Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/202/E3B1070BA3D7A168ED25E839110FED1706FB060D.mft
File:                     E3B1070BA3D7A168ED25E839110FED1706FB060D.mft (raw, json)
Hash identifier:          yLRn4NrFSVfmRW1T/0JayUBKMEjIRTkKlkg+L8d18cg=
Subject key identifier:   E6:0D:45:52:26:AF:70:58:8F:1F:A1:B2:64:32:43:B0:E0:35:27:56
Authority key identifier: E3:B1:07:0B:A3:D7:A1:68:ED:25:E8:39:11:0F:ED:17:06:FB:06:0D
Certificate issuer:       /CN=e3b1070ba3d7a168ed25e839110fed1706fb060d
Certificate serial:       1DA0B3CF5D1150E2EF914A2AEB11789E8779425F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47EHC6PXoWjtJeg5EQ_tFwb7Bg0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/202/E3B1070BA3D7A168ED25E839110FED1706FB060D.mft
Manifest number:          0526
Signing time:             Thu 21 Dec 2023 11:37:01 +0000
Manifest this update:     Thu 21 Dec 2023 11:32:01 +0000
Manifest next update:     Fri 22 Dec 2023 13:14:01 +0000
Files and hashes:         1: E3B1070BA3D7A168ED25E839110FED1706FB060D.crl (hash: a4X7Ke+lMWLw5sDcpIl+oY03ZmxdXitVKs4iSAC/myw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a0:b3:cf:5d:11:50:e2:ef:91:4a:2a:eb:11:78:9e:87:79:42:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b1070ba3d7a168ed25e839110fed1706fb060d
        Validity
            Not Before: Dec 21 11:32:01 2023 GMT
            Not After : Dec 22 13:14:01 2023 GMT
        Subject: CN=E60D455226AF70588F1FA1B2643243B0E0352756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:54:52:3b:13:d2:04:27:78:60:2a:e4:9c:
                    25:9c:db:9a:67:ee:f9:2e:96:80:31:76:ed:1e:4e:
                    1f:e2:2b:42:23:be:f7:88:9c:d3:1a:4a:54:a1:e8:
                    f9:39:87:e8:23:8a:74:a2:f9:e5:e4:17:3c:77:7d:
                    1e:c0:3e:1d:ba:39:5f:7b:2f:41:21:59:55:5b:e7:
                    87:d0:73:e3:50:b5:54:38:1c:4d:30:b6:d8:a7:fa:
                    87:b8:c0:bf:1e:c3:21:13:42:26:dc:03:57:18:38:
                    99:6e:59:36:9f:c6:7a:44:4f:a7:86:d8:a0:cb:4f:
                    57:5e:70:7e:74:3d:d4:0f:d0:7c:81:e1:39:08:53:
                    a8:1d:21:eb:e9:00:82:27:50:78:3d:8b:d8:40:17:
                    74:01:d5:ba:ba:6d:98:a1:b9:b7:7e:31:1c:9e:21:
                    72:37:8a:ae:b3:f1:57:0f:2b:c6:5e:a0:50:61:88:
                    09:14:69:d8:37:9a:ee:17:f7:10:a2:57:83:9e:39:
                    26:71:54:0e:56:b1:33:0e:48:5f:c3:e7:25:b2:71:
                    52:24:bd:24:ae:74:ca:2b:8f:51:01:d0:4a:89:dc:
                    d3:e8:a8:9e:86:c3:37:6a:79:23:fc:93:96:33:3b:
                    8b:7e:f6:11:f4:4d:63:8f:e5:8b:97:ed:a8:8e:8b:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0D:45:52:26:AF:70:58:8F:1F:A1:B2:64:32:43:B0:E0:35:27:56
            X509v3 Authority Key Identifier:
