Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft
File:                     0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft (raw, json)
Hash identifier:          MNREMhLGzCVYfeqws4bszsbpy3ss9kMti/G4J/M71zk=
Subject key identifier:   85:D8:42:59:0C:8D:D6:2E:7A:39:6D:5A:01:C8:06:52:1E:BE:66:AF
Authority key identifier: 0C:D1:6D:92:EA:6E:26:59:AB:C9:7A:5D:AD:0B:19:96:25:CC:CD:3E
Certificate issuer:       /CN=0cd16d92ea6e2659abc97a5dad0b199625cccd3e
Certificate serial:       14B345F5276D6F88D764083F51C4D5C24A7D4769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNFtkupuJlmryXpdrQsZliXMzT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft
Manifest number:          0365
Signing time:             Tue 26 Dec 2023 20:00:56 +0000
Manifest this update:     Tue 26 Dec 2023 19:55:56 +0000
Manifest next update:     Wed 27 Dec 2023 21:35:56 +0000
Files and hashes:         1: 0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.crl (hash: S/KhI8zfsfACc1wSWm6D7r0Ol80fpZxzsQuMG3O91Ys=)
                          2: 3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa (hash: Xw3PjbTZBGhlTwh2XRFCjhx47OoYE3ghOpOT1CF18Vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b3:45:f5:27:6d:6f:88:d7:64:08:3f:51:c4:d5:c2:4a:7d:47:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd16d92ea6e2659abc97a5dad0b199625cccd3e
        Validity
            Not Before: Dec 26 19:55:56 2023 GMT
            Not After : Dec 27 21:35:56 2023 GMT
        Subject: CN=85D842590C8DD62E7A396D5A01C806521EBE66AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:79:fd:c5:50:c1:4c:a0:78:a4:5e:d8:8e:
                    5d:ba:21:5e:62:03:66:d8:ba:e3:d5:2c:94:32:94:
                    07:3c:8e:3e:06:71:7d:90:03:a5:6d:f0:9d:58:b0:
                    69:7b:df:b4:59:db:02:3d:8e:8b:3d:d5:e3:3f:75:
                    b6:28:8f:20:1a:65:04:e8:3c:e5:7f:37:f4:7b:f4:
                    e9:9a:25:7a:db:05:c4:e3:fc:26:b6:cc:26:37:92:
                    32:13:0c:5a:13:ad:09:60:27:54:1b:dd:cc:52:c2:
                    8e:f0:8e:27:1f:25:15:55:d9:f1:05:2a:eb:b8:63:
                    7c:d5:42:10:eb:70:9f:ce:4a:10:28:6f:55:84:5f:
                    b0:63:b1:66:62:ff:8f:8d:92:40:b0:8c:e9:4e:24:
                    d2:f4:05:9b:aa:11:bc:df:eb:b3:64:09:74:5d:5d:
                    12:d0:bf:23:f5:e1:d8:e8:c4:be:47:fd:b2:cd:de:
                    52:e2:f1:2f:ae:4d:5f:f9:a6:99:88:26:18:a6:64:
                    b6:03:9c:91:56:5d:5c:81:27:ba:5f:3c:57:e2:07:
                    db:05:e0:9b:3e:a9:67:d2:ea:c1:5c:c0:99:9b:30:
                    af:f8:4d:54:49:4d:ea:22:19:64:8d:0c:36:97:0d:
                    2d:db:6b:94:91:e8:e4:32:af:87:1d:be:9c:aa:31:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D8:42:59:0C:8D:D6:2E:7A:39:6D:5A:01:C8:06:52:1E:BE:66:AF
            X509v3 Authority Key Identifier:
                keyid:0C:D1:6D:92:EA:6E:26:59:AB:C9:7A:5D:AD:0B:19:96:25:CC:CD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNFtkupuJlmryXpdrQsZliXMzT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:7e:75:ba:c1:91:55:81:1a:d1:06:6a:3e:51:37:29:af:14:
         0d:6f:e8:9a:38:3b:32:b1:e8:97:30:b7:7b:30:97:0f:f9:8c:
         4c:e8:c6:37:0d:88:07:7d:a1:f6:15:11:74:b2:b3:21:7c:b8:
         26:6e:55:65:65:e2:03:ed:61:04:5b:11:48:dc:78:94:3d:f3:
         5a:c5:61:b5:db:ec:1d:6b:fc:21:52:22:2d:4f:d4:84:3c:55:
         8f:6e:20:39:4d:e5:47:35:66:0a:0d:44:7f:26:aa:d4:27:ac:
         7e:92:22:ff:95:9d:4b:b3:cd:49:24:cc:6b:cc:49:92:ac:3f:
         52:8c:d3:a6:2d:58:aa:ab:9d:d5:39:65:6a:f8:86:87:0d:70:
         ba:d7:d0:90:81:e9:b1:26:17:82:7a:90:76:2a:dd:31:ce:89:
         55:e1:e9:b7:09:ee:d1:77:2f:8a:89:5b:06:c0:aa:02:ab:e2:
         ca:81:3e:35:50:e4:5c:b0:41:54:46:5c:f3:a6:7d:8e:4f:8e:
         8b:6b:36:ee:11:47:2e:aa:fd:9e:7b:00:0e:21:3c:46:ef:39:
         32:97:7b:55:50:ca:d6:14:ad:a3:53:1d:f6:7a:6a:c0:3a:b1:
         23:e5:e5:d7:96:ad:9b:1a:28:ec:ca:6e:20:f9:a2:16:c6:71:
         7a:bb:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----