Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft
File:                     5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft (raw, json)
Hash identifier:          q3qZSneRYs/H0ZHi6Lm+mYw8vH6ZyRkX+sAJ/IdEB1Q=
Subject key identifier:   C6:DD:5D:F5:4E:DE:F5:EF:9A:0A:7D:81:FC:01:C1:2A:F0:EF:8E:4D
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       7224084A1CEB366C205C83A4B1450347ECD542DA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft
Manifest number:          68
Signing time:             Thu 20 Jun 2024 13:19:56 +0000
Manifest this update:     Thu 20 Jun 2024 13:14:56 +0000
Manifest next update:     Fri 21 Jun 2024 13:36:56 +0000
Files and hashes:         1: 5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl (hash: mWVcx1K5cNHt0QA9kepGsq8hTksP7y/Gx08ac/e9Rgc=)
                          2: 326130613a363034343a616337303a3a2f34362d3436203d3e20323134373537.roa (hash: DJP+JPvNZ9UDylBvEY/TziV8W4znUro8rrMhA1ktrQo=)
                          3: 326130613a363034343a616337343a3a2f34362d3436203d3e20323134373537.roa (hash: dbU/M//TkrdiiqBckkwX8QxCeG3ilfli5WCXm6Iyjq0=)
                          4: 326130613a363034343a616337383a3a2f34372d3437203d3e20323134373537.roa (hash: o5k+/Rq1PQ+JN3Whpv7NeH55fT4DaEcVicN1G+tZ9FM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:24:08:4a:1c:eb:36:6c:20:5c:83:a4:b1:45:03:47:ec:d5:42:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun 20 13:14:56 2024 GMT
            Not After : Jun 21 13:36:56 2024 GMT
        Subject: CN=C6DD5DF54EDEF5EF9A0A7D81FC01C12AF0EF8E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:3d:ed:19:d8:db:6f:61:50:de:cd:94:48:
                    09:b3:a2:d3:38:1f:60:6e:7e:fb:74:73:02:4b:e5:
                    5d:ec:eb:f9:cc:10:ef:a6:77:cc:7b:46:20:bc:76:
                    fe:d1:86:a8:b9:03:75:32:2a:d0:3e:6b:2a:c0:fd:
                    bb:c6:c4:ba:07:1c:57:1f:09:4c:e3:fc:b2:99:a2:
                    5c:5b:58:05:09:b9:90:c8:68:fd:68:ee:fb:68:90:
                    9c:0e:ec:8d:6e:80:19:f4:28:cb:30:4e:ce:91:d5:
                    99:d3:a7:07:00:06:2b:29:7b:75:56:7b:0f:67:cb:
                    16:b4:95:fc:e8:b0:67:cb:4a:76:ef:45:25:d0:26:
                    76:08:41:56:9d:23:30:44:bf:2e:f7:83:19:ab:73:
                    1d:eb:5b:4f:78:ad:76:74:61:ea:30:75:7f:b1:fb:
                    8f:6b:3a:79:27:1b:a0:c2:a7:15:80:95:3e:8b:7c:
                    d9:b3:b4:12:2d:5e:8c:09:87:fb:b6:75:c6:64:5e:
                    95:49:54:73:7c:b8:d7:06:3e:08:d4:b1:8b:0d:d8:
                    f3:35:da:8b:ed:c1:ce:f9:ac:27:74:d4:34:6b:c4:
                    22:4d:b9:92:33:0e:3e:1d:8a:65:6c:b0:a4:89:12:
