Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft
File:                     F163E1EE74384430F7A75E7448A376D89DBBE730.mft (raw, json)
Hash identifier:          Y9X7p2WVVg4sp7FZR0DWJEXTJbafz2PG4IMJfjC7W08=
Subject key identifier:   EF:6C:5F:7D:C2:B7:E3:DA:69:94:48:D4:BF:13:AD:6A:2F:34:4E:A8
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Certificate issuer:       /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial:       33AFF121B7947E03BDB8E092ED7A421111506CB0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft
Manifest number:          57
Signing time:             Wed 20 Nov 2024 15:57:22 +0000
Manifest this update:     Wed 20 Nov 2024 15:52:22 +0000
Manifest next update:     Thu 21 Nov 2024 19:42:22 +0000
Files and hashes:         1: 326130393a353463363a643030303a3a2f33362d3336203d3e20323134373537.roa (hash: eTpxi4h7rVQD9UjYSq64NlM2hMV5MKioIPMyRsUsYAg=)
                          2: F163E1EE74384430F7A75E7448A376D89DBBE730.crl (hash: 6n8PSg+V+C3R0fcxRYNq3oBaqF5srNg0c/EKFRx0Z1M=)
                          3: 326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa (hash: c4pcfZMLTl4R4EnjcfGUgS5ogirjfvs/y9Dcs7QHo8E=)
                          4: 326130393a353463363a646561643a3a2f34382d3438203d3e20323134373537.roa (hash: yLoPNgxXsGZOGeGwXoeF29sQWCPopI46FmunhhorBcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:af:f1:21:b7:94:7e:03:bd:b8:e0:92:ed:7a:42:11:11:50:6c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
        Validity
            Not Before: Nov 20 15:52:22 2024 GMT
            Not After : Nov 21 19:42:22 2024 GMT
        Subject: CN=EF6C5F7DC2B7E3DA699448D4BF13AD6A2F344EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:dd:25:67:a8:75:df:89:3a:cd:67:26:1f:
                    b4:8c:f8:52:ef:54:e0:ad:1b:db:1c:fa:e1:20:1e:
                    bf:29:d7:e0:bd:1f:ce:05:d4:f3:45:4d:7e:02:32:
                    8a:8d:ad:37:e1:4d:9b:45:59:8a:93:5f:5f:fc:dd:
                    06:17:f4:e1:09:4d:2b:69:11:e2:ee:0f:8e:ee:14:
                    d9:ca:e7:fd:9f:db:48:00:f3:9b:2e:b3:2a:77:2c:
                    d6:7d:5d:22:63:45:d1:59:ee:b9:e5:cf:5a:dd:c7:
                    bb:dc:73:88:00:46:74:23:78:3d:01:63:13:df:9a:
                    24:3e:0e:82:40:c5:e9:8e:75:ef:71:9c:a0:c9:55:
                    9c:65:5c:2e:aa:8a:51:4b:3f:5e:e4:55:d4:0d:de:
                    ea:c9:74:3c:99:e2:1a:9f:6a:5b:8b:2a:0a:61:48:
                    32:5e:3b:0d:68:23:c1:8a:dc:d0:41:b5:3a:0c:04:
                    a8:39:21:fe:96:7e:6a:90:43:8b:24:d5:52:96:d9:
                    6c:a9:a4:94:c8:46:f8:79:ca:a1:b6:a7:23:16:96:
                    37:4b:bb:46:74:a3:f2:5c:23:f0:f3:a5:aa:a0:10:
                    63:eb:75:4a:25:d7:ab:d7:f5:bb:19:f2:05:6c:38:
                    fb:11:ae:b7:ca:55:3f:7c:f9:6b:18:50:88:2c:2d:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6C:5F:7D:C2:B7:E3:DA:69:94:48:D4:BF:13:AD:6A:2F:34:4E:A8
            X509v3 Authority Key Identifier:
                keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:4e:43:88:46:8b:bf:77:82:43:9a:ab:1c:e9:ee:99:2a:
         bf:e1:0a:34:8b:bc:bd:bc:46:4d:eb:80:04:12:25:a5:ff:7e:
         66:dd:02:6e:a3:7d:e6:5f:7b:43:d6:33:29:a7:a4:b9:a8:2d:
         94:38:bc:d4:28:2f:a2:a1:3b:0d:72:8f:06:44:03:18:93:41:
         44:49:fa:bd:ab:6c:c9:18:64:72:1c:ff:4f:80:a0:09:91:e3:
         b4:1a:53:66:24:74:08:b0:24:76:8a:d1:61:70:b2:59:a4:52:
         66:b0:b7:b3:14:26:89:7d:70:19:1e:69:42:22:95:16:6c:32:
         ca:a7:3e:4e:00:bf:b9:56:29:03:bc:30:bb:e8:06:84:8f:da:
         75:38:4b:25:d2:b5:65:68:0c:6a:d6:f5:f5:4a:c8:2b:1a:b8:
         8c:59:2c:e0:39:92:14:e0:df:40:39:e2:70:e4:38:e7:1d:e0:
         ca:ed:18:d8:66:6c:8f:9a:eb:66:d6:33:6b:0e:ad:69:8a:f0:
         5b:49:fc:73:f8:cb:7e:8d:99:b8:9b:08:a6:4c:d1:a7:79:40:
         a9:b7:22:71:c8:d9:21:87:29:67:03:c9:27:bb:0b:a2:7e:0a:
         50:b0:87:df:cc:57:9e:f7:a1:f1:ba:bf:6d:02:c1:63:eb:25:
         08:9c:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----