Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft
File:                     72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft (raw, json)
Hash identifier:          jSe6gYZ3t9H0cry2MqsWCfau0H4eCQwA2kzian025fw=
Subject key identifier:   69:C4:9B:D4:70:37:EC:F2:4C:75:76:21:A9:C9:C9:26:D1:84:DD:D5
Authority key identifier: 72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4
Certificate issuer:       /CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
Certificate serial:       26964B6CFDDCABB81B54484D35F1731655701117
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft
Manifest number:          09
Signing time:             Sun 25 Feb 2024 02:27:09 +0000
Manifest this update:     Sun 25 Feb 2024 02:22:09 +0000
Manifest next update:     Mon 26 Feb 2024 05:52:09 +0000
Files and hashes:         1: 326130373a323438373a3a2f33322d3332203d3e20323135383238.roa (hash: gk5hbC0JB5WKQK3JtzAIfwyfkhXWvCr2UxY0RQsxZZ4=)
                          2: 72484EF62E84FA48E7A4A243EFAAF012268DBBB4.crl (hash: MyqglkEp51LFDqjbIcQ9RI/lPPBb7d6upo+IzXSPXXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:96:4b:6c:fd:dc:ab:b8:1b:54:48:4d:35:f1:73:16:55:70:11:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
        Validity
            Not Before: Feb 25 02:22:09 2024 GMT
            Not After : Feb 26 05:52:09 2024 GMT
        Subject: CN=69C49BD47037ECF24C757621A9C9C926D184DDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:a4:4f:30:50:48:da:45:3f:2f:f8:a1:25:
                    54:79:19:a3:d3:e4:f9:0d:ac:d0:23:96:31:1c:fb:
                    bd:79:e0:93:5a:67:11:f9:1e:99:c5:a7:29:f8:08:
                    74:d8:5e:3d:ef:e8:aa:1a:f5:90:0e:ed:20:68:cd:
                    e3:6d:b7:9e:01:58:61:04:7d:c2:ff:53:e5:86:5e:
                    d5:f7:4f:d7:9b:9e:11:62:43:96:6a:58:b7:cf:ed:
                    35:a3:a0:89:de:de:67:2e:51:90:69:7c:f7:0e:6c:
                    73:75:23:6c:59:0a:70:50:02:e8:54:54:57:e1:20:
                    ca:d6:7b:34:f3:4f:8e:70:51:96:38:36:10:bd:f7:
                    d6:c0:a4:5a:3c:cf:56:f2:b1:19:77:50:70:3c:c7:
                    8d:b9:d2:a3:16:f6:b7:9d:43:e2:f2:4e:ed:ad:40:
                    ad:b0:36:a4:bc:5e:91:a9:2c:6b:0e:6f:6c:cb:50:
                    81:28:39:87:fa:71:25:d2:3f:d6:5d:a6:0f:33:71:
                    03:c0:b8:a2:ac:3c:53:d5:a5:a6:a4:39:bc:2d:53:
                    d4:94:b8:20:ea:63:74:ff:b7:85:eb:77:dd:3a:89:
                    b5:2a:d4:50:37:6d:4b:72:3e:f5:46:b8:f6:78:e2:
                    02:b8:07:c2:e0:89:3b:2f:eb:fe:ed:14:3a:8c:d1:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:9B:D4:70:37:EC:F2:4C:75:76:21:A9:C9:C9:26:D1:84:DD:D5
            X509v3 Authority Key Identifier:
                keyid:72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6d:e3:df:c5:0e:f6:4e:e2:41:29:87:92:7c:bd:31:13:35:
         83:92:e9:76:e0:df:9a:01:3f:6b:dd:a9:58:d0:9b:3f:25:fe:
         92:4c:c8:61:ef:cb:43:50:d6:c8:4b:7c:42:6b:8f:f6:46:0e:
         1c:3c:ab:53:bf:00:35:10:3a:63:29:00:1d:42:97:19:50:4d:
         42:02:f6:36:02:57:a9:26:ad:b9:b1:0f:46:f4:a4:09:3b:82:
         a1:5c:32:ed:26:1a:32:19:49:fb:03:d6:d4:16:e0:f2:07:e9:
         2e:37:cf:19:31:85:8f:cc:d5:3d:dd:8e:b1:8b:c3:88:c2:2a:
         95:08:6a:f0:a1:56:f4:34:4c:f1:ba:37:e3:ad:bf:32:27:77:
         0b:47:e8:21:af:78:e7:10:2d:8e:71:38:55:e5:56:c5:8b:0f:
         f7:14:3b:67:d1:f9:d6:23:ba:14:e6:85:bf:de:85:76:3f:35:
         5b:34:6a:a0:70:41:95:b2:a5:73:df:c0:0b:dc:a4:37:c1:86:
         73:cc:bd:82:fe:d3:8a:27:54:64:c9:f1:0c:27:14:24:94:3f:
         63:72:45:1e:ca:27:23:7c:ba:58:f0:7d:e1:29:6b:a8:1c:22:
         37:d0:cc:65:4a:94:85:91:7a:90:a4:8c:d1:50:50:65:f2:bc:
         c6:d0:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----