Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.mft
File:                     DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.mft (raw, json)
Hash identifier:          hygVDUCE4wi2dpL2ZyyvUZQ99m2EWMpza2kspb/mgRA=
Subject key identifier:   08:AC:4D:21:DF:56:42:6F:B8:B2:DC:E5:3D:A7:91:A6:C0:30:A9:BC
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Certificate issuer:       /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial:       566F1C3320A9CDA3B07A4AE3EECFEB48C6770AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.mft
Manifest number:          0409
Signing time:             Wed 27 Sep 2023 01:11:13 +0000
Manifest this update:     Wed 27 Sep 2023 01:06:13 +0000
Manifest next update:     Thu 28 Sep 2023 03:16:13 +0000
Files and hashes:         1: 34352e31342e3139342e302f32342d3332203d3e203531313637.roa (hash: JY9kWoTTBZMpNyM1qDGCy2gVCtAsu3/Spnt7cfYL18o=)
                          2: 34352e38352e3235312e302f32342d3234203d3e20313336373837.roa (hash: u/ct+auwD2u99EqulTwZDWOQMZzGvsasb0rJ9oA29lk=)
                          3: 34352e31312e38312e302f32342d3332203d3e20313336373837.roa (hash: ZmsqRpAdzpGaL+sRjjX9wQV4WUmqGKhAb2QRXHsAqf8=)
                          4: 34352e38352e3235302e302f32342d3332203d3e203531313637.roa (hash: 6cZs9/qmkEmzEtnOTAX3WqsfehroI4Ab9T1MhpPKU8k=)
                          5: 39312e3233302e3131312e302f32342d3332203d3e203531313637.roa (hash: AGvga78GcZLr9cNeU65OpTWnAyQNxbcX0pZ8SPeyCYs=)
                          6: 322e35392e3135362e302f32342d3332203d3e203531313637.roa (hash: hoTwwRwA26gvdbJIv5A6OrWJKgKLtoJP62Kk99B6ioA=)
                          7: 39312e3232392e3234352e302f32342d3332203d3e203531313637.roa (hash: UydxAZhwSdOW+i9ckdbKjUYkZpSuFMcCSDr23gjNI6E=)
                          8: 34352e38382e3232302e302f32342d3234203d3e20313431303339.roa (hash: tEDtZqhFzWAM9uoeGkgGz1oEVzZhzg+0+7qgmZqiRvw=)
                          9: 34352e38352e3234382e302f32342d3234203d3e20313336373837.roa (hash: gpQO8CTYCA2x1tLJfcDQogyF9WHyTIugwszJW1qykyc=)
                          10: 34352e38352e3234392e302f32342d3332203d3e203531313637.roa (hash: vs7auM+EEHYVBqUo0eo7/C1yEpbZX3eTCHGfnvYwbcc=)
                          11: 34352e38382e3232332e302f32342d3332203d3e203531313637.roa (hash: hZVbqLIgsbUco0BGMx67/iiTNdHJYJXGoECR7myvP+8=)
                          12: 34352e38382e3232312e302f32342d3234203d3e20313336373837.roa (hash: Llww96aC8C649iCECTA68NZAaid8QgWkgEZWpom3t/c=)
                          13: 34352e31312e38322e302f32342d3234203d3e20313336373837.roa (hash: 5pOlgUNlP5cuLlNYc6gNivRfE0a4OMf/b5SFVScAQ3I=)
                          14: 34352e39332e35322e302f32322d3234203d3e20323033303631.roa (hash: 2trTIwXGgEXzVJG4bmB9XFz7Y/5Z1Sg/+zABvpSFIU0=)
                          15: 34352e31342e3139332e302f32342d3234203d3e20323037313337.roa (hash: AV2iqVCV9bQOUoYIalt8FD+coeprzhXEWs6oqESwRcU=)
                          16: 34352e31342e3139352e302f32342d3234203d3e20313431303339.roa (hash: bvhu2rkp7xQiXVjoieivqScLrl94j3LWjenjDxLs8V4=)
                          17: DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl (hash: 8wEouJUcANA7H7EsZBWd1PIawzRTgEIXoQY1aBtBzuM=)
                          18: 34352e38382e3232322e302f32342d3234203d3e20313431303339.roa (hash: /cIBNWNd9G78WdY4L9Nr2LtPhD4BGRROaG0EhW3vvTU=)
                          19: 34352e31342e3139322e302f32342d3234203d3e20323037313337.roa (hash: 6fFYM+D/UJ7v0rdCZaD0kYTQ8Fqn7frYNl0GmeDOqQA=)
