Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft
File:                     DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft (raw, json)
Hash identifier:          84RD3pYK4pQbDBV5v07fKooo/kpu7PqfhoYt9uuYUKM=
Subject key identifier:   43:D3:C2:5D:8F:6B:2A:E3:7A:90:A6:B2:C4:E6:0A:EA:AC:F0:89:7F
Authority key identifier: DA:7D:DC:9D:80:8D:F9:A1:08:EC:0C:FC:19:34:C7:43:04:8E:99:19
Certificate issuer:       /CN=da7ddc9d808df9a108ec0cfc1934c743048e9919
Certificate serial:       7DBE5D070E95437FC03F4D48874B0795BA4D7C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n3cnYCN-aEI7Az8GTTHQwSOmRk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft
Manifest number:          0367
Signing time:             Tue 26 Dec 2023 20:00:57 +0000
Manifest this update:     Tue 26 Dec 2023 19:55:57 +0000
Manifest next update:     Wed 27 Dec 2023 22:15:57 +0000
Files and hashes:         1: 39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa (hash: JI07yNIjyqPEzS+ZGMTvALFI8KsPLmedb46hnmliVOA=)
                          2: DA7DDC9D808DF9A108EC0CFC1934C743048E9919.crl (hash: oI/E+xjU8DDgb/Q+PD/rhdFtL1/sl9UI1he+7J7/BII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:be:5d:07:0e:95:43:7f:c0:3f:4d:48:87:4b:07:95:ba:4d:7c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7ddc9d808df9a108ec0cfc1934c743048e9919
        Validity
            Not Before: Dec 26 19:55:57 2023 GMT
            Not After : Dec 27 22:15:57 2023 GMT
        Subject: CN=43D3C25D8F6B2AE37A90A6B2C4E60AEAACF0897F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:f2:07:c1:80:79:3a:98:30:29:ca:b1:b5:
                    dc:56:21:e5:99:b3:17:3d:9d:0f:93:b3:e5:d5:e0:
                    a3:dd:1f:57:18:0d:65:75:37:dc:c8:9b:c8:7e:cc:
                    63:3b:cd:35:9e:5d:1d:09:f7:ff:97:f7:45:f7:de:
                    a5:b0:ef:6a:99:65:1b:96:bc:c3:aa:90:17:58:e1:
                    93:de:ab:7a:e1:2b:5d:e6:93:fd:3f:d8:c5:2f:9f:
                    5f:f3:b5:be:b8:38:e7:0a:86:f7:88:16:8c:94:86:
                    db:0c:5c:76:a7:d2:e6:a4:e6:9e:41:a3:1b:01:1b:
                    6c:dd:9a:34:2c:4f:d5:bd:19:9a:99:bb:59:fb:66:
                    79:36:80:02:03:48:c4:19:cf:35:81:e1:1c:30:0a:
                    bd:69:cc:69:4d:c8:2c:29:d6:74:4c:04:23:f6:ca:
                    17:33:93:b7:c9:10:d1:60:a3:e0:07:78:6a:50:49:
                    b4:d7:d0:ce:65:a8:7e:99:8a:82:6a:96:25:61:91:
                    66:4f:49:69:fc:05:bf:93:5f:8c:22:c2:c3:e2:d7:
                    97:39:7d:6c:15:57:19:af:a7:2d:a7:fe:21:51:da:
                    67:8b:24:74:85:7b:40:1b:1c:87:aa:f7:a7:2c:84:
                    7c:96:78:8e:62:38:52:29:df:95:0a:27:40:77:05:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:C2:5D:8F:6B:2A:E3:7A:90:A6:B2:C4:E6:0A:EA:AC:F0:89:7F
