Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft
File:                     FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft (raw, json)
Hash identifier:          HdE6lElAwzz27qzPLuQq6tVSfhQVmARv9OoyRMVwo7E=
Subject key identifier:   CD:8A:F4:5E:4C:D9:33:0C:41:9F:58:74:91:C1:F9:C6:BA:EF:46:E1
Authority key identifier: FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27
Certificate issuer:       /CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027
Certificate serial:       02FD1159515CD61A9080AEA879C2844C7D510882
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft
Manifest number:          01B3
Signing time:             Tue 24 Dec 2024 20:16:00 +0000
Manifest this update:     Tue 24 Dec 2024 20:11:00 +0000
Manifest next update:     Wed 25 Dec 2024 23:27:00 +0000
Files and hashes:         1: FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.crl (hash: w3jAFZGQIx75FGvGP7ZGR0Xcam4whD/2U81q9b4Rmtg=)
                          2: 326130663a383563313a3336323a3a2f34382d3438203d3e20323135363334.roa (hash: CctXxGwYEMXB41i0QfQsgQyWu/XR8fA8pXG+KuyL2Fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fd:11:59:51:5c:d6:1a:90:80:ae:a8:79:c2:84:4c:7d:51:08:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027
        Validity
            Not Before: Dec 24 20:11:00 2024 GMT
            Not After : Dec 25 23:27:00 2024 GMT
        Subject: CN=CD8AF45E4CD9330C419F587491C1F9C6BAEF46E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:86:41:e5:34:64:ea:b5:50:16:2f:54:6e:
                    c0:d4:97:33:6b:d2:d4:ec:bf:53:01:52:54:9b:5e:
                    e6:dd:46:b9:43:e4:93:a7:bd:bf:a7:4f:dc:6a:61:
                    a8:53:91:6f:d7:f4:75:0f:7b:d8:c5:4f:3c:ec:f8:
                    fd:5b:7c:69:10:94:9c:5b:2e:8e:e1:d9:87:f6:a8:
                    b4:d8:f4:32:32:cc:2a:81:37:cd:8a:0b:34:23:59:
                    67:26:5d:c5:db:03:72:55:15:b3:0d:53:5b:8c:8e:
                    3f:ae:21:80:c0:f5:cd:fc:16:1a:37:75:75:22:02:
                    45:dc:a6:0c:fc:00:01:93:72:f3:28:b8:a8:d3:a1:
                    08:f3:7f:f5:fc:da:67:f7:9d:19:ff:8e:dc:2a:71:
                    28:50:2b:f3:f1:fd:1e:21:7c:5e:06:ce:d3:7d:7d:
                    31:08:cb:e4:85:73:4e:c7:1e:c0:80:57:c8:c1:ec:
                    fd:95:68:e7:46:66:8e:7d:3b:61:22:b4:0c:1a:21:
                    7b:7e:37:67:a0:fd:4b:84:61:59:c4:8c:1d:7f:d7:
                    8c:20:ff:39:28:a0:94:72:1b:a6:fc:17:43:cd:0b:
                    35:0c:9e:93:04:74:fe:89:aa:05:fb:21:e9:e2:03:
                    c2:34:d1:42:9d:9d:b2:57:bf:82:1e:22:92:d1:cc:
                    f9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:F4:5E:4C:D9:33:0C:41:9F:58:74:91:C1:F9:C6:BA:EF:46:E1
