Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/3/15D42BDB149A760A9A776115CA730FE698C05D4B.mft
File:                     15D42BDB149A760A9A776115CA730FE698C05D4B.mft (raw, json)
Hash identifier:          fJXqGI99y4hhJGvAIjbFXNQCBn1TJEcxcA7wXQ+E88M=
Subject key identifier:   25:C7:AB:9B:C6:C1:4D:A5:96:BF:47:0A:CD:47:03:A3:06:AF:B6:32
Authority key identifier: 15:D4:2B:DB:14:9A:76:0A:9A:77:61:15:CA:73:0F:E6:98:C0:5D:4B
Certificate issuer:       /CN=1822fe9c8a1c71673cffabff579bfecf558dc7470064b85416
Certificate serial:       468D13F7526A9B1DACE1804A023C4327919CC7F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1c71673cffabff579bfecf558dc7470064b85416.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/3/15D42BDB149A760A9A776115CA730FE698C05D4B.mft
Manifest number:          04
Signing time:             Sun 12 Nov 2023 08:22:08 +0000
Manifest this update:     Sun 12 Nov 2023 08:17:08 +0000
Manifest next update:     Mon 13 Nov 2023 09:58:08 +0000
Files and hashes:         1: 323630323a666162383a3a2f33362d3336203d3e20323033343533.roa (hash: yqZjvNjCquIDi1yikpDDIywYhSIb9TkNPkAARTzZ6GA=)
                          2: 32332e3134352e35362e302f32342d3234203d3e203135333533.roa (hash: WiLkslDgqAhtILjiP1dL0okcdR0C7zWcQ4FtID8a9hQ=)
                          3: 15D42BDB149A760A9A776115CA730FE698C05D4B.crl (hash: tFL+VJjjz7iIpw8EwTh0SHwtPWQu1YgrnTDH6B9IjDI=)
                          4: 32332e3134352e35372e302f32342d3234203d3e203630393030.roa (hash: LgK+go0HpKOfRtqbFXZgCfdqLHPe7lq8hrU1HjdLApc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:13:f7:52:6a:9b:1d:ac:e1:80:4a:02:3c:43:27:91:9c:c7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1c71673cffabff579bfecf558dc7470064b85416
        Validity
            Not Before: Nov 12 08:17:08 2023 GMT
            Not After : Nov 13 09:58:08 2023 GMT
        Subject: CN=25C7AB9BC6C14DA596BF470ACD4703A306AFB632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ef:53:e2:a8:c3:73:ea:1c:ab:1d:f6:66:a3:
                    02:ab:55:f8:6b:5b:c8:e1:61:ea:98:d3:80:b9:dd:
                    09:74:1c:e2:06:be:aa:5a:35:20:43:e6:93:e8:6c:
                    7f:61:d8:15:0a:81:48:90:b3:bb:e3:10:56:eb:e6:
                    6b:09:01:8c:4b:a7:7e:98:3b:ff:5a:03:12:2f:a1:
                    32:c8:8c:68:de:ec:ab:e9:b4:65:81:83:ba:00:d5:
                    7d:8d:9a:0c:54:11:4a:13:3d:c2:5e:7e:30:07:ce:
                    98:e4:b8:bd:73:0f:dc:56:fc:c1:59:04:59:44:3b:
                    e5:53:b3:c5:9d:bf:d5:2e:f1:6b:17:3e:7d:73:ff:
                    23:72:c0:66:90:98:af:c0:d7:d1:73:3b:51:8e:dd:
                    ef:4f:97:8e:f9:2f:8c:3a:35:3c:d1:cd:ca:8d:92:
                    c2:db:67:6d:3a:fd:b7:3b:38:44:80:bb:89:84:c1:
                    ad:f1:b5:ce:0f:47:17:32:50:4f:81:cc:f4:d6:05:
                    bb:07:26:e2:98:06:2a:ec:1d:15:a3:1d:c0:1c:c5:
                    63:d2:08:be:f5:63:23:87:28:4a:d7:3b:c2:b7:47:
                    81:07:f6:0b:e7:15:dc:da:95:b1:77:e7:c8:6d:13:
                    1f:41:fb:27:96:dc:6a:13:29:e0:4b:f3:6f:41:46:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C7:AB:9B:C6:C1:4D:A5:96:BF:47:0A:CD:47:03:A3:06:AF:B6:32
