Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/436CA3F8EB1494057F369AE60413324FCD2D62BF.mft
File:                     436CA3F8EB1494057F369AE60413324FCD2D62BF.mft (raw, json)
Hash identifier:          ZUHtz70ragYJOFlEHyL3KkCh6YamX2RtfAq1I/hpH2A=
Subject key identifier:   D4:A8:4A:87:A7:8B:66:E5:5F:5C:7C:6E:18:41:A1:B5:06:88:C7:46
Authority key identifier: 43:6C:A3:F8:EB:14:94:05:7F:36:9A:E6:04:13:32:4F:CD:2D:62:BF
Certificate issuer:       /CN=436ca3f8eb1494057f369ae60413324fcd2d62bf
Certificate serial:       4D4C9F6A669F0ADE199864CC7703633C429B6F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2yj-OsUlAV_NprmBBMyT80tYr8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/436CA3F8EB1494057F369AE60413324FCD2D62BF.mft
Manifest number:          0529
Signing time:             Thu 21 Dec 2023 12:07:07 +0000
Manifest this update:     Thu 21 Dec 2023 12:02:07 +0000
Manifest next update:     Fri 22 Dec 2023 14:28:07 +0000
Files and hashes:         1: 36322e3130362e37322e302f32342d3234203d3e20323031333431.roa (hash: 3al8Sm5fDSUPg1GQoSoCoCKaRaeG+fSPm98P+3FPqM8=)
                          2: 436CA3F8EB1494057F369AE60413324FCD2D62BF.crl (hash: Jt42qEuRxd+cSlyXwQ2V5r1pJek0l123tlmjpJoe8Kw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4c:9f:6a:66:9f:0a:de:19:98:64:cc:77:03:63:3c:42:9b:6f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436ca3f8eb1494057f369ae60413324fcd2d62bf
        Validity
            Not Before: Dec 21 12:02:07 2023 GMT
            Not After : Dec 22 14:28:07 2023 GMT
        Subject: CN=D4A84A87A78B66E55F5C7C6E1841A1B50688C746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:ec:34:5b:18:30:9d:25:c6:fe:4c:04:cf:
                    41:00:fb:cf:32:35:19:bc:c4:45:e2:bd:ca:7f:b9:
                    9c:f6:0b:41:81:7d:84:c3:9e:58:de:16:35:04:87:
                    39:af:37:9f:69:3b:34:7c:8a:ba:da:28:2b:d5:67:
                    2c:3e:fc:5d:2d:02:5a:46:ef:26:5a:bf:2e:9a:73:
                    c8:d9:92:5d:d3:00:08:b9:2c:d3:e9:d8:ec:df:3c:
                    4d:10:f3:23:d1:d8:2c:df:a9:45:e3:8a:1a:3d:04:
                    ff:2c:1e:4b:29:72:a7:89:10:01:c9:54:00:b5:0f:
                    4a:77:51:03:33:7b:6a:6b:c9:3d:e3:ec:68:50:5e:
                    90:72:c1:2f:c6:fb:d6:82:b6:c1:96:f3:84:8b:f5:
                    fe:74:5b:46:d3:9b:55:93:c0:36:b7:b8:d0:6f:6b:
                    06:14:b6:45:f9:b3:08:f8:68:44:90:d1:d6:77:f3:
                    38:a6:78:b4:b4:8e:3d:b6:86:5d:ef:a5:f5:6e:7a:
                    73:cd:30:2a:67:5e:e8:2b:84:6f:7e:50:11:cf:10:
                    25:63:4e:df:06:77:68:04:17:37:49:b1:4f:90:4c:
                    ad:54:26:e7:cc:1b:69:48:02:cc:cd:50:06:f6:06:
                    1e:a1:a9:e4:06:a7:cc:23:9b:ce:9b:49:ad:59:fe:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:4A:87:A7:8B:66:E5:5F:5C:7C:6E:18:41:A1:B5:06:88:C7:46
            X509v3 Authority Key Identifier:
                keyid:43:6C:A3:F8:EB:14:94:05:7F:36:9A:E6:04:13:32:4F:CD:2D:62:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/436CA3F8EB1494057F369AE60413324FCD2D62BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2yj-OsUlAV_NprmBBMyT80tYr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/436CA3F8EB1494057F369AE60413324FCD2D62BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:15:04:3a:56:ac:0b:1f:4a:8f:69:6f:dc:29:f4:c5:19:40:
         a3:6c:be:4f:b7:8f:1f:03:cc:df:88:87:1d:38:f1:54:1e:08:
         07:30:d6:ef:b8:2b:03:a2:d6:8a:d7:fe:43:7b:8c:07:b3:d6:
         42:75:0f:b2:22:66:fb:b0:8e:54:ef:4c:04:a9:d8:18:f5:eb:
         63:75:25:9f:d4:e3:8e:61:9c:79:54:e4:0a:36:ea:e2:f4:9e:
         bc:31:37:45:1a:56:41:72:3e:4a:73:53:e9:01:1f:c7:bf:01:
         d1:96:6c:17:b6:cb:d1:db:b5:f4:7b:e2:34:ba:cf:bf:0c:b9:
         48:b0:67:d1:60:2f:20:ea:44:b5:17:2d:db:34:6d:ad:52:96:
         0b:bc:27:6d:a9:6f:9a:c2:f5:ae:c8:60:60:79:53:23:29:6c:
         f9:0d:a9:3d:84:ad:ba:b9:2b:f3:7d:78:f9:31:b4:0d:38:c0:
         48:50:c0:5d:33:eb:2e:6e:7a:91:8d:77:15:37:b7:c2:70:b4:
         60:f8:22:bb:5c:c3:4d:35:9a:ed:a5:65:40:37:c8:90:10:c0:
         ec:58:7d:83:9d:a9:ca:c5:fe:ae:41:17:27:44:cf:fc:28:0a:
         8d:27:d1:f1:fa:64:ba:c3:58:49:7e:a0:d7:d1:f1:f1:d4:bc:
         42:5d:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----