            X509v3 Authority Key Identifier:
                keyid:FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:31:4f:e0:a3:ee:9e:60:4e:36:8f:b5:9a:8d:e6:4b:e9:3d:
         4b:4c:41:0b:d0:9e:8d:87:38:e1:d8:f5:f0:60:e0:bc:9a:20:
         55:06:2b:fd:e9:56:25:5b:a8:0c:4e:c6:97:f6:e2:2b:1c:80:
         4b:e0:16:e2:96:51:bf:2f:24:d4:43:91:4a:a6:34:6a:19:f1:
         21:56:f1:2b:f5:57:dd:f3:da:aa:21:b9:41:89:3a:fc:7f:08:
         40:ab:26:3e:42:76:bb:0b:43:76:d7:15:51:0b:ce:30:1f:d2:
         7f:39:e2:d3:2d:78:94:f3:e7:b6:e5:84:9b:c3:08:f7:77:e0:
         9c:40:d3:5c:72:64:8f:ff:97:a3:e1:0b:47:a3:c5:4a:be:4e:
         14:5e:43:f8:49:32:23:f7:a5:af:b7:3c:c6:39:d2:6f:c6:e3:
         05:85:46:0b:73:cb:3e:69:a3:32:93:42:41:ed:d0:c8:c5:e0:
         d2:e6:10:fa:8a:a5:19:94:d0:10:0f:2c:03:77:89:4b:d5:f1:
         bd:81:fc:be:f6:18:14:62:f6:7f:ec:67:bc:09:3a:66:96:74:
         61:61:02:d0:63:b8:ce:16:99:e1:1b:f2:73:f3:c5:b7:7f:24:
         4e:1c:9a:e1:10:1b:f3:1b:bc:4b:a5:3f:7c:b7:fe:f2:91:22:
         e9:64:fa:49
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUAv0RWVFc1hqQgK6oecKETH1RCIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJERjVDODFBMEQ2Rjc5QzNERkI4QjRFREYyOTY2RjM1
MjYwNjAyNzAeFw0yNDEyMjQyMDExMDBaFw0yNDEyMjUyMzI3MDBaMDMxMTAvBgNV
BAMTKENEOEFGNDVFNENEOTMzMEM0MTlGNTg3NDkxQzFGOUM2QkFFRjQ2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzi4ZB5TRk6rVQFi9UbsDUlzNr
0tTsv1MBUlSbXubdRrlD5JOnvb+nT9xqYahTkW/X9HUPe9jFTzzs+P1bfGkQlJxb
Lo7h2Yf2qLTY9DIyzCqBN82KCzQjWWcmXcXbA3JVFbMNU1uMjj+uIYDA9c38Fho3
dXUiAkXcpgz8AAGTcvMouKjToQjzf/X82mf3nRn/jtwqcShQK/Px/R4hfF4GztN9
fTEIy+SFc07HHsCAV8jB7P2VaOdGZo59O2EitAwaIXt+N2eg/UuEYVnEjB1/14wg
/zkooJRyG6b8F0PNCzUMnpMEdP6JqgX7IeniA8I00UKdnbJXv4IeIpLRzPnhAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUzYr0XkzZMwxBn1h0kcH5xrrvRuEwHwYDVR0j
BBgwFoAU+99cgaDW95w9+4tO3ylm81JgYCcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk3NGUyYWYtZWFhYi00ZDc4LThkOTUtMjgzMTQ0ZGRh
OTYyLzEvRkJERjVDODFBMEQ2Rjc5QzNERkI4QjRFREYyOTY2RjM1MjYwNjAyNy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9GQkRGNUM4MUEwRDZGNzlDM0RGQjhCNEVE
RjI5NjZGMzUyNjA2MDI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2M5NzRlMmFmLWVhYWItNGQ3OC04ZDk1LTI4MzE0NGRkYTk2Mi8xL0ZCREY1Qzgx
QTBENkY3OUMzREZCOEI0RURGMjk2NkYzNTI2MDYwMjcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvMU/g
o+6eYE42j7WajeZL6T1LTEEL0J6Nhzjh2PXwYOC8miBVBiv96VYlW6gMTsaX9uIr
HIBL4BbillG/LyTUQ5FKpjRqGfEhVvEr9Vfd89qqIblBiTr8fwhAqyY+Qna7C0N2
1xVRC84wH9J/OeLTLXiU8+e25YSbwwj3d+CcQNNccmSP/5ej4QtHo8VKvk4UXkP4
STIj96WvtzzGOdJvxuMFhUYLc8s+aaMyk0JB7dDIxeDS5hD6iqUZlNAQDywDd4lL
1fG9gfy+9hgUYvZ/7Ge8CTpmlnRhYQLQY7jOFpnhG/Jz88W3fyROHJrhEBvzG7xL
pT98t/7ykSLpZPpJ
-----END CERTIFICATE-----