Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft
File:                     FAE8907C5DE93E22E975390DB5621669314C4E18.mft (raw, json)
Hash identifier:          J25lvSLY2AHjK+AfyXF6XpRFhTd410o4J+ufDStws0k=
Subject key identifier:   B1:C9:2C:DC:AB:B5:60:73:B9:7E:26:98:83:90:AF:33:A7:C8:2A:0B
Authority key identifier: FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18
Certificate issuer:       /CN=fae8907c5de93e22e975390db5621669314c4e18
Certificate serial:       52C2AB8E76ECC8661C68D44999614097B4FEAA29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft
Manifest number:          0365
Signing time:             Wed 27 Dec 2023 09:47:54 +0000
Manifest this update:     Wed 27 Dec 2023 09:42:54 +0000
Manifest next update:     Thu 28 Dec 2023 10:44:54 +0000
Files and hashes:         1: 3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa (hash: U96cJMm3pGO5b07LUu1NTnBFmnO6SNexAeSENeYI1r4=)
                          2: FAE8907C5DE93E22E975390DB5621669314C4E18.crl (hash: o8dzOHVgLHZYGTxr1vC+B1Rr/rdJLEB3T9mt0mY95A8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c2:ab:8e:76:ec:c8:66:1c:68:d4:49:99:61:40:97:b4:fe:aa:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae8907c5de93e22e975390db5621669314c4e18
        Validity
            Not Before: Dec 27 09:42:54 2023 GMT
            Not After : Dec 28 10:44:54 2023 GMT
        Subject: CN=B1C92CDCABB56073B97E26988390AF33A7C82A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:86:94:1b:2d:7d:66:e2:bd:de:58:91:2e:
                    55:31:35:9a:9e:e1:1c:2a:e0:5c:4d:70:47:2b:0d:
                    37:ff:3a:b7:e7:34:ff:5a:2a:1a:3b:44:7f:f4:8f:
                    0c:da:23:72:d0:a8:93:d5:f3:f5:f1:1f:5e:f6:64:
                    43:b9:b8:5a:15:a1:a5:ca:86:36:65:d0:b2:92:5a:
                    fe:f2:e4:c0:25:ae:5c:4d:78:7f:a0:b4:35:b4:07:
                    b3:e7:e7:c3:d7:56:48:68:4a:79:81:9d:f7:3d:03:
                    76:81:1f:aa:2f:41:05:f7:39:da:47:3e:8c:cc:72:
                    db:e5:30:4d:ef:18:4b:46:10:ad:d4:5a:11:0b:d4:
                    fd:2e:fb:d3:bf:65:fc:ae:04:4d:3d:2e:cb:86:8d:
                    d1:5a:8b:d3:42:1d:d7:20:0d:af:7a:6c:97:31:b0:
                    c7:6f:55:41:ad:ec:31:52:6f:21:ec:0b:e2:75:4e:
                    da:66:f3:b3:ba:2c:ef:e9:51:cc:40:3c:cb:de:e8:
                    06:58:00:df:cc:6e:63:89:1b:a7:71:f7:82:dc:e2:
                    e5:5a:a9:13:a2:ad:39:b4:ef:1b:14:db:e8:85:52:
                    3e:61:9d:c4:6c:7d:9f:8c:92:43:c0:93:cc:70:58:
                    17:07:28:4e:39:65:bb:7f:5b:da:3b:ab:e3:4b:4e:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C9:2C:DC:AB:B5:60:73:B9:7E:26:98:83:90:AF:33:A7:C8:2A:0B
            X509v3 Authority Key Identifier:
                keyid:FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f0:56:16:c1:bf:f4:61:64:a0:08:fc:26:41:9d:b6:c1:12:
         1d:e4:c7:47:85:4e:ff:18:8f:37:ff:fd:3f:10:f6:35:ab:98:
         e1:a6:c7:1d:bd:4a:18:5d:bd:e8:d4:ab:63:cf:c8:b5:a8:7c:
         a1:a5:d9:d5:9c:44:10:15:bc:c9:dc:73:d9:eb:75:96:df:48:
         2a:f1:41:3c:6f:5c:25:09:18:2f:29:4f:ef:47:a3:54:71:f9:
         31:2c:f5:fc:7d:8a:0d:37:fa:a3:f9:c5:a7:18:97:75:8d:8a:
         0c:46:4e:4a:02:3a:2c:87:e2:59:7e:cf:f4:bc:85:fe:cd:04:
         bd:82:2e:22:40:37:c7:cc:82:ac:27:81:de:d4:47:4c:31:d0:
         a4:9f:86:69:39:16:ca:60:9f:f7:87:22:0b:f8:a0:73:3a:13:
         43:47:d8:36:15:a2:55:7f:95:f2:21:e0:36:77:b4:f8:d7:50:
         d2:db:c5:5e:36:62:74:14:8d:d4:59:3a:94:7d:95:52:f7:f6:
         6f:f1:8b:5f:f6:41:e5:a2:67:f6:95:84:1a:51:e6:1f:1b:7c:
         51:4a:23:da:bd:8c:60:4f:a1:c3:5c:ac:45:2d:82:b6:c3:38:
         be:d0:4f:f2:9b:98:d4:cc:81:4d:16:6d:e0:76:a2:22:15:62:
         de:38:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----