Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.mft
File:                     FC59950E49DF88985AB0727278320C684D2074BE.mft (raw, json)
Hash identifier:          qSi1b2disUSBncVg/vVlciTAcS0h4D21cS6YJp4hx+E=
Subject key identifier:   AB:A6:F8:A1:F4:06:FE:FE:32:29:4C:0C:F4:8B:10:F9:31:C7:2B:70
Authority key identifier: FC:59:95:0E:49:DF:88:98:5A:B0:72:72:78:32:0C:68:4D:20:74:BE
Certificate issuer:       /CN=fc59950e49df88985ab0727278320c684d2074be
Certificate serial:       3C4311705AC92F9681A9B2C917F8A5A2C1557F55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FmVDknfiJhasHJyeDIMaE0gdL4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.mft
Manifest number:          3E
Signing time:             Mon 10 Jun 2024 14:08:30 +0000
Manifest this update:     Mon 10 Jun 2024 14:03:30 +0000
Manifest next update:     Tue 11 Jun 2024 17:25:30 +0000
Files and hashes:         1: 326130623a346530343a3a2f34382d3438203d3e20323135373531.roa (hash: ewo3PZUnm/7XyINA7A8NOVvmlxnNkJ6jUXEdGoumThA=)
                          2: FC59950E49DF88985AB0727278320C684D2074BE.crl (hash: f9omnIGbdV8WzhIJtOD/P46Dx7mYPrQthjidfJfQte4=)
                          3: 326130623a346530303a3a2f32392d3438203d3e20323135373531.roa (hash: uIBDt6QQ4kfVb06xsVedjOd6jwGVEXVoh4jFi8btLkI=)
                          4: 326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa (hash: SlcnOZPP/T52hH+Qrtn5nNJpSlujjzE5H26YLWbyCY8=)
                          5: 326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa (hash: zUyWoxX6q0gS/zhogxqU74TaFk5fWp6KH87Bqqij54w=)
                          6: 326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa (hash: FB80Vp+AvselVO2O7ciKthn7b69HsJaE/OrxatwU9uI=)
                          7: 326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa (hash: i7ycL1VdQKdj6JlBhzbSnK6agd5/KvQ/v8/9VlHoQSo=)
                          8: 326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa (hash: zAq8ds8BdjJQ5LxGQtB7S9WAls6KvLtSnOlbPiSZNhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:43:11:70:5a:c9:2f:96:81:a9:b2:c9:17:f8:a5:a2:c1:55:7f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc59950e49df88985ab0727278320c684d2074be
        Validity
            Not Before: Jun 10 14:03:30 2024 GMT
            Not After : Jun 11 17:25:30 2024 GMT
        Subject: CN=ABA6F8A1F406FEFE32294C0CF48B10F931C72B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:a5:10:a7:40:73:31:29:e3:ae:9f:f9:a4:
                    0e:be:2d:ce:d7:e5:8c:ee:8d:ee:99:4d:32:b5:d6:
                    d6:97:27:d9:98:28:6e:00:0a:55:6b:75:6f:33:22:
                    27:6e:2e:af:61:6f:49:91:37:04:76:df:01:bb:df:
                    1c:31:1a:ef:b7:5b:e9:43:b3:fc:af:7c:35:16:7f:
                    87:fe:9e:69:96:90:bc:f2:c6:d3:5f:ac:f8:22:17:
                    01:7b:e0:d8:db:af:bc:dd:eb:c5:d6:0f:d0:8d:a1:
                    9d:16:1e:f4:4f:85:39:6a:51:a9:df:47:6c:53:5a:
                    7b:fb:78:db:cb:d8:16:a4:91:0a:f2:c5:84:d3:a6:
                    62:24:58:98:ef:6e:57:ed:08:50:cc:b8:33:25:36:
                    16:65:1d:83:fb:09:a1:53:78:6b:66:63:91:05:67:
                    c5:04:cf:1c:ee:f3:b5:17:24:df:c3:09:52:fa:df:
                    ad:70:b6:f7:50:7e:29:9a:27:b0:46:9b:99:50:aa:
