Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft
File:                     DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft (raw, json)
Hash identifier:          5OGrvnvQr0f8r6FCJWyDr04nfdb0jm+Vt0Z/1za+leY=
Subject key identifier:   CB:9B:39:54:47:4F:1A:63:32:75:6F:33:2D:AB:DF:AF:7D:5C:3E:1B
Authority key identifier: DA:7D:DC:9D:80:8D:F9:A1:08:EC:0C:FC:19:34:C7:43:04:8E:99:19
Certificate issuer:       /CN=da7ddc9d808df9a108ec0cfc1934c743048e9919
Certificate serial:       675392665BD3A1D57DC2A1C2156E126AF0CE0A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n3cnYCN-aEI7Az8GTTHQwSOmRk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft
Manifest number:          0368
Signing time:             Wed 27 Dec 2023 09:47:53 +0000
Manifest this update:     Wed 27 Dec 2023 09:42:53 +0000
Manifest next update:     Thu 28 Dec 2023 12:37:53 +0000
Files and hashes:         1: DA7DDC9D808DF9A108EC0CFC1934C743048E9919.crl (hash: DMCap9Qy3hbM72aJbeYaOpt/4mbZvvRp51Dvi6YmJ+g=)
                          2: 39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa (hash: JI07yNIjyqPEzS+ZGMTvALFI8KsPLmedb46hnmliVOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:53:92:66:5b:d3:a1:d5:7d:c2:a1:c2:15:6e:12:6a:f0:ce:0a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7ddc9d808df9a108ec0cfc1934c743048e9919
        Validity
            Not Before: Dec 27 09:42:53 2023 GMT
            Not After : Dec 28 12:37:53 2023 GMT
        Subject: CN=CB9B3954474F1A6332756F332DABDFAF7D5C3E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:12:89:a1:f5:63:45:b2:95:f1:dc:46:e7:
                    46:fb:63:9a:32:48:56:59:98:cb:05:43:8c:30:72:
                    6f:31:13:20:3c:df:6b:e2:8b:fc:8a:6c:93:d9:6f:
                    87:d7:5d:94:3c:f9:a7:94:8e:7b:81:8a:47:b6:6f:
                    8c:1c:44:01:84:e8:b9:e7:4c:bb:40:f5:d7:69:98:
                    07:24:2d:81:de:a0:bf:73:74:e8:9b:57:94:80:e5:
                    48:8f:1b:2a:15:49:2c:13:e1:1f:78:2b:d7:80:96:
                    0a:5f:39:f5:52:e5:27:2c:38:79:76:13:38:ee:8f:
                    21:bd:e9:1e:1a:47:f0:2e:fc:c8:58:53:3b:64:03:
                    ee:a6:94:be:af:f4:22:fc:4d:bb:5b:a7:28:ab:ab:
                    0c:c7:17:79:56:07:d7:ea:39:93:ee:68:cc:bd:22:
                    7c:9f:5a:ba:3d:d6:17:5b:0d:4e:b6:04:c8:f0:97:
                    6c:3a:58:0a:af:27:f2:e2:74:89:8b:2f:20:ca:1c:
                    dd:44:0a:b9:71:82:02:91:0c:a0:17:6b:25:a4:ca:
                    79:5a:30:48:39:ce:5f:d5:fc:45:12:f6:05:f8:c5:
                    01:cc:2d:0f:b6:d0:e8:0f:72:21:88:fc:9d:52:e2:
                    de:54:6f:41:00:6a:d4:07:d7:9b:c6:e0:bb:d8:15:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:39:54:47:4F:1A:63:32:75:6F:33:2D:AB:DF:AF:7D:5C:3E:1B
            X509v3 Authority Key Identifier:
                keyid:DA:7D:DC:9D:80:8D:F9:A1:08:EC:0C:FC:19:34:C7:43:04:8E:99:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3cnYCN-aEI7Az8GTTHQwSOmRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:54:8f:5b:53:bf:a4:c6:75:c0:63:d1:77:ac:91:30:61:
         d6:0c:a3:3e:26:c7:be:e3:70:10:b7:be:1c:78:de:d9:75:3e:
         c8:9b:2e:97:4a:b3:b6:8d:8d:c1:60:d3:d8:59:f6:d4:a3:36:
         45:0b:d6:1d:0c:52:87:1b:fc:8d:5b:62:00:6e:21:ec:bd:66:
         43:60:8a:63:6d:17:3f:5f:58:bb:d3:e2:c6:bc:2c:2b:af:d0:
         23:28:d3:cd:56:75:ed:04:6e:9f:c5:1b:b9:43:8a:22:6e:cc:
         3d:0d:db:ce:0b:b8:3d:7c:48:24:86:81:04:e8:80:f8:f4:b8:
         03:0f:81:ba:23:36:da:ec:61:18:59:bc:17:48:e2:66:b1:2c:
         68:c9:d4:17:9b:c2:73:95:9b:ee:83:ec:6a:50:63:43:71:eb:
         a9:72:36:16:bd:4c:f2:6b:09:31:f3:71:9e:11:2f:8d:ba:ec:
         c6:04:ef:ef:6c:fa:e8:1b:5f:15:27:a5:0a:d1:71:93:0b:fb:
         0a:fb:d3:11:6e:04:ac:b8:2d:6b:3f:15:62:50:fc:10:71:78:
         1a:2e:fa:28:2a:0f:1e:f1:16:f2:34:a5:ea:89:72:35:e5:4e:
         84:1e:3e:56:be:3a:0a:81:b5:1c:61:ac:a3:20:c2:c6:b4:95:
         90:07:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----