Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft
File:                     C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft (raw, json)
Hash identifier:          pVldeOyzCoFciFe2G78vbwZtk0DKsDSZwn+yAvHnPnI=
Subject key identifier:   14:08:42:21:9F:D4:81:96:CC:FC:57:21:FC:00:FA:2F:43:3A:D9:ED
Authority key identifier: C0:1B:13:8E:E5:02:88:D5:35:67:AA:C0:D4:D0:6D:2F:86:B3:07:D1
Certificate issuer:       /CN=c01b138ee50288d53567aac0d4d06d2f86b307d1
Certificate serial:       7E3A167D80EE182B929A4B6AA04FD5905AF54FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBsTjuUCiNU1Z6rA1NBtL4azB9E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft
Manifest number:          0540
Signing time:             Tue 26 Dec 2023 20:00:58 +0000
Manifest this update:     Tue 26 Dec 2023 19:55:58 +0000
Manifest next update:     Wed 27 Dec 2023 20:56:58 +0000
Files and hashes:         1: C01B138EE50288D53567AAC0D4D06D2F86B307D1.crl (hash: sN9Z3bK5DR/HGIeJObqNU8uP2it9UFqaghn2iOB7hM0=)
                          2: 36322e332e34352e302f32342d3234203d3e20323031333431.roa (hash: 0A1nVOlJAM7JxtVM0yeJQ1/Obj2HQswUx3RV99RjZmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3a:16:7d:80:ee:18:2b:92:9a:4b:6a:a0:4f:d5:90:5a:f5:4f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01b138ee50288d53567aac0d4d06d2f86b307d1
        Validity
            Not Before: Dec 26 19:55:58 2023 GMT
            Not After : Dec 27 20:56:58 2023 GMT
        Subject: CN=140842219FD48196CCFC5721FC00FA2F433AD9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:33:9e:d0:6a:1a:12:45:75:9a:28:10:36:
                    01:28:7b:71:6e:1d:05:a1:e6:89:49:3b:19:94:48:
                    32:6b:34:3d:19:ea:f0:7c:0c:92:72:07:1b:c8:73:
                    c6:22:e4:0a:e1:dc:47:37:a8:99:1e:77:f4:1a:7d:
                    66:aa:89:0f:f9:26:7f:da:64:92:9b:de:a4:de:3d:
                    e0:44:8c:36:11:17:82:60:29:49:f9:52:6b:0a:5e:
                    59:da:92:aa:7f:09:34:df:4f:ac:e0:64:fd:27:58:
                    97:ca:95:da:8a:8e:e4:86:fa:ee:3f:89:06:50:91:
                    5f:1a:e3:9d:08:00:44:02:4e:35:52:a7:d5:98:e6:
                    98:f1:32:96:23:47:88:ca:68:a5:bf:e1:d4:a1:b7:
                    52:62:c4:c1:45:65:4a:98:be:7c:8d:23:ac:e9:a4:
                    d1:b9:9d:d2:b4:af:fc:46:5d:0e:e2:74:58:c8:10:
                    a6:8d:dc:cb:dd:89:24:b9:d7:7f:fd:58:41:a8:19:
                    d5:c0:ce:65:03:de:8e:48:8b:66:32:bb:9a:db:5d:
                    fc:a9:cc:e0:c9:2f:97:7c:ef:c7:60:4b:a4:33:f0:
                    c4:52:67:e8:c1:a1:9b:1f:41:bd:04:eb:a5:1f:95:
                    60:4c:ec:a0:2f:4f:98:41:48:7b:35:38:eb:2a:26:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:08:42:21:9F:D4:81:96:CC:FC:57:21:FC:00:FA:2F:43:3A:D9:ED
            X509v3 Authority Key Identifier:
                keyid:C0:1B:13:8E:E5:02:88:D5:35:67:AA:C0:D4:D0:6D:2F:86:B3:07:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBsTjuUCiNU1Z6rA1NBtL4azB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:87:40:4d:07:77:16:a2:70:9c:9e:03:04:03:a8:d7:d0:8e:
         45:87:ec:74:5f:6c:ef:18:39:4f:0d:ec:0d:b0:6c:10:70:70:
         b1:75:62:0b:cf:da:ae:7d:e4:b5:da:ac:ee:6c:79:b3:4f:6e:
         99:0f:5c:89:42:37:9f:d0:6f:af:71:9a:de:fd:f4:d7:7c:e2:
         19:dc:29:36:db:e5:0c:63:80:18:39:48:4a:04:23:f0:e5:cb:
         28:cc:23:99:08:0b:f2:d4:8e:9d:03:2d:6c:bf:37:d6:95:83:
         2f:db:3c:b7:9e:fe:91:45:3b:3a:2c:79:3f:46:8b:d3:98:31:
         c4:25:00:73:2d:00:5e:99:d2:66:cb:3c:b5:76:d2:02:a6:8e:
         ac:d7:1b:eb:88:93:f4:bc:69:31:34:b6:d6:70:4c:cb:74:27:
         7e:85:7e:a0:9c:3b:db:d7:57:18:c3:d8:ea:cf:6b:a8:26:c2:
         d4:8e:4c:b8:26:bf:cf:b2:3a:ee:81:19:20:28:8d:bb:61:3b:
         d0:c7:26:6b:03:72:37:38:81:2c:91:aa:00:c8:b0:eb:f2:dc:
         01:6b:8b:55:9b:aa:6d:65:ad:8a:d2:9b:47:26:0b:28:6e:f8:
         06:0f:5e:3d:a4:9a:8b:5c:e5:a8:cb:7e:b7:b3:63:14:74:3c:
         00:4f:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----