Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/25/622AE60DF10316FF239E06C81496586CE466AAE4.mft
File:                     622AE60DF10316FF239E06C81496586CE466AAE4.mft (raw, json)
Hash identifier:          W6j8k/5p9bN9KMO2jXY2Cvgj+Obxm21A3N6q6de12lc=
Subject key identifier:   CA:DC:39:C9:9D:36:FB:A7:A3:8A:A4:2C:85:12:68:A2:D3:FB:81:24
Authority key identifier: 62:2A:E6:0D:F1:03:16:FF:23:9E:06:C8:14:96:58:6C:E4:66:AA:E4
Certificate issuer:       /CN=622ae60df10316ff239e06c81496586ce466aae4
Certificate serial:       1B4A195DDCE2EDBBDF8AE7C5B2E46FE52966691A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YirmDfEDFv8jngbIFJZYbORmquQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/25/622AE60DF10316FF239E06C81496586CE466AAE4.mft
Manifest number:          13
Signing time:             Sun 07 Jul 2024 17:18:52 +0000
Manifest this update:     Sun 07 Jul 2024 17:13:52 +0000
Manifest next update:     Mon 08 Jul 2024 17:30:52 +0000
Files and hashes:         1: 622AE60DF10316FF239E06C81496586CE466AAE4.crl (hash: wtxS1TNi4deKBPwaZ5bghvy7jWQBgS6RmR46ErIj5XM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4a:19:5d:dc:e2:ed:bb:df:8a:e7:c5:b2:e4:6f:e5:29:66:69:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ae60df10316ff239e06c81496586ce466aae4
        Validity
            Not Before: Jul  7 17:13:52 2024 GMT
            Not After : Jul  8 17:30:52 2024 GMT
        Subject: CN=CADC39C99D36FBA7A38AA42C851268A2D3FB8124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bb:cf:57:d4:a2:31:1b:8f:ca:89:14:f7:b9:
                    45:62:e5:ea:c0:e5:97:5d:b4:a8:3e:4d:95:e7:c7:
                    ad:a6:0a:90:39:af:0b:53:d0:40:71:9d:b1:b0:67:
                    bc:b7:57:6a:c6:8a:83:a5:b9:f6:eb:8a:6f:32:55:
                    30:fb:ba:2d:e1:b8:5a:23:5f:1e:38:48:f1:bc:72:
                    d9:e2:ee:f1:c8:00:8f:ce:a7:e8:55:0d:cc:37:95:
                    42:0d:e1:63:0e:23:8c:0e:32:06:fc:e1:5c:6d:4d:
                    22:6f:30:bb:f4:ad:f5:e2:dd:8f:d0:3f:17:dd:82:
                    1a:07:18:ef:1f:c5:a0:f6:55:84:ba:9c:8c:f1:f2:
                    8f:e5:dd:eb:7d:e8:05:06:04:25:c4:7e:0a:df:47:
                    5e:32:5b:6e:48:34:2c:60:0a:8b:aa:41:83:87:0e:
                    57:64:af:d8:78:20:62:ea:76:0b:7c:c9:59:33:d6:
                    a5:71:39:9d:86:a8:d3:7a:6d:1c:e3:29:dc:14:df:
                    df:ac:5b:cb:52:9e:ec:77:cb:03:da:49:74:cd:60:
                    c6:4b:0e:0c:3f:48:a4:8c:c2:5b:28:90:69:2f:4b:
                    5e:c6:ab:e7:fb:30:39:40:db:53:b5:e4:0e:ef:05:
                    a4:14:7a:45:03:45:83:0b:3d:77:23:85:c0:a6:b3:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DC:39:C9:9D:36:FB:A7:A3:8A:A4:2C:85:12:68:A2:D3:FB:81:24
            X509v3 Authority Key Identifier:
