Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/F56B7C7537B799200F0C3F3C6832A698E9508A3A.mft
File:                     F56B7C7537B799200F0C3F3C6832A698E9508A3A.mft (raw, json)
Hash identifier:          2LYBjdvyA6z0zbJZ0RbShBvICrSKJejovLxSZlsV34o=
Subject key identifier:   95:11:E4:78:D4:B7:DF:1B:2D:67:93:83:68:24:80:01:05:23:3D:D2
Authority key identifier: F5:6B:7C:75:37:B7:99:20:0F:0C:3F:3C:68:32:A6:98:E9:50:8A:3A
Certificate issuer:       /CN=f56b7c7537b799200f0c3f3c6832a698e9508a3a
Certificate serial:       6789A67B3DCCEB91231AB73DECC55253DD544C6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Wt8dTe3mSAPDD88aDKmmOlQijo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/F56B7C7537B799200F0C3F3C6832A698E9508A3A.mft
Manifest number:          3E
Signing time:             Tue 02 Jan 2024 04:22:22 +0000
Manifest this update:     Tue 02 Jan 2024 04:17:22 +0000
Manifest next update:     Wed 03 Jan 2024 06:50:22 +0000
Files and hashes:         1: 3139332e38342e3130312e302f32342d3234203d3e20313938393830.roa (hash: LbyNJqjBFRmoqBx+Y03I3TbeEGx2qHAfLoGo9/FyjjY=)
                          2: 3138352e3233332e39362e302f32322d3234203d3e20323135393738.roa (hash: 8tWBCmRrJR9SJ+f7lOBKtc/Qnei4QZgBS1HQBE9FE70=)
                          3: F56B7C7537B799200F0C3F3C6832A698E9508A3A.crl (hash: eTlzdJ0Rz7pbo1xePREV6c79ZAmUDnIAMBezNOGs82s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:89:a6:7b:3d:cc:eb:91:23:1a:b7:3d:ec:c5:52:53:dd:54:4c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56b7c7537b799200f0c3f3c6832a698e9508a3a
        Validity
            Not Before: Jan  2 04:17:22 2024 GMT
            Not After : Jan  3 06:50:22 2024 GMT
        Subject: CN=9511E478D4B7DF1B2D6793836824800105233DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:c6:71:92:d2:23:47:f3:d8:92:39:de:77:
                    99:4d:43:00:0c:12:d9:bd:9d:b9:d4:50:b6:71:ff:
                    39:67:5b:33:eb:a8:26:e9:01:e5:d4:7e:12:d8:79:
                    05:db:45:19:f3:56:f4:2f:7a:82:05:85:16:cc:d4:
                    22:90:af:38:8f:2f:25:92:18:a4:37:60:7b:ed:15:
                    4c:83:1a:c0:e4:8d:ce:8b:08:2e:3e:f5:48:d7:47:
                    6b:bd:76:92:14:38:8d:c4:46:a9:e5:13:1c:d5:8c:
                    91:52:14:05:59:ec:bc:a9:55:37:34:b4:e6:37:e2:
                    a2:c1:e2:e7:c0:51:e2:50:97:5a:aa:8d:fb:ec:48:
                    f6:cc:9e:98:c8:da:22:83:cd:4d:27:57:63:37:e0:
                    3e:2b:a7:bd:65:dc:dd:3c:6b:1b:2b:e5:81:4a:85:
                    51:a8:a6:f6:67:a3:c0:d5:40:f8:6c:73:33:c1:65:
                    e2:a0:c9:ce:14:a9:e2:a6:17:5a:05:02:1d:ad:5e:
                    53:b7:8d:92:d2:8f:f0:6e:75:a9:5b:2c:23:67:85:
                    53:86:74:23:ae:e1:53:b0:95:a6:5c:58:29:cb:20:
                    77:99:e0:f0:a8:1e:ad:72:2b:ca:69:62:65:ea:4a:
                    f7:3a:a8:fc:6a:9b:1d:08:4b:0e:f6:78:03:44:d9:
                    98:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:11:E4:78:D4:B7:DF:1B:2D:67:93:83:68:24:80:01:05:23:3D:D2
            X509v3 Authority Key Identifier:
                keyid:F5:6B:7C:75:37:B7:99:20:0F:0C:3F:3C:68:32:A6:98:E9:50:8A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/F56B7C7537B799200F0C3F3C6832A698E9508A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Wt8dTe3mSAPDD88aDKmmOlQijo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/F56B7C7537B799200F0C3F3C6832A698E9508A3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:88:c7:46:3f:0a:a1:06:4f:f7:d8:43:b1:ff:0f:8f:e4:
         25:29:d4:51:b0:e1:48:4e:bc:dd:66:66:65:b5:1f:e4:16:af:
         98:00:6c:7c:35:90:a2:3c:e9:d3:50:1c:1f:af:ef:57:e2:5f:
         97:75:c1:45:90:e5:8f:e8:5d:81:ac:15:e6:3b:f9:cc:e3:47:
         17:a0:fc:39:5b:21:9f:4b:e8:49:d8:06:6e:01:a0:63:58:b6:
         ee:88:e6:9b:82:29:3a:0d:14:24:cd:ba:83:02:65:f0:23:b1:
         68:2f:bf:97:a3:c8:b0:39:8a:d0:eb:79:02:14:bc:d7:08:61:
         0a:ee:3a:bd:07:90:73:e9:0e:42:19:15:0c:3b:32:72:65:73:
         9f:5f:af:0c:26:69:eb:d5:f5:9d:fa:7b:9e:9c:1d:f4:ea:ea:
         f4:36:a3:21:7e:cb:c9:83:7c:24:16:58:43:a8:1f:3c:6f:de:
         c0:ac:08:0e:c8:81:28:b4:32:b7:b2:26:a8:aa:70:62:d7:e2:
         74:e4:17:2d:51:38:c0:7b:e2:9d:b5:fa:84:3a:81:db:4d:44:
         63:47:7d:29:a6:29:60:7d:6c:2b:90:c9:ba:38:3a:4d:e3:41:
         ec:cc:da:6f:d1:76:f0:e0:78:64:ee:3b:b2:0b:26:10:d9:5d:
         0c:e8:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----