Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.mft
File:                     3065BD7B3029FB9B4990D695C6176778CC637436.mft (raw, json)
Hash identifier:          pCj2GOOknWUbYg4BmIKKudoQK9CoEcYEL7PG0w9ZDS8=
Subject key identifier:   BE:5F:3E:7B:19:48:22:07:2A:9E:A1:1A:3C:F4:43:C1:84:8E:07:79
Authority key identifier: 30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36
Certificate issuer:       /CN=3065BD7B3029FB9B4990D695C6176778CC637436
Certificate serial:       617B6FA6936D1F6287F7FA94D6F1D9B336B80819
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.mft
Manifest number:          D9
Signing time:             Mon 17 Jul 2023 02:58:04 +0000
Manifest this update:     Mon 17 Jul 2023 02:53:04 +0000
Manifest next update:     Tue 18 Jul 2023 04:46:04 +0000
Files and hashes:         1: 326130613a363034303a333130303a3a2f34302d3430203d3e203536363535.roa (hash: x4RCGaq5MdjFrRbmbK83wtp+qnbUxko70gzS/Ff9G+g=)
                          2: 326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa (hash: qKI6Iu6aod+CqmEFzdIegMwdzBERHbCDyj5VPBpjNRU=)
                          3: 3065BD7B3029FB9B4990D695C6176778CC637436.crl (hash: d78UJwPysUGB2iKQvvEAZp66hsW/Vzbysj+BDZldR74=)
                          4: 326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa (hash: 8Zw/xxGRjROGxpixfGF1UgaFSyv1oFz9mXuNo49f6Ek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7b:6f:a6:93:6d:1f:62:87:f7:fa:94:d6:f1:d9:b3:36:b8:08:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065BD7B3029FB9B4990D695C6176778CC637436
        Validity
            Not Before: Jul 17 02:53:04 2023 GMT
            Not After : Jul 18 04:46:04 2023 GMT
        Subject: CN=BE5F3E7B194822072A9EA11A3CF443C1848E0779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:44:82:55:e8:c3:45:26:f9:e9:a5:70:93:c0:
                    ec:7f:47:46:2c:25:11:ef:62:fc:4d:0b:eb:25:3d:
                    69:46:6f:73:32:fb:3d:04:b9:ee:b8:bc:05:55:f5:
                    17:7e:86:1e:0f:7d:01:44:83:03:c5:5a:49:25:02:
                    17:64:a3:a0:4d:83:ac:97:2f:bc:66:62:82:cb:82:
                    15:b7:7d:c3:ad:f8:0f:de:86:d3:29:58:ff:4f:71:
                    6b:cb:4b:97:5f:c1:d5:56:3a:3b:b3:62:46:3a:b8:
                    14:ad:bc:ef:f7:7a:25:92:7b:dd:8a:9f:c8:28:bb:
                    56:3d:de:fd:e0:b1:61:b0:08:b5:16:aa:81:23:e9:
                    1b:44:1a:4b:6c:20:5f:78:ad:e5:5e:1b:53:0b:2d:
                    ac:0f:da:28:38:1c:c1:b0:7e:f9:4a:b1:90:ee:8f:
                    2f:d2:15:ff:46:5e:84:a8:29:28:66:d0:30:f5:4b:
                    d4:58:a2:25:fc:94:ab:e8:cb:91:e8:3d:98:8a:a8:
                    ce:cc:84:c5:e5:8b:71:2c:46:e1:9d:6b:64:17:c9:
                    81:83:22:df:2c:0f:4c:bc:1b:de:16:95:f4:97:60:
                    ed:f3:06:d4:96:0f:92:1a:16:12:50:85:aa:bd:d2:
                    54:9d:ec:32:55:de:b5:ca:1e:9b:8b:f8:66:f7:9a:
                    44:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5F:3E:7B:19:48:22:07:2A:9E:A1:1A:3C:F4:43:C1:84:8E:07:79
            X509v3 Authority Key Identifier:
                keyid:30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:39:5a:df:71:8b:aa:ab:3f:bd:b5:f0:96:38:76:73:53:e9:
         4c:17:25:7c:52:c2:32:a8:d0:9b:1a:9c:da:07:29:66:14:d7:
         b7:a9:3b:94:d4:db:34:5a:4c:56:e1:35:51:d7:68:5e:98:4c:
         7a:04:2d:b7:f3:d1:7d:57:86:c3:c1:db:55:f0:12:62:31:ad:
         2d:22:86:e8:cd:e5:49:44:1e:0d:ae:30:f5:da:11:60:de:cf:
         c4:2b:53:ee:38:ae:d8:dd:c8:5f:bf:1e:36:9b:ee:a2:70:6b:
         8d:3b:68:04:a9:6e:1b:97:6b:24:bc:90:5f:a4:27:e6:d0:73:
         c7:19:79:38:ed:75:81:6f:c8:97:d2:7b:89:8e:e8:9d:40:d2:
         03:27:17:fd:dc:41:9a:af:d9:94:4c:d5:43:17:79:3a:f0:dd:
         56:b3:2e:ea:74:aa:5c:82:0a:af:af:9f:42:8e:25:f8:18:e4:
         b3:3d:82:fa:fc:f6:12:ad:80:e0:1b:7d:73:e8:91:87:ae:ec:
         7d:bd:e7:60:49:54:a5:f5:5c:c6:6d:ac:a1:ce:9f:a4:05:6f:
         f1:0d:d3:69:6e:cb:52:76:49:67:12:80:ad:e0:4f:ed:b9:2a:
         1a:31:31:83:11:1b:a1:10:6b:a4:54:5b:0d:f0:b6:5e:13:d5:
         24:e0:8b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----