Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/9/369CC5B85507626E7B4D29B93BBF50644E73A293.mft
File:                     369CC5B85507626E7B4D29B93BBF50644E73A293.mft (raw, json)
Hash identifier:          f0fwMtlK/xAFotjaFSrCuKQpjrhfjQQATv/iYdjC9zY=
Subject key identifier:   62:07:72:C6:CF:89:BD:9A:C3:CA:7C:F4:AD:87:BE:D3:C9:AB:37:14
Authority key identifier: 36:9C:C5:B8:55:07:62:6E:7B:4D:29:B9:3B:BF:50:64:4E:73:A2:93
Certificate issuer:       /CN=369cc5b85507626e7b4d29b93bbf50644e73a293
Certificate serial:       41C02759875F6266CB6924A78E66B1C2889DDEFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpzFuFUHYm57TSm5O79QZE5zopM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/9/369CC5B85507626E7B4D29B93BBF50644E73A293.mft
Manifest number:          0B
Signing time:             Tue 02 Jan 2024 07:36:58 +0000
Manifest this update:     Tue 02 Jan 2024 07:31:58 +0000
Manifest next update:     Wed 03 Jan 2024 09:38:58 +0000
Files and hashes:         1: 33312e32352e3133362e302f32312d3234203d3e203230343733.roa (hash: QDQ89pYoF+vCZQBVxcvCTOkCGKsJWp7GfztG/ey0ohc=)
                          2: 369CC5B85507626E7B4D29B93BBF50644E73A293.crl (hash: Dv7h84g7wAs8dS1LZ3MDFANssPlSzQBzAv4BJnmdyHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c0:27:59:87:5f:62:66:cb:69:24:a7:8e:66:b1:c2:88:9d:de:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369cc5b85507626e7b4d29b93bbf50644e73a293
        Validity
            Not Before: Jan  2 07:31:58 2024 GMT
            Not After : Jan  3 09:38:58 2024 GMT
        Subject: CN=620772C6CF89BD9AC3CA7CF4AD87BED3C9AB3714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:3f:ce:6b:51:43:5b:13:08:38:86:44:46:
                    0e:0d:47:52:1b:92:a3:6d:c1:0c:20:8c:ee:42:55:
                    eb:1b:17:60:97:c5:0b:e3:77:eb:d4:a5:9e:f7:13:
                    20:54:ce:e8:f5:90:b9:65:e6:d6:b6:55:11:7d:f8:
                    50:0e:2e:80:b5:fb:81:9f:dc:55:0f:87:4a:99:23:
                    5c:08:08:81:c6:c4:76:b5:89:e4:65:96:22:c7:d6:
                    21:5e:21:d4:fa:ed:f2:d0:ce:1a:30:e6:40:87:99:
                    9a:27:2c:4c:25:64:44:ef:b2:99:b8:79:d2:7e:df:
                    71:8c:bc:7d:b4:2b:38:ed:4b:47:0c:a6:3c:19:14:
                    36:5f:43:dd:db:c9:1f:e0:1c:5d:fa:7d:29:02:43:
                    5f:25:5b:ab:c4:af:d8:7d:3c:59:49:d6:ed:ce:06:
                    62:86:ea:3e:63:cd:db:85:72:51:db:4b:d8:71:bd:
                    56:ef:55:e8:9c:b7:41:db:0f:c4:ad:85:7d:84:ca:
                    be:19:58:48:cc:76:e3:f6:36:50:d6:3f:79:06:4e:
                    93:ab:9b:1b:26:cf:60:59:6a:ea:63:37:e1:ea:c7:
                    0e:49:fd:f6:e7:71:7e:e4:54:10:43:60:cd:f4:db:
                    ea:9f:bc:82:a5:60:7d:f8:d9:8c:71:cd:88:4b:ce:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:07:72:C6:CF:89:BD:9A:C3:CA:7C:F4:AD:87:BE:D3:C9:AB:37:14
            X509v3 Authority Key Identifier:
                keyid:36:9C:C5:B8:55:07:62:6E:7B:4D:29:B9:3B:BF:50:64:4E:73:A2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/9/369CC5B85507626E7B4D29B93BBF50644E73A293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpzFuFUHYm57TSm5O79QZE5zopM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/9/369CC5B85507626E7B4D29B93BBF50644E73A293.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:9c:a7:9e:ea:98:07:54:10:9d:91:08:ed:ae:cc:81:e4:
         8c:60:75:a4:18:19:0a:f7:58:b9:16:94:5f:17:c3:b3:0f:d1:
         d1:cf:b4:db:94:de:ae:12:db:a7:ff:61:5d:c5:67:f0:05:a8:
         c6:cc:c0:20:b0:32:3b:c2:93:ef:0c:e6:34:2b:24:92:ae:ad:
         64:12:18:57:e6:66:d9:4e:e3:e6:c7:37:3b:9f:dc:24:f3:9f:
         1d:28:d2:c4:76:33:c6:1b:6c:1d:79:31:b0:e8:10:35:ad:b4:
         e6:d7:71:76:64:47:4c:14:c8:6b:07:ca:fd:73:65:a9:b7:83:
         ca:fa:4c:8c:ae:3f:e6:17:b6:8a:76:44:94:01:c4:c9:3e:3b:
         14:58:75:11:c0:10:8e:a1:41:f9:05:c2:89:f5:47:60:38:f5:
         db:3b:3b:cd:b1:c1:1c:a0:6f:44:e9:03:f7:97:b4:50:d2:a5:
         83:47:66:cf:61:12:23:d4:c4:46:cc:1e:ba:b7:c1:e0:e5:95:
         fd:bd:a7:a8:df:eb:a2:75:21:bc:31:83:f7:4f:2d:3a:c8:6a:
         9c:95:07:4b:bb:e3:c9:31:b7:a0:55:7e:83:0e:6b:56:b6:11:
         4a:4f:64:1b:87:32:a6:5e:67:16:96:6f:05:8e:49:12:3e:c3:
         d2:07:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----