                keyid:62:2A:E6:0D:F1:03:16:FF:23:9E:06:C8:14:96:58:6C:E4:66:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/25/622AE60DF10316FF239E06C81496586CE466AAE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YirmDfEDFv8jngbIFJZYbORmquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/25/622AE60DF10316FF239E06C81496586CE466AAE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f9:bc:2a:96:00:44:8b:36:cb:83:78:37:60:60:9e:52:30:
         04:de:65:6d:a6:e9:9b:13:cf:71:66:73:15:23:c9:2f:d7:f7:
         87:ed:31:a9:c0:ca:64:c8:59:7d:0d:99:54:e7:de:d9:1b:98:
         7b:b4:31:d2:c6:64:b5:84:ef:55:c0:5b:dd:e9:ae:2d:4e:29:
         74:04:b4:a5:cd:4d:af:a3:b2:86:c7:e4:2e:63:b9:a1:02:3f:
         77:74:06:0a:c8:f0:01:b4:53:ba:41:56:a5:e9:39:fb:ef:47:
         0b:bc:77:6c:24:f8:c5:6e:45:51:6a:0f:9a:15:69:09:70:8f:
         f9:f8:04:2b:d6:9c:6b:e3:24:fb:6d:ac:e8:26:64:9b:36:45:
         c1:45:75:50:00:00:0e:c2:3d:72:fc:4c:90:d8:1d:71:2a:8f:
         bf:06:6f:d2:77:5d:0f:b3:8f:89:a2:cb:8f:e9:8d:1a:6d:85:
         d3:8a:35:89:c7:29:50:8d:24:c0:c1:a8:c3:4d:0e:f7:91:ad:
         a0:f5:9e:35:47:9b:64:36:8f:d6:c8:69:59:3f:9d:be:e1:2d:
         6c:ed:fd:c3:79:00:5d:4e:b1:f7:f5:54:4d:0b:a5:a4:7f:bd:
         55:40:35:91:35:32:50:d6:35:c4:2b:3e:80:99:ee:dc:a0:2c:
         69:8a:aa:ba
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUG0oZXdzi7bvfiufFsuRv5SlmaRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIyYWU2MGRmMTAzMTZmZjIzOWUwNmM4MTQ5NjU4NmNl
NDY2YWFlNDAeFw0yNDA3MDcxNzEzNTJaFw0yNDA3MDgxNzMwNTJaMDMxMTAvBgNV
BAMTKENBREMzOUM5OUQzNkZCQTdBMzhBQTQyQzg1MTI2OEEyRDNGQjgxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDou89X1KIxG4/KiRT3uUVi5erA
5ZddtKg+TZXnx62mCpA5rwtT0EBxnbGwZ7y3V2rGioOlufbrim8yVTD7ui3huFoj
Xx44SPG8ctni7vHIAI/Op+hVDcw3lUIN4WMOI4wOMgb84VxtTSJvMLv0rfXi3Y/Q
PxfdghoHGO8fxaD2VYS6nIzx8o/l3et96AUGBCXEfgrfR14yW25INCxgCouqQYOH
Dldkr9h4IGLqdgt8yVkz1qVxOZ2GqNN6bRzjKdwU39+sW8tSnux3ywPaSXTNYMZL
Dgw/SKSMwlsokGkvS17Gq+f7MDlA21O15A7vBaQUekUDRYMLPXcjhcCms8s9AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUytw5yZ02+6ejiqQshRJootP7gSQwHwYDVR0j
BBgwFoAUYirmDfEDFv8jngbIFJZYbORmquQwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAz
YTJjNi8yNS82MjJBRTYwREYxMDMxNkZGMjM5RTA2QzgxNDk2NTg2Q0U0NjZBQUU0
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvWWlybURmRURGdjhqbmdiSUZKWlli
T1JtcXVRLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4Mzdm
Yi02MzkwLTQxYjUtODJhMC1mMGQwMmMwM2EyYzYvMjUvNjIyQUU2MERGMTAzMTZG
RjIzOUUwNkM4MTQ5NjU4NkNFNDY2QUFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK35vCqWAESLNsuD
eDdgYJ5SMATeZW2m6ZsTz3FmcxUjyS/X94ftManAymTIWX0NmVTn3tkbmHu0MdLG
ZLWE71XAW93pri1OKXQEtKXNTa+jsobH5C5juaECP3d0BgrI8AG0U7pBVqXpOfvv
Rwu8d2wk+MVuRVFqD5oVaQlwj/n4BCvWnGvjJPttrOgmZJs2RcFFdVAAAA7CPXL8
TJDYHXEqj78Gb9J3XQ+zj4miy4/pjRpthdOKNYnHKVCNJMDBqMNNDveRraD1njVH
m2Q2j9bIaVk/nb7hLWzt/cN5AF1Osff1VE0LpaR/vVVANZE1MlDWNcQrPoCZ7tyg
LGmKqro=
-----END CERTIFICATE-----