Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft
File:                     567688FC99CFF14E0DF7422720EA89CA16377899.mft (raw, json)
Hash identifier:          q7nkYCMppfddRfiM9JrvIpMtTWtqLlmapIC3IuBG+hk=
Subject key identifier:   9B:0E:7E:C1:6D:2D:57:CB:2B:5A:50:11:13:32:30:18:31:29:E3:AB
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Certificate issuer:       /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial:       4B7BE53978D1777755A427AA174FDE3C2F049F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft
Manifest number:          4E
Signing time:             Tue 09 Jan 2024 05:07:44 +0000
Manifest this update:     Tue 09 Jan 2024 05:02:44 +0000
Manifest next update:     Wed 10 Jan 2024 05:30:44 +0000
Files and hashes:         1: 567688FC99CFF14E0DF7422720EA89CA16377899.crl (hash: UHCmTyUQ5afksdtgGCWHh95M0zZ40I9GSoecEq/5bUc=)
                          2: 3137362e3131382e3136302e302f32322d3234203d3e203230343733.roa (hash: SDz+cI5DNmg1rltVw/C96h7yRNZ4t3ftkUryrA7tGbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7b:e5:39:78:d1:77:77:55:a4:27:aa:17:4f:de:3c:2f:04:9f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
        Validity
            Not Before: Jan  9 05:02:44 2024 GMT
            Not After : Jan 10 05:30:44 2024 GMT
        Subject: CN=9B0E7EC16D2D57CB2B5A5011133230183129E3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:b1:06:c0:66:0b:eb:85:1e:47:4d:89:7a:
                    e3:f3:45:6a:dd:47:39:31:74:92:24:d6:90:72:53:
                    01:92:c0:98:5c:7b:0e:23:d5:3d:62:87:21:fb:85:
                    94:dc:73:25:85:5e:33:fd:d3:20:8c:c5:25:f6:c4:
                    ee:48:88:5a:5d:d1:74:c9:08:ee:32:ef:55:c3:fa:
                    39:cf:e9:7a:35:05:70:ad:e9:a9:e7:7e:97:26:d5:
                    a3:99:34:0f:ba:29:8d:73:98:44:c1:8b:8e:67:7a:
                    da:a7:91:12:0f:19:6b:e3:92:e3:5a:c0:04:4b:e7:
                    49:1b:42:94:fa:68:b5:da:d0:92:c0:49:e8:03:71:
                    4f:e1:fa:16:28:80:4e:ee:6f:ed:f8:5a:bd:e2:c8:
                    d4:22:ad:45:18:8a:6c:ca:07:63:9f:0f:9c:fb:07:
                    6b:a5:44:e7:69:11:34:20:01:69:c1:a5:31:1b:af:
                    3b:9a:75:18:ae:76:0a:c4:e2:76:ce:23:75:d7:78:
                    2e:3e:70:cf:66:bd:6e:9b:50:0e:16:9f:19:0c:d7:
                    fe:de:1f:e3:75:e0:ac:e8:ad:1d:6d:a9:b5:bd:99:
                    cc:37:6f:1f:32:5b:72:08:b3:b9:da:1e:50:73:f4:
                    1d:30:da:76:9f:63:be:9b:17:6e:0d:41:1e:db:38:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0E:7E:C1:6D:2D:57:CB:2B:5A:50:11:13:32:30:18:31:29:E3:AB
            X509v3 Authority Key Identifier:
                keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cc:7f:cb:81:fc:d9:c9:3e:6f:34:89:d9:74:1b:f7:f0:b6:
         c7:2e:55:f4:4e:c4:e0:61:01:0f:b0:b2:70:5a:d6:56:d2:17:
         4e:aa:7f:28:b9:75:c3:91:0c:d2:0f:eb:0c:49:93:49:ff:b7:
         42:fb:64:7e:90:56:98:53:f2:60:3c:49:40:89:6a:84:63:dd:
         f4:72:a0:dc:02:3e:1c:2b:1f:f8:63:ed:e6:b2:f3:b1:56:75:
         e5:5d:b5:86:4f:00:b0:ba:52:50:cf:bd:72:d8:48:be:84:42:
         99:eb:d1:f7:2a:c6:f9:43:4f:33:10:31:36:89:a7:12:44:84:
         26:e9:32:a8:76:66:a0:e2:99:94:92:87:78:4d:fa:70:d5:82:
         44:09:8e:c6:d5:32:67:ec:cc:7f:b9:3a:4c:42:22:5f:8f:61:
         93:40:5b:2a:ae:c7:af:a6:8b:58:38:63:a5:a0:ef:4d:3b:f0:
         f5:5e:be:ed:10:0f:6d:99:5c:1b:52:42:f3:57:d4:6a:a6:42:
         7b:7d:9d:b3:35:c5:77:a4:b9:7d:c6:25:ea:83:f9:e1:bc:4c:
         e1:77:d7:f7:b1:89:a4:4c:16:40:58:4d:f1:f4:b8:cd:76:0a:
         f4:ba:61:44:d6:d9:e8:35:4c:be:4e:77:d4:0f:46:4a:b2:92:
         8d:3a:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----