Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.mft
File:                     5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.mft (raw, json)
Hash identifier:          VHPaFfgLWh8i0B0t1bB8DhqId17MsDncXif9CX8+ouE=
Subject key identifier:   F5:99:0E:1B:07:AB:EB:4E:20:4A:46:F9:FD:1C:84:D8:7B:C4:77:DE
Authority key identifier: 5B:14:75:6F:B1:A4:B4:48:55:41:E6:6E:3D:F5:DE:9C:C1:69:0F:58
Certificate issuer:       /CN=5B14756FB1A4B4485541E66E3DF5DE9CC1690F58
Certificate serial:       739E229D2A8029D20C227009341D35945A2DB369
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.mft
Manifest number:          03
Signing time:             Fri 21 Apr 2023 03:34:08 +0000
Manifest this update:     Fri 21 Apr 2023 03:29:08 +0000
Manifest next update:     Sat 22 Apr 2023 03:36:08 +0000
Files and hashes:         1: 323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa (hash: DPJbpdJOCz0ZWXqx5c9cNSuDtZr4sZFcr7glLLCGqBs=)
                          2: 323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa (hash: V4oTI+GlVk0KMsWwXYO+q5EWAiUYe0BdEQP2MO7MhYE=)
                          3: 5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.crl (hash: GaR73SNSrWDhhxAha1n1GMSZoBxPjyDKlU1wcO8YJeg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9e:22:9d:2a:80:29:d2:0c:22:70:09:34:1d:35:94:5a:2d:b3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B14756FB1A4B4485541E66E3DF5DE9CC1690F58
        Validity
            Not Before: Apr 21 03:29:08 2023 GMT
            Not After : Apr 22 03:36:08 2023 GMT
        Subject: CN=F5990E1B07ABEB4E204A46F9FD1C84D87BC477DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:3a:2c:65:87:02:ea:17:a9:0e:27:55:af:
                    b4:57:3d:f7:71:bc:fa:6d:87:d3:a2:60:37:03:0a:
                    c5:41:e6:e4:80:9b:8d:f8:8b:00:32:93:98:ed:b2:
                    f8:36:bc:99:3f:0a:bb:8c:74:0a:6a:cc:e3:26:94:
                    5d:c8:d0:d3:a4:2e:78:a2:fe:c5:da:2e:b4:77:c6:
                    bd:81:96:16:ef:16:49:c8:71:0d:83:c0:c1:8b:7c:
                    2f:57:f1:6f:4b:99:80:f6:84:e5:46:ea:c3:99:6d:
                    f9:06:7a:06:93:65:f5:ce:e0:0e:4b:61:89:4e:3d:
                    45:6c:37:6d:3f:e6:e0:da:14:1c:64:4b:1d:97:d3:
                    9a:21:41:98:3c:71:0a:52:fa:03:bc:a4:d2:ad:56:
                    c4:da:66:42:b8:74:e8:5b:7f:e2:d1:ba:ea:37:4e:
                    2f:8b:7e:ee:ef:67:f7:6a:9f:a3:d1:8c:4a:38:33:
                    67:8b:7d:12:eb:1f:5d:62:75:3c:4c:c8:c8:59:bc:
                    be:2b:bf:6b:73:19:79:e4:f0:ca:db:59:0a:73:6f:
                    e9:90:7d:64:eb:36:bd:29:c6:9f:f0:36:76:1b:e8:
                    35:34:be:5d:f3:8f:a6:ab:0f:5f:83:ca:07:e8:1a:
                    65:0e:2b:1a:ec:6b:47:6b:23:ef:e0:9d:76:a7:f1:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:99:0E:1B:07:AB:EB:4E:20:4A:46:F9:FD:1C:84:D8:7B:C4:77:DE
            X509v3 Authority Key Identifier:
                keyid:5B:14:75:6F:B1:A4:B4:48:55:41:E6:6E:3D:F5:DE:9C:C1:69:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:80:e9:41:46:1a:89:c3:25:98:ac:13:5c:da:fa:e9:f7:3f:
         5c:63:17:02:e4:80:aa:93:f9:89:13:38:0c:34:d1:ca:33:b7:
         91:2a:fa:42:76:1f:c5:f3:de:24:db:d6:24:af:b3:2a:7c:1f:
         c4:92:54:88:9d:6e:ab:45:5b:38:78:af:db:50:25:a8:87:81:
         d7:f4:3a:94:46:cf:aa:d8:44:3e:c4:c5:a0:1a:ef:df:a3:fa:
         59:a7:51:28:41:da:1f:d6:2a:03:ca:22:d6:4f:c7:f2:41:80:
         fb:db:6a:95:4e:91:74:cd:65:06:07:cc:72:67:da:c7:a8:85:
         6c:59:6b:d7:be:0f:e6:6a:1d:3a:c7:9a:cb:56:c8:e4:8c:5b:
         0d:45:d5:8b:8d:71:28:70:d3:af:2e:f2:ef:c1:a9:4e:f9:83:
         8a:36:31:4a:41:18:29:f5:a0:7c:86:dd:06:fe:b9:d4:b1:22:
         07:2c:b1:73:69:53:ec:bf:bb:c1:eb:cf:b0:6b:8e:5d:55:40:
         dd:d2:38:c4:51:1d:ca:66:7b:bf:42:83:f1:9e:49:db:06:a6:
         eb:59:03:e2:f2:56:1c:23:ff:51:de:0b:44:21:1f:3b:e4:f4:
         e0:2a:9d:a2:30:0a:7e:f6:61:0c:26:d4:18:ae:a4:2b:47:25:
         71:d7:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----