Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/59B3F040539A01CDC2A036F403A23CC53A672EB0.mft
File:                     59B3F040539A01CDC2A036F403A23CC53A672EB0.mft (raw, json)
Hash identifier:          upDt23wPA74BG76ywvRvY1ASs1jkts5PRa1I1oHnsCs=
Subject key identifier:   70:F6:96:B2:D9:84:8A:D5:2C:18:27:48:4E:BE:90:57:E9:8D:1D:E8
Authority key identifier: 59:B3:F0:40:53:9A:01:CD:C2:A0:36:F4:03:A2:3C:C5:3A:67:2E:B0
Certificate issuer:       /CN=59B3F040539A01CDC2A036F403A23CC53A672EB0
Certificate serial:       26485E6032F269B9A88790A5B139B5276829F71D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/59B3F040539A01CDC2A036F403A23CC53A672EB0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/59B3F040539A01CDC2A036F403A23CC53A672EB0.mft
Manifest number:          7D
Signing time:             Thu 30 May 2024 08:50:50 +0000
Manifest this update:     Thu 30 May 2024 08:45:50 +0000
Manifest next update:     Fri 31 May 2024 09:34:50 +0000
Files and hashes:         1: 59B3F040539A01CDC2A036F403A23CC53A672EB0.crl (hash: kFLipRtOalE79AsfXLj3GHqGYILsdf5xMEGYwMEfRRE=)
                          2: 326130363a396638313a333230303a3a2f34382d3438203d3e20323135373535.roa (hash: xhIBk0ZVz7ruB5KgdvG6bF6Sm+3FEFCkAqxp4LRS/FY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:48:5e:60:32:f2:69:b9:a8:87:90:a5:b1:39:b5:27:68:29:f7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B3F040539A01CDC2A036F403A23CC53A672EB0
        Validity
            Not Before: May 30 08:45:50 2024 GMT
            Not After : May 31 09:34:50 2024 GMT
        Subject: CN=70F696B2D9848AD52C1827484EBE9057E98D1DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:a7:ff:37:bd:b1:21:a4:b4:68:bc:26:78:
                    11:3f:e2:ea:47:f6:dd:e8:71:46:8f:b2:d8:0a:86:
                    18:2d:ed:97:c0:e6:dc:da:45:74:f2:38:03:f3:51:
                    de:74:09:90:82:49:4c:3e:66:cc:e0:1a:d8:90:72:
                    bf:8e:9f:39:29:ff:cc:15:13:fa:b2:02:28:0e:0f:
                    aa:8a:0a:55:19:2d:6d:34:8b:60:23:dd:b7:c2:60:
                    d8:c1:5e:05:4f:2e:81:23:c8:2e:57:7c:86:40:73:
                    a3:3e:bf:59:88:05:45:42:76:10:29:74:25:27:a8:
                    a8:4d:50:1a:e2:4f:2e:8c:28:23:01:27:d0:5d:5a:
                    aa:c4:3c:cc:48:7c:73:9e:51:81:a0:40:f8:47:ae:
                    fb:ef:5a:16:2c:a0:84:90:12:1b:bd:4f:3b:79:eb:
                    fe:97:f9:87:d5:54:aa:de:71:30:40:9f:fd:43:79:
                    0a:5d:65:35:f3:14:01:c0:c2:0d:df:e7:56:46:9b:
                    62:b5:1d:c4:28:83:e6:ff:d2:ed:14:a0:9c:57:85:
                    44:8a:61:8a:29:6b:a0:69:ac:4e:ce:98:ab:2c:5c:
                    e8:d5:27:32:4f:28:e1:e4:be:23:bb:f4:b0:cb:d0:
                    cf:e6:86:df:bc:2a:3a:74:e8:54:10:e7:54:95:e5:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F6:96:B2:D9:84:8A:D5:2C:18:27:48:4E:BE:90:57:E9:8D:1D:E8
            X509v3 Authority Key Identifier:
                keyid:59:B3:F0:40:53:9A:01:CD:C2:A0:36:F4:03:A2:3C:C5:3A:67:2E:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/59B3F040539A01CDC2A036F403A23CC53A672EB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/59B3F040539A01CDC2A036F403A23CC53A672EB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/59B3F040539A01CDC2A036F403A23CC53A672EB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:90:03:6e:ed:0f:f7:85:58:38:74:49:99:c7:2d:0f:77:49:
         de:15:06:24:f9:59:17:7c:d4:59:5d:30:14:f0:fb:36:49:6a:
         8e:93:7f:32:81:66:ff:e8:25:27:65:39:15:70:d9:10:56:14:
         b8:63:42:12:ea:a9:42:d7:06:0d:63:b2:9c:cf:fd:d5:cc:01:
         6d:80:8f:a0:e3:ea:3d:cc:78:49:4e:03:ec:5e:8b:6b:47:58:
         ef:18:99:99:56:46:be:5b:96:b2:41:2f:39:b2:25:64:19:d3:
         b7:e6:f5:bf:24:50:b5:f3:ae:2a:d7:da:3d:e0:91:95:ea:14:
         28:0e:ce:02:0f:22:69:74:c7:3f:4c:c7:5c:38:c0:b6:fb:9c:
         5a:78:90:55:4d:34:d2:66:94:c7:c6:6d:2e:9b:bb:d3:20:7c:
         b4:12:01:26:88:e9:a8:82:13:00:f5:4b:2e:7d:4b:a0:bb:68:
         14:30:38:bc:0c:83:56:b6:a2:25:5a:3a:c5:be:0b:47:12:e1:
         76:3c:9e:00:f7:1b:f1:ab:a7:93:3f:ae:08:00:4c:34:9d:ec:
         51:a3:be:44:3a:7c:1f:2b:a5:69:56:27:8f:c9:dc:96:9f:de:
         f9:37:20:f8:ec:93:43:b8:f1:06:68:e1:2d:e0:f7:fb:65:d9:
         82:22:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----