            X509v3 Authority Key Identifier:
                keyid:DA:7D:DC:9D:80:8D:F9:A1:08:EC:0C:FC:19:34:C7:43:04:8E:99:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3cnYCN-aEI7Az8GTTHQwSOmRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:da:5c:68:5e:86:28:13:e2:42:33:89:ff:fa:27:a5:a5:d1:
         c3:db:f8:67:45:63:46:d5:e2:33:64:fd:28:02:37:36:ca:24:
         43:19:0c:74:b3:68:66:af:06:e6:ea:d3:a1:c2:26:9d:0f:a0:
         b0:7b:86:04:2a:4b:53:33:e8:59:5a:ec:03:f6:4d:98:10:42:
         ff:34:72:d4:2f:a4:30:e3:6c:07:55:bf:3d:36:78:50:ea:f8:
         d6:e7:f6:ab:26:ea:2d:24:4f:61:40:bb:f5:e7:4a:2f:ed:8f:
         22:11:7e:cc:44:d1:74:f2:49:a9:5b:a8:52:a1:f0:a2:9f:5a:
         d9:d0:30:7f:4f:43:52:d3:4e:65:62:d8:ba:df:13:4e:6f:a8:
         f4:83:a9:f8:0b:ad:35:f9:2a:85:22:cf:fe:5f:0a:6a:54:21:
         01:56:fb:7e:d2:b0:73:1f:af:7b:c4:96:07:62:3d:82:07:cf:
         c6:af:88:f3:e9:6e:ce:a8:77:68:a4:6b:09:8c:d7:f4:7b:51:
         5e:b6:f1:c8:1f:89:f4:7a:dc:06:04:f5:e3:79:42:a5:c0:a4:
         7c:d9:46:ed:5e:3e:36:da:55:dc:ad:87:77:00:89:7c:8f:a8:
         3b:4f:9e:3b:f9:d6:6e:5d:8f:b8:88:70:04:de:78:40:ef:90:
         6e:76:d3:90
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfb5dBw6VQ3/AP01Ih0sHlbpNfF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGE3ZGRjOWQ4MDhkZjlhMTA4ZWMwY2ZjMTkzNGM3NDMw
NDhlOTkxOTAeFw0yMzEyMjYxOTU1NTdaFw0yMzEyMjcyMjE1NTdaMDMxMTAvBgNV
BAMTKDQzRDNDMjVEOEY2QjJBRTM3QTkwQTZCMkM0RTYwQUVBQUNGMDg5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1PIHwYB5OpgwKcqxtdxWIeWZ
sxc9nQ+Ts+XV4KPdH1cYDWV1N9zIm8h+zGM7zTWeXR0J9/+X90X33qWw72qZZRuW
vMOqkBdY4ZPeq3rhK13mk/0/2MUvn1/ztb64OOcKhveIFoyUhtsMXHan0uak5p5B
oxsBG2zdmjQsT9W9GZqZu1n7Znk2gAIDSMQZzzWB4RwwCr1pzGlNyCwp1nRMBCP2
yhczk7fJENFgo+AHeGpQSbTX0M5lqH6ZioJqliVhkWZPSWn8Bb+TX4wiwsPi15c5
fWwVVxmvpy2n/iFR2meLJHSFe0AbHIeq96cshHyWeI5iOFIp35UKJ0B3BdczAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQ9PCXY9rKuN6kKayxOYK6qzwiX8wHwYDVR0j
BBgwFoAU2n3cnYCN+aEI7Az8GTTHQwSOmRkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8yMjMvREE3RERDOUQ4MDhERjlBMTA4RUMwQ0ZDMTkzNEM3NDMwNDhFOTkx
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJuM2NuWUNOLWFFSTdBejhHVFRI
UXdTT21Say5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIyMy9EQTdEREM5RDgwOERG
OUExMDhFQzBDRkMxOTM0Qzc0MzA0OEU5OTE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdpcaF6GKBPi
QjOJ//onpaXRw9v4Z0VjRtXiM2T9KAI3NsokQxkMdLNoZq8G5urTocImnQ+gsHuG
BCpLUzPoWVrsA/ZNmBBC/zRy1C+kMONsB1W/PTZ4UOr41uf2qybqLSRPYUC79edK
L+2PIhF+zETRdPJJqVuoUqHwop9a2dAwf09DUtNOZWLYut8TTm+o9IOp+AutNfkq
hSLP/l8KalQhAVb7ftKwcx+ve8SWB2I9ggfPxq+I8+luzqh3aKRrCYzX9HtRXrbx
yB+J9HrcBgT143lCpcCkfNlG7V4+NtpV3K2HdwCJfI+oO0+eO/nWbl2PuIhwBN54
QO+QbnbTkA==
-----END CERTIFICATE-----