Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.mft
File:                     4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.mft (raw, json)
Hash identifier:          O39b4Q/TUZDTEIQj4kNZn0I9M4fbWfmNMSHQif0JswI=
Subject key identifier:   F5:CE:65:C7:C0:89:FB:6A:FA:41:48:03:40:7F:64:80:28:7B:68:0A
Authority key identifier: 4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1
Certificate issuer:       /CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
Certificate serial:       46E0C6EB33D22A8583ECC1DF25697B025AF15BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.mft
Manifest number:          02DE
Signing time:             Fri 19 Jul 2024 02:46:16 +0000
Manifest this update:     Fri 19 Jul 2024 02:41:16 +0000
Manifest next update:     Sat 20 Jul 2024 06:30:16 +0000
Files and hashes:         1: 4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.crl (hash: FjK9r93dZWA9z+CuhWaoCIBZpFiLW8ENMr8MvIN/TTw=)
                          2: 33312e32342e3235332e302f32342d3234203d3e203136323736.roa (hash: lqqtBBWw7H+BIaFzlu+HUCeNDetSUo6AnfJBO7VI8lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e0:c6:eb:33:d2:2a:85:83:ec:c1:df:25:69:7b:02:5a:f1:5b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
        Validity
            Not Before: Jul 19 02:41:16 2024 GMT
            Not After : Jul 20 06:30:16 2024 GMT
        Subject: CN=F5CE65C7C089FB6AFA414803407F6480287B680A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:bd:0b:bd:25:34:95:dd:32:74:73:a8:a1:
                    d7:ef:6b:4f:a5:87:7c:7a:6c:a6:72:56:4d:f7:c8:
                    59:8c:4b:70:a7:f7:54:04:5f:a8:ed:4b:ca:a0:47:
                    6d:bf:8d:47:a0:57:32:9f:ec:3e:6b:a8:54:d1:7a:
                    7d:4f:04:b5:0c:74:39:10:fc:27:00:f8:2e:2e:7e:
                    bc:57:cd:34:f4:b6:2f:65:60:bd:14:02:d0:48:70:
                    60:fb:66:f9:ab:db:cf:a1:61:ec:99:b4:15:9b:a0:
                    bb:71:1a:ff:50:b5:25:7f:83:6b:69:65:68:69:48:
                    07:6c:ae:21:9c:de:d4:fc:3b:d6:a9:5a:b0:aa:08:
                    1b:e1:e9:f0:d7:04:28:ef:49:a8:eb:d3:a7:0c:6c:
                    85:e9:68:19:9e:e3:0f:9f:11:79:31:45:d2:cb:79:
                    29:43:54:e0:76:67:20:b6:1c:df:91:26:54:f4:7e:
                    34:5f:ca:79:e2:0a:b7:4e:2d:95:04:50:f5:65:a0:
                    4e:d6:51:47:eb:cf:ed:cc:71:25:5b:3b:2c:84:60:
                    8b:21:7f:54:97:70:c3:f2:20:43:20:94:1b:bc:6e:
                    ca:7e:8f:e9:9b:b9:37:9a:7f:21:bc:b9:7a:3b:71:
                    c5:45:1d:57:9f:c0:fb:1a:93:e3:3f:68:ac:ad:ee:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:65:C7:C0:89:FB:6A:FA:41:48:03:40:7F:64:80:28:7B:68:0A
            X509v3 Authority Key Identifier:
                keyid:4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:79:56:2c:b4:31:ac:55:f5:71:85:bf:b8:9d:20:b8:dd:
         0a:f8:c7:ae:91:16:af:5d:8e:27:1f:35:42:55:ed:36:e4:9c:
         bd:b2:48:f5:71:f7:32:ee:95:81:2c:c0:d3:b2:31:64:36:44:
         17:9f:01:ec:a6:06:e7:94:69:76:8f:e0:0c:a1:ae:4e:68:a2:
         ce:44:71:1a:a6:b7:e4:e8:fc:c4:34:62:b3:53:f6:88:1b:49:
         f9:c6:8f:96:d2:c9:e3:42:61:20:a0:36:2c:d4:5b:69:a2:b4:
         56:c5:2f:e1:cb:ba:ba:f9:29:bc:47:c1:fe:d3:44:3f:da:32:
         b8:89:67:47:16:5f:69:dc:48:50:99:19:12:8b:b8:83:96:0c:
         f6:28:8f:f9:d5:18:69:f4:98:97:e2:87:38:38:b4:31:84:5f:
         96:c4:d9:85:44:d4:3c:9e:e7:33:3c:ab:24:3a:c9:00:90:3e:
         a2:2d:73:d8:e4:1f:86:bc:7b:2f:6b:8e:3a:b8:1c:9b:a8:12:
         84:47:cc:72:d8:ad:6b:2b:9d:a6:46:17:31:3e:87:c8:a6:03:
         78:9b:d0:89:89:40:9f:1e:18:ca:8a:36:b2:c1:5b:03:b1:3d:
         f9:0c:88:05:5b:a0:fe:c2:79:57:0a:26:49:2b:7c:e6:2f:74:
         c2:64:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----