Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/7B2E27402D917BAF52B4A3C57B75A4F77DD23562.mft
File:                     7B2E27402D917BAF52B4A3C57B75A4F77DD23562.mft (raw, json)
Hash identifier:          r8K7wPiZbO2XxDGljdPkA/vCRetuDDdokr87UA0wPF8=
Subject key identifier:   61:22:51:BC:51:A2:F5:FD:74:5E:27:3C:1B:78:48:CF:6C:5C:15:B2
Authority key identifier: 7B:2E:27:40:2D:91:7B:AF:52:B4:A3:C5:7B:75:A4:F7:7D:D2:35:62
Certificate issuer:       /CN=7b2e27402d917baf52b4a3c57b75a4f77dd23562
Certificate serial:       254DF90B69CF9439CA7AF6930B5D55EC0FB0A6C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ey4nQC2Re69StKPFe3Wk933SNWI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/7B2E27402D917BAF52B4A3C57B75A4F77DD23562.mft
Manifest number:          02
Signing time:             Thu 28 Dec 2023 21:36:33 +0000
Manifest this update:     Thu 28 Dec 2023 21:31:33 +0000
Manifest next update:     Sat 30 Dec 2023 01:29:33 +0000
Files and hashes:         1: 7B2E27402D917BAF52B4A3C57B75A4F77DD23562.crl (hash: vgXXrr7VpFrcv+59Q6qotRhpLOgFVARrm8gXpy1mh5o=)
                          2: 34352e38302e3137342e302f32332d3234203d3e203230343733.roa (hash: Tj/XWRruKwZ/QP3rFOesVOQz//CgnqDl9rp8W0o5CsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4d:f9:0b:69:cf:94:39:ca:7a:f6:93:0b:5d:55:ec:0f:b0:a6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2e27402d917baf52b4a3c57b75a4f77dd23562
        Validity
            Not Before: Dec 28 21:31:33 2023 GMT
            Not After : Dec 30 01:29:33 2023 GMT
        Subject: CN=612251BC51A2F5FD745E273C1B7848CF6C5C15B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:c5:7f:46:39:e2:e7:a3:d2:d6:1c:46:23:
                    9a:58:b1:0f:4d:ee:3f:2d:11:72:aa:e2:9f:89:1a:
                    5a:7a:8b:21:6f:46:02:df:be:d5:a7:c4:f8:98:d0:
                    03:36:78:a4:d6:61:3d:3b:3c:f5:92:73:49:6d:6c:
                    17:6e:1a:40:2b:c6:c0:53:85:67:ab:bd:d8:38:cd:
                    fc:e7:a6:10:64:b4:6a:ef:4f:91:0f:cc:9f:60:24:
                    b0:0b:7f:6d:15:e3:7e:68:f3:af:9a:a0:14:73:43:
                    7d:77:d2:a7:b6:c4:bc:e4:16:e1:67:b3:7e:05:fa:
                    59:11:7f:a9:cb:a1:cb:ad:a1:00:89:eb:f3:e4:4a:
                    26:41:bb:e8:42:58:84:6d:ae:86:97:76:bb:ae:c1:
                    7e:b2:1b:46:c2:ae:0a:0b:a7:ae:9a:e7:76:5a:f7:
                    47:dc:c5:34:7c:4b:38:70:cc:df:9e:8b:4d:8e:67:
                    bb:38:a0:08:d3:37:5f:ee:e7:6d:ec:34:45:1e:9e:
                    4a:f2:6d:05:2d:3e:33:b3:0b:6f:61:41:79:42:86:
                    c6:3d:f9:10:e0:76:c1:66:53:be:0e:96:1f:71:b1:
                    69:c1:15:d4:10:bd:f9:94:98:31:8f:a9:5d:97:03:
                    86:e2:da:6e:75:c8:da:e3:1c:c1:91:c9:50:7a:46:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:22:51:BC:51:A2:F5:FD:74:5E:27:3C:1B:78:48:CF:6C:5C:15:B2
            X509v3 Authority Key Identifier:
                keyid:7B:2E:27:40:2D:91:7B:AF:52:B4:A3:C5:7B:75:A4:F7:7D:D2:35:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/7B2E27402D917BAF52B4A3C57B75A4F77DD23562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ey4nQC2Re69StKPFe3Wk933SNWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/7B2E27402D917BAF52B4A3C57B75A4F77DD23562.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:4e:d9:6e:5b:0c:6c:c5:54:fb:54:41:d0:f7:22:7f:11:
         31:34:27:56:83:3f:dc:21:e7:9d:69:6a:31:c5:1f:5b:c6:f8:
         ab:ab:87:4f:0b:33:6e:fe:90:d8:90:59:85:f4:2e:47:84:17:
         be:05:1e:4b:9d:ae:a9:d2:73:93:fe:4d:76:28:88:85:b3:17:
         89:a1:c8:f0:b9:69:e8:65:1b:de:b7:b3:16:bc:2b:39:7e:d0:
         65:8c:95:bc:49:fe:8a:01:f4:34:5f:db:69:9d:59:1e:27:3a:
         44:57:bc:9f:8f:1f:f5:21:a6:6a:e4:da:cd:8e:2b:65:73:be:
         fe:6c:1c:1e:d1:81:04:06:e0:0e:19:77:d0:c0:36:2d:e0:57:
         10:1d:bc:7d:54:19:f8:5f:21:05:ea:77:18:68:f6:a1:a7:bf:
         00:4e:1f:7e:e8:e7:2b:59:72:86:97:33:53:a3:b0:03:78:bf:
         76:41:9a:e2:8b:3d:36:98:fd:a6:b6:15:c9:6d:71:7d:f1:33:
         c5:af:e8:ea:6e:22:da:ad:74:0a:53:06:41:1c:bd:d4:13:55:
         98:76:10:61:d0:16:50:5a:ab:6c:3d:40:a4:d7:32:1b:82:03:
         50:9b:1e:aa:39:f4:33:39:bf:22:0e:30:1b:2d:73:59:d3:c2:
         98:54:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----