Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/D70C18F610931A5E0DF5CAD1D69B7E6A20363BFF.mft
File:                     D70C18F610931A5E0DF5CAD1D69B7E6A20363BFF.mft (raw, json)
Hash identifier:          goB1beJ23vCom9zfFIJPR9NM1h3IedBaiATVshX6vAk=
Subject key identifier:   29:CF:C5:43:FA:51:25:7E:56:09:53:57:EC:BB:1B:52:B9:B7:19:38
Authority key identifier: D7:0C:18:F6:10:93:1A:5E:0D:F5:CA:D1:D6:9B:7E:6A:20:36:3B:FF
Certificate issuer:       /CN=d70c18f610931a5e0df5cad1d69b7e6a20363bff
Certificate serial:       0B6D8DEEDE0D26E959A06F1392FE1EEEC38B1635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wwY9hCTGl4N9crR1pt-aiA2O_8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/D70C18F610931A5E0DF5CAD1D69B7E6A20363BFF.mft
Manifest number:          E5
Signing time:             Wed 20 Dec 2023 18:31:02 +0000
Manifest this update:     Wed 20 Dec 2023 18:26:02 +0000
Manifest next update:     Thu 21 Dec 2023 19:19:02 +0000
Files and hashes:         1: D70C18F610931A5E0DF5CAD1D69B7E6A20363BFF.crl (hash: uFTt3kgq+JNPLEuwCTkWIyuWHkVUaCrGhzsYRFQ92eY=)
                          2: 33312e3231372e3235302e302f32342d3234203d3e20383334.roa (hash: uzVngyuF74r+99K73FNP02mr7zCwcIT0HrZ8A2k6r+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6d:8d:ee:de:0d:26:e9:59:a0:6f:13:92:fe:1e:ee:c3:8b:16:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70c18f610931a5e0df5cad1d69b7e6a20363bff
        Validity
            Not Before: Dec 20 18:26:02 2023 GMT
            Not After : Dec 21 19:19:02 2023 GMT
        Subject: CN=29CFC543FA51257E56095357ECBB1B52B9B71938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:9c:bc:4c:af:dc:14:d3:2a:b6:d6:16:e3:
                    2e:90:19:57:f5:96:3d:34:fc:05:95:df:11:0f:21:
                    5a:db:02:38:83:6b:58:24:63:54:dd:28:a5:6b:fc:
                    69:95:90:ba:35:83:20:e3:3b:a7:7e:8e:05:fd:2c:
                    68:10:1d:fc:b0:b0:53:ff:0c:5d:97:81:17:bf:f3:
                    70:f0:30:ea:0d:a9:be:43:76:ff:bf:16:4e:9c:da:
                    40:09:00:53:90:4c:fe:ec:dd:e5:37:e5:0c:1c:7b:
                    21:f2:30:35:5e:cf:73:17:23:e5:9d:02:16:ac:f0:
                    3d:46:84:b6:3b:f4:ed:9c:b7:d1:8f:44:04:b8:1b:
                    77:b4:eb:d0:f2:0f:75:d7:02:3c:96:a3:64:c9:72:
                    11:cb:ea:d0:06:1c:d7:91:17:98:d2:a8:77:54:26:
                    64:3b:93:dd:66:62:29:1a:b0:71:e3:b6:ae:e9:62:
                    7e:ac:e7:47:fd:1d:6f:6d:03:46:16:84:9f:c9:b6:
                    b6:d8:05:09:ed:39:a1:2f:5f:da:63:83:60:32:ab:
                    7d:10:19:55:b8:84:0d:bf:55:52:e3:fb:92:2e:ba:
                    5c:8d:1d:ff:bd:98:8c:15:ef:8c:10:4f:86:82:b2:
                    5e:35:5f:e3:a5:24:b3:68:d0:21:25:3c:a1:82:67:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CF:C5:43:FA:51:25:7E:56:09:53:57:EC:BB:1B:52:B9:B7:19:38
            X509v3 Authority Key Identifier:
                keyid:D7:0C:18:F6:10:93:1A:5E:0D:F5:CA:D1:D6:9B:7E:6A:20:36:3B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/D70C18F610931A5E0DF5CAD1D69B7E6A20363BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wwY9hCTGl4N9crR1pt-aiA2O_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/D70C18F610931A5E0DF5CAD1D69B7E6A20363BFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:a4:05:c3:69:11:29:8f:a0:81:b9:be:a2:7a:c9:58:de:10:
         bc:0d:bb:b0:9e:db:84:20:2b:ae:16:da:b9:8d:9f:b9:15:3b:
         4f:18:a2:e2:a2:e3:e9:02:98:18:10:6e:7d:1a:20:6f:a5:fe:
         e4:1a:28:4f:ad:e0:f9:da:0b:22:19:65:df:a6:13:50:70:66:
         c8:2c:1c:ab:f9:62:bf:f5:6c:14:ad:2f:5b:45:8e:0d:bc:03:
         91:8c:5c:5b:13:c8:ff:c8:dc:b8:42:06:66:89:1d:2c:d7:2b:
         dd:75:b6:a7:62:ed:94:f0:dc:6a:21:9c:28:63:67:7b:26:a4:
         c3:93:49:ca:10:5c:4d:4b:22:9c:f2:d9:28:c7:b5:54:f4:33:
         b4:11:c8:0d:1e:30:9f:35:c8:de:a5:be:63:35:13:bd:20:29:
         65:d1:60:bd:7e:40:62:5f:54:22:f8:ec:5b:ef:0e:c0:24:d6:
         d9:54:22:5f:4c:6a:1f:45:9f:57:bc:dc:65:82:a6:f8:64:69:
         7e:f0:ae:37:34:91:60:83:c2:36:51:2b:5e:9e:43:9d:a7:a3:
         de:bd:64:63:5b:0e:02:e9:b1:d8:0f:1e:62:c3:8f:67:88:4c:
         e8:6c:f4:96:7d:0c:e1:53:52:85:7a:06:79:6d:e9:06:f0:d3:
         2e:4f:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----