Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft
File:                     CC2B47BFD397E66019550C83BF1B56353173A0CB.mft (raw, json)
Hash identifier:          ryx46fZLbfa0mpcsY0kLeNWdGju9we41C9q4RLwYLAE=
Subject key identifier:   39:DF:F3:99:B4:6F:F2:E1:DD:6C:A6:AD:C1:77:79:D8:D9:DE:D2:E5
Authority key identifier: CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB
Certificate issuer:       /CN=CC2B47BFD397E66019550C83BF1B56353173A0CB
Certificate serial:       18B91C519B51670DD5EFED0B699122124B1954D7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft
Manifest number:          87
Signing time:             Mon 21 Oct 2024 07:49:42 +0000
Manifest this update:     Mon 21 Oct 2024 07:44:42 +0000
Manifest next update:     Tue 22 Oct 2024 11:01:42 +0000
Files and hashes:         1: 326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (hash: PERd4VmCi6mzxYUGdk3Lcmsp5CKw9IJNVRR0bLNOLMg=)
                          2: CC2B47BFD397E66019550C83BF1B56353173A0CB.crl (hash: 5pzv2AZtBNCpRo03n+AAffSSaEeSl6Jt0RcYMJcKHV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b9:1c:51:9b:51:67:0d:d5:ef:ed:0b:69:91:22:12:4b:19:54:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC2B47BFD397E66019550C83BF1B56353173A0CB
        Validity
            Not Before: Oct 21 07:44:42 2024 GMT
            Not After : Oct 22 11:01:42 2024 GMT
        Subject: CN=39DFF399B46FF2E1DD6CA6ADC17779D8D9DED2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:7d:f6:d1:1d:fe:19:e0:f3:4f:77:79:62:
                    ea:97:d9:88:1b:2c:25:81:60:28:38:21:be:53:bd:
                    36:14:dc:ae:91:af:71:f0:72:6f:ac:05:48:ec:12:
                    dc:d0:64:b4:03:d5:86:d9:6a:01:62:27:e3:28:11:
                    3d:87:44:c1:5c:3d:c4:dd:03:5b:ea:0b:96:ce:04:
                    63:d8:1c:5b:f6:97:c0:09:92:d5:84:27:8c:0f:a9:
                    30:73:2e:e7:f0:47:94:07:5b:a2:8d:0d:fa:cd:38:
                    ef:05:f8:27:5e:28:c3:1b:53:3e:38:19:05:af:22:
                    1d:08:19:b6:d3:8e:87:ee:3a:bd:af:1d:5f:44:44:
                    3d:32:fe:c8:47:e9:60:49:73:4f:32:ce:99:96:e4:
                    89:31:d3:97:92:97:85:61:65:d5:67:4e:30:8a:19:
                    95:64:85:61:c0:c8:63:1e:8f:e2:2e:c9:64:e4:33:
                    84:d5:a2:58:fd:3c:ba:4c:2b:b9:57:10:fe:a1:8a:
                    62:5d:94:f3:49:8d:9f:db:9b:d0:a1:82:e0:37:f2:
                    56:59:7f:fd:89:50:23:a8:2b:c4:8f:cf:a7:c5:11:
                    21:c2:fd:67:84:5d:0e:20:0c:f7:73:07:25:35:ae:
                    a9:38:86:14:23:1a:2f:5c:c0:63:45:e5:83:aa:bc:
                    72:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DF:F3:99:B4:6F:F2:E1:DD:6C:A6:AD:C1:77:79:D8:D9:DE:D2:E5
            X509v3 Authority Key Identifier:
                keyid:CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ab:a1:43:80:b3:1b:e6:0c:80:93:54:ad:8f:4c:88:e9:e5:
         dd:a1:40:75:e1:e2:36:b9:42:a8:ff:08:da:5e:06:f7:c4:ac:
         6c:15:8e:62:49:7d:9c:07:e1:71:41:a6:f7:d0:6e:a0:f5:10:
         a9:6a:90:70:db:7f:29:d1:73:ad:a0:a3:16:18:e5:a5:8c:1a:
         f1:8c:92:6f:d3:9c:53:79:ea:65:3f:8a:f2:51:00:66:76:a4:
         ae:f3:bb:26:f2:73:25:31:47:7e:13:e2:14:51:1e:d9:2d:dc:
         7e:d7:45:60:a9:7b:22:95:e8:c8:69:56:1e:82:33:b7:29:7d:
         5d:10:a3:83:c9:c8:07:6d:a9:69:44:2f:2c:8b:79:c3:af:8c:
         77:ed:eb:8e:e6:45:c8:4d:85:3e:ab:97:b9:37:60:05:2c:c1:
         72:37:25:63:64:e8:2a:26:02:37:75:28:d3:d9:59:6a:d7:58:
         14:40:ae:f0:93:60:f1:50:2f:f8:2e:93:2a:88:7b:07:b8:41:
         5a:59:8a:b3:36:13:a2:06:8b:e1:72:a2:b1:1a:4c:9c:b4:fc:
         00:a1:2b:a8:96:cb:42:df:70:ae:4e:70:f6:aa:0d:4f:0e:a5:
         ee:d6:f6:2b:54:42:52:7c:7c:69:7b:ec:3c:8c:a7:8c:41:cb:
         00:f9:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----