRe95xeuRupkSeXX0NLAjVWZi0p14vPO1bO
Wad8LNvH48ONdehe1yMD40f+FGVc6zScqmexFHHRpE2Mmne/ArmQyQOoaFP/AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU8mfewZ6bIAhAy5E0zXtlQeqgO1UwHwYDVR0j
BBgwFoAUiUB4hWnGN9E7k2ogcrsT/P7OnjIwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAz
YTJjNi8xNS84OTQwNzg4NTY5QzYzN0QxM0I5MzZBMjA3MkJCMTNGQ0ZFQ0U5RTMy
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvaVVCNGhXbkdOOUU3azJvZ2Nyc1Rf
UDdPbmpJLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4Mzdm
Yi02MzkwLTQxYjUtODJhMC1mMGQwMmMwM2EyYzYvMTUvODk0MDc4ODU2OUM2MzdE
MTNCOTM2QTIwNzJCQjEzRkNGRUNFOUUzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJnXBjE9N7zXVqsI
Qxt2Rz6LwiH9DOqFMRk73dQOipsg7GC8C8AK/e0mrckUa5RpWefA0qfcKUdIt+zo
xLoPMQd9+/2bUZM6qDhbycfbNU4b750skNqp2MrQDdDTFqGFpuJmVGQcDXupEfvg
jsf0k4Tg4DE9tInUvEoNV3gRu62Su65ktxqba1hWWC/YRqXTn1h7LgFugB+Mye1g
n1Zv7Asty8BWwFCcTEL81DUMTe7er/FXyXBY8ao3y7DcMyKq0OWm7yIG1ogQezpD
9fEDTA2jH4R4/sw37fbe0jFcz/TFJeX1WHJLE5zB1Gt/MihyBiIl+bVuBGKTNCjl
fNNyV1w=
-----END CERTIFICATE-----