Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft
File:                     567688FC99CFF14E0DF7422720EA89CA16377899.mft (raw, json)
Hash identifier:          JdKHwbanklekK/LK7MuD7gFBoDya6yHnwAZw+ZOYH0U=
Subject key identifier:   34:E7:D9:45:E2:84:B1:D2:75:0C:2D:C3:F9:41:83:06:64:61:EC:B8
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Certificate issuer:       /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial:       119ED3953D6DAA1E188236BC9E8AB363F9E2E98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft
Manifest number:          50
Signing time:             Wed 10 Jan 2024 14:52:18 +0000
Manifest this update:     Wed 10 Jan 2024 14:47:18 +0000
Manifest next update:     Thu 11 Jan 2024 18:29:18 +0000
Files and hashes:         1: 567688FC99CFF14E0DF7422720EA89CA16377899.crl (hash: YZZ9N3tpLbjlHSBVzhF6D/3War1NUQjEV2nYZNX7Rrg=)
                          2: 3137362e3131382e3136302e302f32322d3234203d3e203230343733.roa (hash: SDz+cI5DNmg1rltVw/C96h7yRNZ4t3ftkUryrA7tGbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9e:d3:95:3d:6d:aa:1e:18:82:36:bc:9e:8a:b3:63:f9:e2:e9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
        Validity
            Not Before: Jan 10 14:47:18 2024 GMT
            Not After : Jan 11 18:29:18 2024 GMT
        Subject: CN=34E7D945E284B1D2750C2DC3F94183066461ECB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:2b:96:1e:c5:a1:c5:e3:d2:59:33:f8:eb:
                    3f:99:09:9e:ab:c8:55:23:28:e0:8c:d3:4a:9b:ff:
                    20:20:44:dd:b5:c4:a4:76:52:53:88:26:92:67:92:
                    7b:aa:a0:73:65:06:9f:79:3d:9b:8a:9f:b2:a0:f3:
                    9d:a6:eb:91:bf:f6:df:45:d0:e2:df:02:55:43:32:
                    af:96:a3:f1:0c:6a:65:09:19:b5:30:3b:36:c5:b5:
                    16:7e:1c:1e:7a:90:66:8e:64:e5:b5:9e:bd:17:cc:
                    7c:fd:cc:8a:62:2f:f4:39:8b:0c:fd:a7:30:3b:7a:
                    2e:62:2b:77:96:c9:cd:2f:10:b4:b6:ee:fc:97:f5:
                    a6:59:aa:2b:42:05:c0:66:ab:55:0d:07:0f:70:86:
                    ad:2c:53:57:01:7a:26:6b:b9:87:a2:53:fb:88:5a:
                    4b:be:84:28:1b:69:e4:1a:67:d7:ff:f1:ad:7b:7d:
                    14:e1:f9:9b:ad:f6:71:d1:f6:cf:37:b9:7e:ce:13:
                    94:2d:3b:c3:ab:bf:1b:d5:32:71:2d:b3:d7:52:92:
                    e9:da:09:e5:8f:fe:6d:82:1b:20:90:a3:f9:f8:b5:
                    e2:7d:0f:de:c9:23:47:03:41:85:18:bd:3b:6f:ed:
                    36:1d:47:1c:18:2a:6d:59:d0:4d:57:6e:45:3d:d1:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E7:D9:45:E2:84:B1:D2:75:0C:2D:C3:F9:41:83:06:64:61:EC:B8
            X509v3 Authority Key Identifier:
                keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:96:d9:da:66:81:fd:93:ed:85:16:13:74:03:15:09:d7:
         f4:60:87:16:1c:ff:1a:b0:19:65:4e:45:6b:cf:0c:c0:98:c6:
         48:61:d4:98:d0:97:f4:f0:ef:48:30:ca:7e:4c:9b:d1:a5:30:
         a6:08:35:53:bd:27:fd:6d:b5:9c:e6:06:2d:18:14:a2:a6:36:
         eb:5e:9f:79:95:6a:4a:a6:44:ed:5e:63:00:bd:9a:0c:92:22:
         89:61:33:58:4c:d6:1e:a9:1b:40:f8:ff:c6:a5:96:01:e7:10:
         89:f1:d6:28:e6:33:f9:6c:b1:fd:d0:ca:e6:52:5a:e6:bf:0a:
         9b:ad:c3:eb:d9:3f:de:65:fe:90:fa:32:2d:27:91:c6:9a:58:
         89:b8:70:0e:9d:b8:66:04:01:ed:65:fb:0f:b9:be:55:60:37:
         31:35:24:1a:4c:ed:07:bd:8d:5f:9c:70:83:7c:56:8b:c2:74:
         49:a9:2f:37:a6:92:67:e7:78:3b:0c:f9:8a:ce:28:50:5f:23:
         12:20:e2:af:1e:ca:a7:3a:47:01:ae:d4:68:94:dd:38:57:9c:
         0e:ea:1d:ba:6d:d1:37:a9:2e:55:ed:e8:e3:32:ee:19:45:fa:
         ea:d8:f1:0e:37:04:d7:de:bc:a0:db:24:ab:40:0e:45:17:01:
         44:40:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----