Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.mft
File:                     086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.mft (raw, json)
Hash identifier:          YEUdFXcKTIyq+vfGHiqAfLCUoXL25JCFX5MV0DeEwsc=
Subject key identifier:   77:84:80:FC:92:C9:4A:2E:87:9C:29:86:25:24:81:19:BE:49:97:9F
Authority key identifier: 08:6E:60:64:84:FD:4D:BC:6C:90:99:FE:4B:67:A8:F1:4D:88:A4:C5
Certificate issuer:       /CN=086e606484fd4dbc6c9099fe4b67a8f14d88a4c5
Certificate serial:       5DBB9CCD749E2AB8C3DAF1DB8DC3D5E72590CE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CG5gZIT9TbxskJn-S2eo8U2IpMU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.mft
Manifest number:          0153
Signing time:             Thu 30 Nov 2023 04:40:58 +0000
Manifest this update:     Thu 30 Nov 2023 04:35:58 +0000
Manifest next update:     Fri 01 Dec 2023 06:28:58 +0000
Files and hashes:         1: 086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.crl (hash: 1IHXEwhJ4xvOPmjQsJUhPnkptl1BAJSiZB8w1RO0O+0=)
                          2: 3134362e31392e38362e302f32342d3234203d3e203430363736.roa (hash: lN3XjmD/grmb6He3OksnyheJK2PsnfIG4ocFH8LwPEQ=)
                          3: 3134362e31392e38362e302f32342d3234203d3e20313339363630.roa (hash: tfrO66xmEhwiM+RveQMb/4op66nWs2pOLFSUX2SjyQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bb:9c:cd:74:9e:2a:b8:c3:da:f1:db:8d:c3:d5:e7:25:90:ce:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086e606484fd4dbc6c9099fe4b67a8f14d88a4c5
        Validity
            Not Before: Nov 30 04:35:58 2023 GMT
            Not After : Dec  1 06:28:58 2023 GMT
        Subject: CN=778480FC92C94A2E879C298625248119BE49979F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:af:15:42:4b:24:ae:d4:ec:0e:b5:69:46:
                    21:31:1a:94:28:e1:cb:61:d7:68:37:52:a7:f7:c0:
                    6c:cb:e6:31:94:a4:54:02:4e:ab:91:13:21:a9:fa:
                    fa:0b:1e:83:26:93:57:3e:ea:ba:7a:18:cc:b4:22:
                    93:fa:97:33:a3:11:c8:91:69:b7:ea:f4:be:21:6f:
                    44:8d:39:87:0e:94:54:8e:a4:77:ec:51:8b:c2:b6:
                    de:a4:a4:56:35:d7:97:cc:7b:62:ac:28:ca:b4:95:
                    57:a7:95:bc:a2:47:09:1b:d2:1d:52:b7:50:cc:9f:
                    04:49:1f:cd:5e:41:34:07:bc:d7:7c:05:e5:42:69:
                    5d:19:58:ac:fc:7f:98:db:3e:91:35:6c:51:99:b6:
                    3c:ae:c9:e5:a9:60:35:50:3a:ca:20:f4:b4:8e:ce:
                    42:48:37:3b:e4:77:dd:c1:68:af:bb:bd:f8:70:87:
                    e7:59:bc:57:bf:40:45:0a:2a:7e:de:7e:cf:83:bf:
                    17:c5:b0:b4:9f:6b:88:1b:91:83:cb:3d:2d:0c:41:
                    f1:2d:90:e4:03:2c:9a:64:6f:3e:7d:b1:73:3e:81:
                    6b:d4:8c:5f:ee:61:d7:48:ed:3f:db:0d:f2:b9:90:
                    16:ee:a9:5c:bc:e3:bb:de:a5:cd:4e:8c:20:10:e4:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:80:FC:92:C9:4A:2E:87:9C:29:86:25:24:81:19:BE:49:97:9F
            X509v3 Authority Key Identifier:
                keyid:08:6E:60:64:84:FD:4D:BC:6C:90:99:FE:4B:67:A8:F1:4D:88:A4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CG5gZIT9TbxskJn-S2eo8U2IpMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b4:7a:08:3c:41:68:89:1f:ab:da:90:fa:7e:0a:d6:83:4b:
         77:cc:a5:a2:db:d9:b8:4b:42:0e:b8:e2:3f:59:ad:6a:f1:db:
         f3:5b:85:6d:2f:a5:d7:33:18:e9:e7:23:18:65:08:e6:19:fb:
         db:7e:15:6c:f1:0c:7a:c2:9d:78:e6:ab:6e:a3:72:fa:23:13:
         4b:a1:cc:5d:c4:9d:2c:6b:a2:9f:ea:9b:1e:c0:9e:ad:cb:f8:
         b0:97:fa:3e:81:b7:14:0e:5f:46:ae:a9:0d:ee:2b:a1:04:29:
         6d:89:43:b8:61:9a:dd:77:b8:0e:81:f4:a4:f9:7d:b6:a5:3f:
         b8:f1:91:0d:38:91:ce:04:e8:47:1d:1e:4b:6d:39:b1:01:e0:
         bb:a3:f1:b4:e5:f1:ea:bb:f0:4c:c3:3b:46:7a:1b:ec:2d:7f:
         5e:5a:84:c4:0e:11:00:e2:a7:4a:3e:25:df:9e:55:24:09:8a:
         7d:9a:89:f4:49:5e:3a:e4:1d:9e:d2:06:a3:ee:4a:10:97:ea:
         79:0b:f0:6d:ba:24:af:1c:47:d5:ed:4c:a5:00:38:cd:40:17:
         1f:fb:da:61:86:90:e0:7d:2b:79:57:43:24:19:f7:23:66:6d:
         82:44:c1:a3:36:f4:25:97:a6:5f:d6:71:24:0c:67:25:25:ee:
         f5:ff:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----