                    e0:91:eb:19:0d:01:5f:a7:00:a7:8f:18:71:23:6d:
                    47:b4:f5:a9:c5:be:9e:f0:97:85:6c:e7:87:35:f9:
                    29:9f:dc:16:a0:95:4d:17:8e:53:0b:b0:72:25:53:
                    57:50:52:aa:87:c2:71:64:90:1f:82:bc:b4:28:1e:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A6:F8:A1:F4:06:FE:FE:32:29:4C:0C:F4:8B:10:F9:31:C7:2B:70
            X509v3 Authority Key Identifier:
                keyid:FC:59:95:0E:49:DF:88:98:5A:B0:72:72:78:32:0C:68:4D:20:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FmVDknfiJhasHJyeDIMaE0gdL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:61:c2:0a:b0:9b:1f:92:05:79:d1:53:be:e2:15:cb:2b:
         28:87:65:c4:9e:98:c1:19:2e:58:89:af:62:be:76:aa:75:53:
         6d:7d:56:5e:98:95:1a:a4:83:ab:7e:60:5f:38:88:ae:ac:e2:
         b2:2b:e5:54:72:43:66:c4:ce:f4:b2:39:58:58:0b:1b:ad:a6:
         43:5c:9f:72:cf:ba:41:65:23:6b:cd:d9:52:1b:69:95:4e:c8:
         37:67:dc:83:64:95:c4:04:07:ba:bb:0b:5b:dc:1b:4a:3f:85:
         46:f0:1f:29:26:51:26:f1:c5:cb:8f:48:e6:37:98:8c:e3:6d:
         c8:a7:ad:0c:10:d0:bd:db:ac:f3:9d:47:cd:bf:c9:ba:63:14:
         56:c2:81:ec:27:2d:47:a2:f7:60:7e:eb:bf:4a:d9:69:10:ce:
         e3:ca:49:d8:86:ca:c8:38:d2:9a:ff:d2:0e:5f:d8:f1:3d:a2:
         33:4a:b7:48:95:51:8f:a1:9d:ae:69:85:06:37:34:8c:99:96:
         ce:3e:ad:a8:15:65:86:95:6e:7f:0f:64:6d:c9:5c:4b:89:b0:
         53:67:bd:d3:c0:e5:fe:f9:f7:9b:1a:fb:be:3e:de:15:f4:6c:
         6a:55:e0:8e:90:a9:77:d4:a0:f1:c2:1b:ce:78:74:e1:b2:c8:
         1e:0e:77:59
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPEMRcFrJL5aBqbLJF/ilosFVf1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmM1OTk1MGU0OWRmODg5ODVhYjA3MjcyNzgzMjBjNjg0
ZDIwNzRiZTAeFw0yNDA2MTAxNDAzMzBaFw0yNDA2MTExNzI1MzBaMDMxMTAvBgNV
BAMTKEFCQTZGOEExRjQwNkZFRkUzMjI5NEMwQ0Y0OEIxMEY5MzFDNzJCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBqUQp0BzMSnjrp/5pA6+Lc7X
5Yzuje6ZTTK11taXJ9mYKG4AClVrdW8zIiduLq9hb0mRNwR23wG73xwxGu+3W+lD
s/yvfDUWf4f+nmmWkLzyxtNfrPgiFwF74Njbr7zd68XWD9CNoZ0WHvRPhTlqUanf
R2xTWnv7eNvL2BakkQryxYTTpmIkWJjvblftCFDMuDMlNhZlHYP7CaFTeGtmY5EF
Z8UEzxzu87UXJN/DCVL6361wtvdQfimaJ7BGm5lQquCR6xkNAV+nAKePGHEjbUe0
9anFvp7wl4Vs54c1+Smf3BaglU0XjlMLsHIlU1dQUqqHwnFkkB+CvLQoHparAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUq6b4ofQG/v4yKUwM9IsQ+THHK3AwHwYDVR0j
BBgwFoAU/FmVDknfiJhasHJyeDIMaE0gdL4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmIzMGQzZGUtZTU3NC00YTIzLWExYmQtNWYxZmEwNWM1
M2JlLzAvRkM1OTk1MEU0OURGODg5ODVBQjA3MjcyNzgzMjBDNjg0RDIwNzRCRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19GbVZEa25maUpoYXNISnllRElNYUUw
Z2RMNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYjMwZDNkZS1l
NTc0LTRhMjMtYTFiZC01ZjFmYTA1YzUzYmUvMC9GQzU5OTUwRTQ5REY4ODk4NUFC
MDcyNzI3ODMyMEM2ODREMjA3NEJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/9hwgqwmx+SBXnRU77i
FcsrKIdlxJ6YwRkuWImvYr52qnVTbX1WXpiVGqSDq35gXziIrqzisivlVHJDZsTO
9LI5WFgLG62mQ1yfcs+6QWUja83ZUhtplU7IN2fcg2SVxAQHursLW9wbSj+FRvAf
KSZRJvHFy49I5jeYjONtyKetDBDQvdus851Hzb/JumMUVsKB7CctR6L3YH7rv0rZ
aRDO48pJ2IbKyDjSmv/SDl/Y8T2iM0q3SJVRj6GdrmmFBjc0jJmWzj6tqBVlhpVu
fw9kbclcS4mwU2e908Dl/vn3mxr7vj7eFfRsalXgjpCpd9Sg8cIbznh04bLIHg53
WQ==
Generated at Tue Jun 11 05:06:49 2024 by rpki-client on console-fra.rpki-client.org