            X509v3 Authority Key Identifier:
                keyid:15:D4:2B:DB:14:9A:76:0A:9A:77:61:15:CA:73:0F:E6:98:C0:5D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/3/15D42BDB149A760A9A776115CA730FE698C05D4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1c71673cffabff579bfecf558dc7470064b85416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/3/15D42BDB149A760A9A776115CA730FE698C05D4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:34:7e:46:13:d1:7d:18:e4:f8:25:13:4d:cb:e8:be:a9:
         f3:40:67:17:9f:b8:f3:2a:ee:c5:a5:c4:6f:ad:02:80:d6:26:
         df:25:04:c7:c6:cb:a6:cd:de:c3:61:b5:fe:5e:e7:76:6f:47:
         da:cb:b3:b5:3e:96:e6:92:64:5e:42:e3:a7:4b:4b:80:9d:97:
         81:58:c1:08:c3:aa:79:e3:2b:f4:63:8e:34:63:a9:ec:17:d5:
         2c:13:b1:3d:33:19:e2:dc:a6:0e:d4:0d:8a:13:6b:36:79:bb:
         7c:bf:28:04:78:4d:58:aa:8a:65:03:71:4e:19:0c:c6:5c:4b:
         95:80:28:5e:44:47:ee:9f:47:ab:ca:f4:1f:f7:d5:e7:b1:01:
         d9:64:95:ea:72:01:f4:7b:fe:d2:67:a6:b5:86:6e:04:06:5d:
         55:70:b2:43:7f:3a:70:f8:6c:e8:80:c6:d3:da:d6:41:a4:d8:
         f7:91:99:17:a2:f4:5e:b7:8d:22:a8:3b:b8:7c:c0:15:d2:c6:
         6a:ea:5b:d0:e8:4f:17:35:af:24:5f:d9:74:1c:98:9c:fa:0f:
         44:05:63:f0:4b:8e:0f:ec:60:5b:a6:88:6c:9a:a0:27:7e:98:
         1c:15:2b:d9:41:74:c3:33:de:e1:d7:2f:cb:8d:7c:c7:a7:8e:
         e4:e2:60:90
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIURo0T91Jqmx2s4YBKAjxDJ5Gcx/EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTFjNzE2NzNjZmZhYmZmNTc5YmZlY2Y1
NThkYzc0NzAwNjRiODU0MTYwHhcNMjMxMTEyMDgxNzA4WhcNMjMxMTEzMDk1ODA4
WjAzMTEwLwYDVQQDEygyNUM3QUI5QkM2QzE0REE1OTZCRjQ3MEFDRDQ3MDNBMzA2
QUZCNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e9T4qjDc+oc
qx32ZqMCq1X4a1vI4WHqmNOAud0JdBziBr6qWjUgQ+aT6Gx/YdgVCoFIkLO74xBW
6+ZrCQGMS6d+mDv/WgMSL6EyyIxo3uyr6bRlgYO6ANV9jZoMVBFKEz3CXn4wB86Y
5Li9cw/cVvzBWQRZRDvlU7PFnb/VLvFrFz59c/8jcsBmkJivwNfRcztRjt3vT5eO
+S+MOjU80c3KjZLC22dtOv23OzhEgLuJhMGt8bXOD0cXMlBPgcz01gW7BybimAYq
7B0Vox3AHMVj0gi+9WMjhyhK1zvCt0eBB/YL5xXc2pWxd+fIbRMfQfsnltxqEyng
S/NvQUYtbQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFCXHq5vGwU2llr9HCs1HA6MG
r7YyMB8GA1UdIwQYMBaAFBXUK9sUmnYKmndhFcpzD+aYwF1LMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UzODQ5ZGEyLTc1MDQtNDI3ZS1hMmUz
LWJiNjE0NTZjMGIyZC8zLzE1RDQyQkRCMTQ5QTc2MEE5QTc3NjExNUNBNzMwRkU2
OThDMDVENEIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1j
ZTcwNDVmZmQyM2EvMTgyMmZlOWM4YTFjNzE2NzNjZmZhYmZmNTc5YmZlY2Y1NThk
Yzc0NzAwNjRiODU0MTYuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ZTM4NDlkYTItNzUwNC00MjdlLWEyZTMtYmI2MTQ1NmMwYjJkLzMvMTVENDJCREIx
NDlBNzYwQTlBNzc2MTE1Q0E3MzBGRTY5OEMwNUQ0Qi5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADkcNH5G
E9F9GOT4JRNNy+i+qfNAZxefuPMq7sWlxG+tAoDWJt8lBMfGy6bN3sNhtf5e53Zv
R9rLs7U+luaSZF5C46dLS4Cdl4FYwQjDqnnjK/RjjjRjqewX1SwTsT0zGeLcpg7U
DYoTazZ5u3y/KAR4TViqimUDcU4ZDMZcS5WAKF5ER+6fR6vK9B/31eexAdlklepy
AfR7/tJnprWGbgQGXVVwskN/OnD4bOiAxtPa1kGk2PeRmRei9F63jSKoO7h8wBXS
xmrqW9DoTxc1ryRf2XQcmJz6D0QFY/BLjg/sYFumiGyaoCd+mBwVK9lBdMMz3uHX
L8uNfMenjuTiYJA=
-----END CERTIFICATE-----
Generated at Sun Nov 12 14:40:22 2023 by rpki-client on console-fra.rpki-client.org