Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.mft
File:                     709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.mft (raw, json)
Hash identifier:          CZFygx9I3Jd6SczLjFnbBm03im8lx460qm6aDFx9Stc=
Subject key identifier:   79:3C:85:C0:3B:C1:78:38:80:AA:74:09:1F:09:86:A1:B2:83:E1:7C
Authority key identifier: 70:9F:1C:51:C0:A2:E8:6D:0D:F1:D6:93:D4:98:8E:E1:E9:20:00:CA
Certificate issuer:       /CN=709f1c51c0a2e86d0df1d693d4988ee1e92000ca
Certificate serial:       559A5F8FA329FBD04E33C7EA0AE5F985B0ED37BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJ8cUcCi6G0N8daT1JiO4ekgAMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.mft
Manifest number:          0547
Signing time:             Wed 27 Dec 2023 09:47:53 +0000
Manifest this update:     Wed 27 Dec 2023 09:42:53 +0000
Manifest next update:     Thu 28 Dec 2023 11:21:53 +0000
Files and hashes:         1: 709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.crl (hash: AoDb9ej7in61yaL3nPN2ITqGktOEbzOJPGAkrALhTDM=)
                          2: 39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa (hash: 2T92KEJPmh9VrcOEsFi5CMatw6U9b4QD9jactejyOpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9a:5f:8f:a3:29:fb:d0:4e:33:c7:ea:0a:e5:f9:85:b0:ed:37:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709f1c51c0a2e86d0df1d693d4988ee1e92000ca
        Validity
            Not Before: Dec 27 09:42:53 2023 GMT
            Not After : Dec 28 11:21:53 2023 GMT
        Subject: CN=793C85C03BC1783880AA74091F0986A1B283E17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e2:bb:75:39:a1:ca:2c:3e:c9:bc:49:21:4c:
                    d0:18:48:e0:c0:ad:79:3c:85:a7:5b:c4:a4:75:15:
                    39:94:bb:75:4d:24:db:89:e7:09:6d:ba:0f:cb:c8:
                    d7:39:22:ae:3e:c9:2c:86:dc:71:8e:df:d7:85:87:
                    f7:b4:ae:0a:e6:fb:31:a3:fe:29:1f:6e:d0:31:a1:
                    d9:d0:e0:c8:ee:42:b0:e7:fa:94:fb:7d:6e:d4:e1:
                    8d:f2:ee:69:21:16:1a:44:95:d0:9a:57:58:93:93:
                    3e:7d:c9:6c:41:fe:75:f9:65:4b:04:b0:67:e5:24:
                    53:ce:f0:59:a4:cb:29:5a:3a:bf:c5:af:91:ed:10:
                    d4:07:82:06:23:81:ff:70:c2:59:c3:24:e5:3f:e1:
                    c8:47:ed:6d:7c:6d:fc:79:c4:77:e2:63:15:ef:10:
                    bc:16:13:d2:eb:a1:68:a6:f5:91:e7:9a:9a:1f:b3:
                    bf:77:9d:33:ff:d7:80:6d:30:00:12:2d:1f:c8:b8:
                    7f:26:6b:3f:08:6d:a0:75:18:b3:55:da:61:bc:fa:
                    a9:69:92:b9:e0:55:f8:a8:24:f9:84:db:b4:ac:71:
                    b9:0c:42:fe:8f:5a:1c:9c:6f:3a:a8:cb:4f:3b:51:
                    2c:41:ba:ee:e7:26:63:91:e8:a6:cb:09:a1:8d:73:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3C:85:C0:3B:C1:78:38:80:AA:74:09:1F:09:86:A1:B2:83:E1:7C
            X509v3 Authority Key Identifier:
                keyid:70:9F:1C:51:C0:A2:E8:6D:0D:F1:D6:93:D4:98:8E:E1:E9:20:00:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ8cUcCi6G0N8daT1JiO4ekgAMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:ad:c7:0c:94:cb:f6:84:16:2b:f3:de:38:ee:12:96:c8:
         77:82:1d:76:36:91:30:bf:05:15:c5:b2:f9:05:dd:84:a2:2e:
         ff:b8:cb:e5:a2:47:29:84:6f:05:5f:b4:e5:01:2d:40:b8:e1:
         49:e4:c5:23:4f:6c:42:17:5d:b9:9a:ff:e0:f0:40:e4:9f:a1:
         71:4e:e0:18:45:2f:9d:e2:26:1d:f7:a0:bb:6f:04:12:f7:82:
         59:59:b9:bf:fe:ce:4b:d0:18:d9:3a:ba:da:2b:61:4f:c1:62:
         f7:5f:27:a3:92:c0:96:72:c3:71:f5:37:9a:43:f5:fd:55:56:
         c7:2b:a3:99:30:3f:d8:ee:c3:79:f1:9e:c1:25:75:6d:f9:bc:
         69:00:c2:a4:6b:6d:97:13:3e:19:cb:63:32:35:1d:15:90:49:
         8a:40:c4:4c:af:9a:2c:7c:b6:5e:c3:1f:a1:43:fb:dd:ae:73:
         56:45:03:95:86:de:0d:11:96:d3:5b:ec:1d:40:12:b0:44:d7:
         b9:8c:71:ac:7f:d1:39:18:5c:25:c9:e9:55:cf:65:15:1c:0d:
         ef:d6:8e:e5:b0:a0:05:b2:82:43:99:4c:35:e9:08:24:4e:d3:
         bc:b5:cb:5f:7e:9b:d2:c7:08:0b:c3:8f:2d:e2:01:3c:20:46:
         e8:ff:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----