Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft
File:                     9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft (raw, json)
Hash identifier:          00L/iOpCMHyD/VdeD1j818G4WsHCHW8C1Z28UzIzGRE=
Subject key identifier:   DB:5B:99:3B:12:78:57:8F:01:FC:2A:E2:C7:12:68:44:47:46:1B:C0
Authority key identifier: 97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53
Certificate issuer:       /CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53
Certificate serial:       24D72811ABE181476672E4DF8D060DF64157388D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft
Manifest number:          54
Signing time:             Wed 20 Nov 2024 15:57:22 +0000
Manifest this update:     Wed 20 Nov 2024 15:52:22 +0000
Manifest next update:     Thu 21 Nov 2024 16:57:22 +0000
Files and hashes:         1: 326130623a346530373a313730303a3a2f34302d3430203d3e203336383332.roa (hash: 8XXc/vUFLjWy/LRrqI4T91nQccSVuO66DoHLWKAgddY=)
                          2: 9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl (hash: Rzy6XR2TfnJBpdA20tBiIiMegF/DDV+sLqvLm/uBXhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d7:28:11:ab:e1:81:47:66:72:e4:df:8d:06:0d:f6:41:57:38:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53
        Validity
            Not Before: Nov 20 15:52:22 2024 GMT
            Not After : Nov 21 16:57:22 2024 GMT
        Subject: CN=DB5B993B1278578F01FC2AE2C712684447461BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:a4:e8:e6:35:a9:f9:ab:8b:6b:7b:00:cd:
                    12:05:30:37:c3:be:09:d4:da:d2:31:da:2d:a3:00:
                    ce:b5:af:3c:9b:bb:ae:a4:88:5b:f4:31:9e:be:4b:
                    7a:a6:f1:ee:e6:f4:4f:c7:bd:62:24:be:ed:ae:ae:
                    f2:4d:64:cc:9a:3d:af:7c:e7:71:e4:2e:6d:8b:01:
                    01:d6:82:0c:71:87:ba:ba:de:84:d1:87:77:68:c2:
                    dd:5e:a2:3e:f9:6c:fd:f7:fd:18:5a:84:6e:d2:27:
                    5c:cf:82:a5:fd:7f:ad:a2:9c:3c:45:3b:eb:1b:d8:
                    e1:3e:81:1c:57:3f:55:55:c2:3e:ba:ee:8c:4c:52:
                    f3:2b:25:bc:40:84:f0:4b:2f:79:2f:c6:c7:7a:6a:
                    ba:5d:48:ee:d0:cb:24:20:d2:22:06:10:26:ba:66:
                    12:9f:b1:6a:eb:fb:97:e6:e2:60:24:ce:35:25:55:
                    49:7e:4c:b0:78:55:92:4d:9e:cc:4c:83:27:72:52:
                    58:5f:c8:e6:cd:8e:e5:1f:b5:a9:6d:ae:67:19:b2:
                    e2:8e:f0:f1:41:72:5a:ba:85:d0:e5:15:cf:17:c7:
                    b3:06:37:1d:f5:d4:e3:bc:58:03:99:21:1e:e2:6b:
                    e8:c5:29:ff:6a:95:d3:2b:4b:54:fc:31:78:34:0b:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:99:3B:12:78:57:8F:01:FC:2A:E2:C7:12:68:44:47:46:1B:C0
            X509v3 Authority Key Identifier:
                keyid:97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9c:73:1c:b6:da:8f:fb:2a:81:ff:1b:12:b2:32:74:eb:db:
         64:8a:19:24:28:a1:55:fa:98:9f:d3:2a:41:9e:8f:a9:5f:ff:
         17:4b:ac:77:3a:5a:87:d3:ed:6f:f5:09:fa:1d:4f:57:c6:1e:
         03:ae:cd:66:14:ab:94:22:42:07:ab:db:89:ab:53:13:ad:4a:
         d9:33:9a:11:68:86:da:1f:7b:67:60:9e:0f:1b:45:56:f6:f3:
         ef:89:10:36:33:e9:60:ae:a7:03:ac:54:d3:b2:91:54:59:92:
         95:32:cb:b8:4d:c5:20:f1:35:d6:a5:c6:32:0b:7d:a7:8c:71:
         be:49:bf:1f:24:b0:ed:cc:8e:cf:a4:ca:5e:a1:2b:69:3b:82:
         15:db:bb:0f:19:62:3a:28:fd:c1:5b:38:ed:af:87:ab:b5:0f:
         37:cc:90:61:e5:71:33:5c:ec:41:8a:4a:f4:1e:cc:f6:76:c6:
         08:65:7b:86:4e:01:c7:7f:8d:d6:93:dc:99:5d:19:62:9a:43:
         07:a7:95:88:c1:9f:6b:17:73:17:57:88:77:4d:e7:3c:c8:fb:
         2f:c5:74:b9:3f:b1:60:dc:a4:ce:94:d8:78:4c:45:0c:b0:04:
         75:1a:99:35:c4:df:e2:8a:93:1b:9a:76:3d:1d:27:0c:1e:74:
         be:8e:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----