                    7d:9c:55:2b:33:80:01:bc:db:55:b6:d6:9f:e3:cb:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DD:5D:F5:4E:DE:F5:EF:9A:0A:7D:81:FC:01:C1:2A:F0:EF:8E:4D
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:77:d4:4d:a0:ea:8f:77:62:a3:5b:64:b6:7f:81:42:3a:5b:
         e8:9c:ff:5d:8e:13:b9:2e:c8:c8:2b:7d:34:71:91:79:47:68:
         42:65:9d:62:0f:64:ad:78:cf:54:9b:ed:c6:ff:7b:d1:2c:49:
         d5:e8:63:e7:97:ac:28:86:b1:17:89:5e:89:f1:28:41:cb:fa:
         37:c9:42:0c:14:9e:00:43:d9:11:bc:30:ae:09:82:35:64:95:
         30:41:13:3d:13:0f:e2:75:63:ea:b5:52:e7:c2:8c:95:c4:c2:
         e0:62:de:d2:51:d5:ce:42:85:87:b1:1d:1a:b2:4e:72:05:1a:
         5f:ec:85:54:f4:13:b8:a8:34:41:01:c8:1d:5f:35:b7:45:e5:
         4e:5e:f2:5e:68:8f:8a:df:e2:64:19:ea:4d:3c:a0:24:dc:a1:
         bc:25:3a:ee:f5:5c:c8:96:40:c1:8d:b2:a8:3a:b6:76:f0:8a:
         8b:18:01:4e:ba:61:3b:d8:c6:b6:cf:32:42:56:4d:18:98:a7:
         2b:83:87:0f:ba:60:84:f9:69:ae:ed:7e:ad:d5:01:32:cc:7a:
         23:2c:75:e1:51:ca:6f:a9:fc:42:b2:bc:36:12:98:ae:83:96:
         e3:8d:f3:ab:1d:e4:1a:be:16:83:4d:b9:03:66:71:9a:fc:c9:
         6c:ec:b4:c6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUciQIShzrNmwgXIOksUUDR+zVQtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdB
MzQzNkMxQzAeFw0yNDA2MjAxMzE0NTZaFw0yNDA2MjExMzM2NTZaMDMxMTAvBgNV
BAMTKEM2REQ1REY1NEVERUY1RUY5QTBBN0Q4MUZDMDFDMTJBRjBFRjhFNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiMz3tGdjbb2FQ3s2USAmzotM4
H2Bufvt0cwJL5V3s6/nMEO+md8x7RiC8dv7Rhqi5A3UyKtA+ayrA/bvGxLoHHFcf
CUzj/LKZolxbWAUJuZDIaP1o7vtokJwO7I1ugBn0KMswTs6R1ZnTpwcABispe3VW
ew9nyxa0lfzosGfLSnbvRSXQJnYIQVadIzBEvy73gxmrcx3rW094rXZ0YeowdX+x
+49rOnknG6DCpxWAlT6LfNmztBItXowJh/u2dcZkXpVJVHN8uNcGPgjUsYsN2PM1
2ovtwc75rCd01DRrxCJNuZIzDj4dimVssKSJEn2cVSszgAG821W21p/jyzFTAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUxt1d9U7e9e+aCn2B/AHBKvDvjk0wHwYDVR0j
BBgwFoAUXbDjYq+8kAKy1VIQLaEdp6NDbBwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmQxNGVlZDYtNDhiZi00MTY3LTgxYmItZjY3NWQ2ZjE5
YTNhLzEvNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdBMzQzNkMxQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81REIwRTM2MkFGQkM5MDAyQjJENTUyMTAy
REExMURBN0EzNDM2QzFDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2ZkMTRlZWQ2LTQ4YmYtNDE2Ny04MWJiLWY2NzVkNmYxOWEzYS8xLzVEQjBFMzYy
QUZCQzkwMDJCMkQ1NTIxMDJEQTExREE3QTM0MzZDMUMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEd9RN
oOqPd2KjW2S2f4FCOlvonP9djhO5LsjIK300cZF5R2hCZZ1iD2SteM9Um+3G/3vR
LEnV6GPnl6wohrEXiV6J8ShBy/o3yUIMFJ4AQ9kRvDCuCYI1ZJUwQRM9Ew/idWPq
tVLnwoyVxMLgYt7SUdXOQoWHsR0ask5yBRpf7IVU9BO4qDRBAcgdXzW3ReVOXvJe
aI+K3+JkGepNPKAk3KG8JTru9VzIlkDBjbKoOrZ28IqLGAFOumE72Ma2zzJCVk0Y
mKcrg4cPumCE+Wmu7X6t1QEyzHojLHXhUcpvqfxCsrw2Epiug5bjjfOrHeQavhaD
TbkDZnGa/Mls7LTG
-----END CERTIFICATE-----