                          20: 39312e3233302e3131302e302f32342d3332203d3e203531313637.roa (hash: XVjR4G0Dkx0MUPDOx3F+8YejaDzIQjzhZSPgabMsulU=)
                          21: 39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa (hash: 4C67rLPPa/Lz1q5JmecSx/4vs5Lg5BxgunL5ggBM/7Q=)
                          22: 322e35392e3135372e302f32342d3234203d3e20313431303339.roa (hash: c7uAxgFr1GuubQKB+hrRsjd0fiXCTqZrA2FdjQr5xdI=)
                          23: 34352e31312e38302e302f32342d3234203d3e20313336373837.roa (hash: usSHSKkUb6j0S0QDDKWdWm+1nctfloh7x12ZRI0TqDY=)
                          24: 34352e3133382e3230342e302f32322d3234203d3e20323033303631.roa (hash: JdbATQul2wfnzXHMJHJS3CSsPvzkRIBj7SpLDaiiRRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6f:1c:33:20:a9:cd:a3:b0:7a:4a:e3:ee:cf:eb:48:c6:77:0a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
        Validity
            Not Before: Sep 27 01:06:13 2023 GMT
            Not After : Sep 28 03:16:13 2023 GMT
        Subject: CN=08AC4D21DF56426FB8B2DCE53DA791A6C030A9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:8e:91:e6:9e:95:52:c3:63:f3:26:dd:3f:
                    be:16:04:24:0c:b6:9d:47:fd:bf:92:72:35:d9:3d:
                    25:e4:7e:cd:0b:eb:09:68:6a:a2:dc:51:1e:99:b1:
                    ba:5b:43:52:9f:fb:d9:a2:0a:6c:44:eb:74:50:84:
                    c0:ce:d3:af:7f:af:b8:ef:95:88:f4:c8:4d:12:17:
                    bd:90:f1:96:25:ab:24:62:af:f0:02:b5:d6:f9:d8:
                    59:a9:44:4c:92:6f:b2:a2:20:e3:5c:23:aa:a3:d9:
                    38:d1:34:84:40:93:7d:ee:a6:ee:57:f0:07:f1:d0:
                    53:81:5d:69:0f:6c:25:ba:75:23:2f:f7:b7:e4:de:
                    59:e7:f9:63:43:de:6a:77:2d:00:83:3e:65:1d:5a:
                    7e:d8:15:dc:0a:86:29:de:e1:e3:55:f4:16:12:0f:
                    ac:d8:50:c3:17:42:b9:2a:0d:8b:d5:5e:e0:4c:22:
                    78:d7:cb:69:72:52:28:96:bc:10:c3:db:6f:a2:4e:
                    f5:97:66:d0:f4:0d:43:ae:6a:86:1c:71:47:b7:39:
                    20:ae:47:59:53:67:b6:ee:72:b6:90:81:f3:90:4d:
                    5e:65:2d:4b:92:fc:fe:5c:3b:51:41:8c:65:57:a0:
                    18:89:57:eb:05:1c:5e:6d:ec:0b:58:f6:38:43:45:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AC:4D:21:DF:56:42:6F:B8:B2:DC:E5:3D:A7:91:A6:C0:30:A9:BC
            X509v3 Authority Key Identifier:
                keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:da:cf:5e:35:f1:26:ae:6f:ac:dd:f5:6a:7a:70:df:f3:af:
         e1:86:65:0b:a4:11:bd:ce:92:dd:8d:ec:50:64:fa:d6:cd:04:
         49:3e:51:b1:b7:02:5a:e0:21:b2:b3:e6:80:e1:84:ec:ca:64:
         70:d0:4f:55:23:8f:44:38:2e:73:86:6b:22:58:85:0f:59:a4:
         b9:12:8f:22:b7:1a:ba:48:89:03:7d:3f:56:5f:9a:3c:2f:be:
         28:06:85:4a:10:2d:f8:c5:0d:4c:2b:70:cc:30:46:d2:71:0a:
         cb:82:97:67:89:87:46:39:90:fb:0a:ca:a4:ab:1b:13:e8:95:
         d5:63:2c:f2:35:e5:57:d6:4c:e8:77:d5:c2:cd:4b:29:bd:85:
         11:55:9d:e3:ad:a5:5f:4d:22:2b:51:d8:bb:2a:fb:ee:93:7b:
         51:c1:b6:f4:48:81:a3:a8:45:87:aa:09:7d:2f:46:ae:46:d3:
         76:81:01:80:f4:51:94:7a:39:f6:44:94:4d:92:a0:a6:24:71:
         02:a5:24:dc:dc:9c:9a:7f:7f:47:e8:46:d3:f3:22:19:77:11:
         1c:98:21:b5:59:6e:d1:71:7e:6d:51:26:b2:3a:36:74:0e:5a:
         4f:5f:fb:21:4b:7c:7c:4a:4b:f1:bf:0a:27:fc:ec:8a:65:95:
         04:3e:02:cb
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org