Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/209/D9D41D39000ACDC84362E7F68E88025CF8DAFC73.mft
File:                     D9D41D39000ACDC84362E7F68E88025CF8DAFC73.mft (raw, json)
Hash identifier:          qaX6qO4OGyA7EJ30AsO2L7h6QQe7n2zSNoTHkOyk5Wg=
Subject key identifier:   BB:98:AB:F9:79:16:49:05:E9:EB:B4:9C:0C:9F:96:A9:65:68:D5:99
Authority key identifier: D9:D4:1D:39:00:0A:CD:C8:43:62:E7:F6:8E:88:02:5C:F8:DA:FC:73
Certificate issuer:       /CN=d9d41d39000acdc84362e7f68e88025cf8dafc73
Certificate serial:       7F3747741B0426FDE78067DC757E6C024A75F44A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dQdOQAKzchDYuf2jogCXPja_HM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/209/D9D41D39000ACDC84362E7F68E88025CF8DAFC73.mft
Manifest number:          0522
Signing time:             Thu 21 Dec 2023 13:22:23 +0000
Manifest this update:     Thu 21 Dec 2023 13:17:23 +0000
Manifest next update:     Fri 22 Dec 2023 15:56:23 +0000
Files and hashes:         1: 3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa (hash: nSpfXOI1FaUJg0a4lSKf2n+Rn6WITXVzOwXNUUyKWQg=)
                          2: D9D41D39000ACDC84362E7F68E88025CF8DAFC73.crl (hash: k2dx6kTvFzh1vXfzzX3HNfU5OjpTn3D6ib78euSV5R0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:37:47:74:1b:04:26:fd:e7:80:67:dc:75:7e:6c:02:4a:75:f4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d41d39000acdc84362e7f68e88025cf8dafc73
        Validity
            Not Before: Dec 21 13:17:23 2023 GMT
            Not After : Dec 22 15:56:23 2023 GMT
        Subject: CN=BB98ABF979164905E9EBB49C0C9F96A96568D599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:7e:8f:a0:ec:eb:c5:a4:8a:7d:32:8e:4a:65:
                    b2:0e:47:a3:54:47:df:87:77:a9:3a:bf:40:ae:e4:
                    a1:b8:e5:f6:f2:9c:13:7d:00:59:b3:1e:4a:3b:ef:
                    a1:d4:d5:c0:a3:f2:8a:43:ec:57:93:20:d6:26:84:
                    eb:f5:db:c3:d4:41:9f:0c:26:c8:04:59:49:b9:72:
                    a2:3d:24:08:51:30:0b:7a:60:97:dc:06:cb:b6:69:
                    ba:bd:20:4b:6d:e1:a7:3e:ae:1a:63:b1:a6:06:e2:
                    c1:82:b2:bf:0b:e3:14:c5:57:4c:38:41:25:8d:79:
                    1c:9a:34:89:f2:ed:00:63:6f:fc:3b:8b:8a:a0:73:
                    eb:75:bf:b2:d7:d3:3d:7a:33:cc:63:04:01:10:92:
                    32:f1:b8:cb:60:b6:38:85:47:ac:ed:a3:f6:cf:28:
                    35:7c:99:ea:bd:09:8a:11:19:a4:f5:72:c1:49:86:
                    4b:cd:74:68:a5:57:c0:98:66:25:79:fa:37:d7:81:
                    2e:48:2e:55:8f:47:b7:29:b1:9d:c2:ea:b7:ad:66:
                    2b:e4:e1:52:2c:f9:78:f0:69:86:41:a5:cd:92:7f:
                    e2:36:26:ca:00:f8:ee:96:90:28:fc:27:4a:5f:0a:
                    98:ae:82:d9:40:f4:b9:13:0a:4b:94:06:f2:29:82:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:98:AB:F9:79:16:49:05:E9:EB:B4:9C:0C:9F:96:A9:65:68:D5:99
            X509v3 Authority Key Identifier:
                keyid:D9:D4:1D:39:00:0A:CD:C8:43:62:E7:F6:8E:88:02:5C:F8:DA:FC:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/209/D9D41D39000ACDC84362E7F68E88025CF8DAFC73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dQdOQAKzchDYuf2jogCXPja_HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/209/D9D41D39000ACDC84362E7F68E88025CF8DAFC73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:64:d7:e8:73:53:44:83:79:7a:4e:d0:4b:d0:c8:5a:44:6a:
         cb:29:84:99:75:56:90:0c:ec:2b:32:50:af:d8:91:46:4a:8b:
         04:ba:f4:b2:c6:2b:6b:1c:72:f0:6f:c0:9e:09:a7:c6:bc:a0:
         c7:60:ba:9d:26:3f:87:d5:e4:82:78:64:15:a1:e2:83:a9:bd:
         8c:38:6e:83:e1:3c:28:4f:21:d9:24:59:6b:98:8e:cd:61:8b:
         15:89:55:7a:15:e7:99:09:be:98:9c:1b:6e:5b:eb:3b:aa:18:
         a2:f5:59:44:31:0e:ef:86:af:d2:33:a0:e2:1b:7b:0e:f0:67:
         9c:86:ad:4c:2b:ef:59:64:d2:3d:1d:dc:a0:db:2c:ce:da:cc:
         57:a3:e4:97:8f:58:60:d5:04:bc:64:e6:e2:95:73:08:12:64:
         ef:52:21:f6:10:24:ff:68:23:f4:8a:a2:98:bd:65:71:2c:36:
         41:a6:66:46:45:7d:90:18:d5:93:a1:19:f9:61:70:11:98:0c:
         bb:1c:74:8c:47:53:75:2a:7a:b9:45:d3:81:75:07:c4:dd:4b:
         77:65:f1:36:df:be:d1:39:2d:6d:b0:e5:4c:66:30:2a:5c:a2:
         80:d5:1c:d6:87:09:48:1d:82:c9:11:b2:80:bf:25:d9:c6:ed:
         a1:01:e5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----