Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.mft
File:                     ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.mft (raw, json)
Hash identifier:          J109F4f8NHyMsCK/I7PXwX3W8xZX7S4OtdbbDf8xXko=
Subject key identifier:   70:37:52:F6:01:96:84:B3:21:80:6F:7D:7E:C7:F2:DB:0C:D7:34:26
Authority key identifier: AD:BD:0E:EE:5A:7B:09:4B:58:66:AA:5D:A8:44:FF:80:D2:4C:EF:FC
Certificate issuer:       /CN=adbd0eee5a7b094b5866aa5da844ff80d24ceffc
Certificate serial:       40A178CDFE9FB8B91558AFBFE059CD745520367E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rb0O7lp7CUtYZqpdqET_gNJM7_w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.mft
Manifest number:          0531
Signing time:             Thu 21 Dec 2023 16:50:40 +0000
Manifest this update:     Thu 21 Dec 2023 16:45:40 +0000
Manifest next update:     Fri 22 Dec 2023 17:17:40 +0000
Files and hashes:         1: 33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa (hash: 5uuO6zWPaY4Ee18cVuXEugAXxR+J43eKU6BYJw2gjtI=)
                          2: ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.crl (hash: TGce3QnBWhBH7fC1pUQb61v9xdVBw32xAunOxYUhWnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a1:78:cd:fe:9f:b8:b9:15:58:af:bf:e0:59:cd:74:55:20:36:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbd0eee5a7b094b5866aa5da844ff80d24ceffc
        Validity
            Not Before: Dec 21 16:45:40 2023 GMT
            Not After : Dec 22 17:17:40 2023 GMT
        Subject: CN=703752F6019684B321806F7D7EC7F2DB0CD73426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:36:ae:8a:59:49:13:cc:ea:6a:37:e0:41:
                    c4:e2:b0:f4:0d:0f:6b:79:31:e9:22:fd:5d:1e:f5:
                    6b:e8:49:43:80:6f:02:c1:80:73:5b:34:42:d9:48:
                    1b:97:87:52:04:d9:2d:0d:5f:e0:7d:42:33:87:a0:
                    37:c0:6e:d9:d8:75:6f:1b:95:9c:76:1a:f3:75:6c:
                    16:54:b2:cd:fb:8e:c0:4e:05:17:49:c7:e7:99:f9:
                    5d:95:b0:2e:d7:cb:0b:35:d2:f0:85:f1:04:04:85:
                    a0:94:61:26:8c:92:0e:0e:b5:d9:29:b6:db:23:6c:
                    d0:02:e6:4b:2e:19:af:33:0d:5a:c0:90:52:03:77:
                    6a:c3:c7:c2:9f:0e:1a:a2:25:33:b6:34:8a:f2:03:
                    08:2d:93:c9:eb:13:9b:bb:03:1c:42:a3:5a:ec:bd:
                    50:ac:39:92:b1:44:9d:c4:46:df:39:f8:dc:79:72:
                    9f:47:e9:41:68:7e:47:54:25:8a:99:4e:89:89:f2:
                    db:58:d2:d6:3c:d9:dd:1d:83:32:e6:b6:0f:8c:e8:
                    5b:f0:11:60:99:fc:71:3d:d7:bb:6d:f2:a5:cc:1f:
                    40:9a:40:18:4f:db:d1:81:c4:bf:2a:35:bf:a9:9c:
                    a9:93:3a:31:e4:ee:a4:14:83:89:9b:52:f6:7e:e0:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:37:52:F6:01:96:84:B3:21:80:6F:7D:7E:C7:F2:DB:0C:D7:34:26
            X509v3 Authority Key Identifier:
                keyid:AD:BD:0E:EE:5A:7B:09:4B:58:66:AA:5D:A8:44:FF:80:D2:4C:EF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb0O7lp7CUtYZqpdqET_gNJM7_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:40:04:e4:69:54:d0:7c:f6:64:eb:11:57:d3:1b:2c:90:6a:
         e3:eb:14:69:a2:67:89:77:40:ea:98:5e:f4:c9:85:63:ce:56:
         97:0a:0e:6b:75:63:fe:ef:2e:60:9b:4d:2a:63:7b:0c:5d:40:
         cc:0c:a8:80:b5:f0:eb:81:29:d4:b1:62:5a:c2:0c:ce:fd:18:
         c5:c2:29:f0:5e:01:25:8e:cf:bf:c7:ab:c9:bd:f1:54:31:71:
         93:df:8e:49:09:f9:80:64:a0:78:a0:ec:fe:24:b6:25:46:a0:
         97:48:23:6d:51:bc:7f:f3:d6:b6:38:30:f2:74:99:85:51:17:
         17:8c:7b:e3:a3:76:db:69:33:16:be:9f:ea:cc:e4:1a:35:ec:
         c9:e4:e4:9a:9b:3a:09:45:1c:fd:c0:96:86:04:91:6e:c4:f2:
         02:31:74:d0:83:06:c2:3b:c9:44:92:48:35:fb:72:0b:10:3b:
         4b:71:c4:06:f1:a0:e1:f7:6d:72:a0:91:0c:4d:c6:fe:a7:10:
         47:bd:07:00:66:70:e7:a3:ec:2b:8c:5b:3e:4d:c4:08:67:b0:
         27:71:83:52:4d:fc:74:b6:c0:23:0a:9a:43:23:2a:ef:da:ea:
         bb:0b:54:b0:1c:35:54:36:6b:f2:fb:a0:b8:48:81:2d:a4:9a:
         85:08:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----