                keyid:E3:B1:07:0B:A3:D7:A1:68:ED:25:E8:39:11:0F:ED:17:06:FB:06:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/202/E3B1070BA3D7A168ED25E839110FED1706FB060D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47EHC6PXoWjtJeg5EQ_tFwb7Bg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/202/E3B1070BA3D7A168ED25E839110FED1706FB060D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a3:5a:33:7b:5e:88:66:4d:6f:37:e2:cc:bc:33:cc:ac:44:
         fe:dc:b8:63:f0:34:83:d3:f5:2a:77:2b:a8:7e:6d:ce:d5:1e:
         e4:37:9b:56:3d:4d:81:4f:53:e9:08:2b:57:5d:1c:ea:62:c6:
         98:14:0b:81:78:39:f9:90:67:e5:24:4d:7d:e9:23:fd:91:3b:
         de:20:6b:70:10:25:5a:2c:35:7a:62:05:0f:ba:a7:f4:55:f8:
         53:7a:cc:3d:a0:e9:04:69:ea:46:ca:b1:19:45:c7:e5:a7:f7:
         c6:92:c6:67:a5:e3:90:9c:09:2d:8d:f3:6b:f8:31:54:07:38:
         5f:38:45:2b:c0:cc:b3:fe:5e:6f:4a:74:d2:74:4a:07:20:dd:
         76:00:c7:80:e0:a0:56:2c:d8:c6:fd:ff:ed:84:e2:3e:fe:a8:
         37:4f:64:8a:67:e8:9e:c9:4c:b6:42:c6:d6:eb:1b:15:1e:e1:
         a1:e6:b5:0d:13:b2:77:7c:6c:54:ac:97:1c:47:21:fb:43:63:
         31:64:f1:39:c4:e9:5f:13:7e:4f:ef:c8:92:12:47:cb:8d:8b:
         00:7c:73:8f:bb:67:fc:e0:cd:b9:68:30:92:ed:b7:32:33:a1:
         86:56:c3:dd:e9:4e:9a:1b:21:ec:eb:79:95:39:99:9e:41:b4:
         b2:a1:11:19
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHaCzz10RUOLvkUoq6xF4nod5Ql8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTNiMTA3MGJhM2Q3YTE2OGVkMjVlODM5MTEwZmVkMTcw
NmZiMDYwZDAeFw0yMzEyMjExMTMyMDFaFw0yMzEyMjIxMzE0MDFaMDMxMTAvBgNV
BAMTKEU2MEQ0NTUyMjZBRjcwNTg4RjFGQTFCMjY0MzI0M0IwRTAzNTI3NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aVRSOxPSBCd4YCrknCWc25pn
7vkuloAxdu0eTh/iK0IjvveInNMaSlSh6Pk5h+gjinSi+eXkFzx3fR7APh26OV97
L0EhWVVb54fQc+NQtVQ4HE0wttin+oe4wL8ewyETQibcA1cYOJluWTafxnpET6eG
2KDLT1decH50PdQP0HyB4TkIU6gdIevpAIInUHg9i9hAF3QB1bq6bZihubd+MRye
IXI3iq6z8VcPK8ZeoFBhiAkUadg3mu4X9xCiV4OeOSZxVA5WsTMOSF/D5yWycVIk
vSSudMorj1EB0EqJ3NPoqJ6GwzdqeSP8k5YzO4t+9hH0TWOP5YuX7aiOiybrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU5g1FUiavcFiPH6GyZDJDsOA1J1YwHwYDVR0j
BBgwFoAU47EHC6PXoWjtJeg5EQ/tFwb7Bg0wDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8yMDIvRTNCMTA3MEJBM0Q3QTE2OEVEMjVFODM5MTEwRkVEMTcwNkZCMDYw
RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3RUhDNlBYb1dqdEplZzVFUV90
RndiN0JnMC5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIwMi9FM0IxMDcwQkEzRDdB
MTY4RUQyNUU4MzkxMTBGRUQxNzA2RkIwNjBELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqNaM3teiGZN
bzfizLwzzKxE/ty4Y/A0g9P1KncrqH5tztUe5DebVj1NgU9T6QgrV10c6mLGmBQL
gXg5+ZBn5SRNfekj/ZE73iBrcBAlWiw1emIFD7qn9FX4U3rMPaDpBGnqRsqxGUXH
5af3xpLGZ6XjkJwJLY3za/gxVAc4XzhFK8DMs/5eb0p00nRKByDddgDHgOCgVizY
xv3/7YTiPv6oN09kimfonslMtkLG1usbFR7hoea1DROyd3xsVKyXHEch+0NjMWTx
OcTpXxN+T+/IkhJHy42LAHxzj7tn/ODNuWgwku23MjOhhlbD3elOmhsh7Ot5lTmZ
nkG0sqERGQ==
-----END CERTIFICATE-----