Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/1/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.mft
File:                     B01C2D3B557A6A01197FCA361DDD36CD39121CB8.mft (raw, json)
Hash identifier:          bTHYCvtIvU3J3GZfXfJ5t3F3lwb89gMu/a8wjWjtXJw=
Subject key identifier:   FE:70:42:77:74:C7:94:C4:9E:29:3C:8B:99:43:1A:39:3E:56:50:DC
Authority key identifier: B0:1C:2D:3B:55:7A:6A:01:19:7F:CA:36:1D:DD:36:CD:39:12:1C:B8
Certificate issuer:       /CN=B01C2D3B557A6A01197FCA361DDD36CD39121CB8
Certificate serial:       2EE258F5F0BBBAB280C3379C1B330470A427B462
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/1/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.mft
Manifest number:          04
Signing time:             Sat 25 Nov 2023 08:42:53 +0000
Manifest this update:     Sat 25 Nov 2023 08:37:53 +0000
Manifest next update:     Sun 26 Nov 2023 10:37:53 +0000
Files and hashes:         1: 326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa (hash: 250NNmMsymWSn9B41u3rhwEZ8xYULD9c6+jzc5STqi4=)
                          2: 326130353a646663313a393162393a3a2f34382d3438203d3e20323030333531.roa (hash: D0bGtXcAVhQogBj7TtJ1ZurXQfPTKqB4gD20X1WE8qE=)
                          3: 326130363a396638313a313030303a3a2f34302d3430203d3e203437323732.roa (hash: J5K9gjdeS2YCYUZ/rR9BY6ilBhzXnVNDOhQryqyhOVo=)
                          4: B01C2D3B557A6A01197FCA361DDD36CD39121CB8.crl (hash: YrjJMU/BD8rWajnWODgRWaRAew2Eba6OUDgBY1QQ3RE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e2:58:f5:f0:bb:ba:b2:80:c3:37:9c:1b:33:04:70:a4:27:b4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01C2D3B557A6A01197FCA361DDD36CD39121CB8
        Validity
            Not Before: Nov 25 08:37:53 2023 GMT
            Not After : Nov 26 10:37:53 2023 GMT
        Subject: CN=FE70427774C794C49E293C8B99431A393E5650DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:3c:ff:03:02:b3:a6:08:c6:39:f9:71:e0:
                    04:03:26:fc:05:80:fd:cd:e9:91:94:08:c2:52:b8:
                    bf:93:29:8a:e4:b9:b5:ff:61:88:8c:3b:a8:ba:0c:
                    58:5f:75:84:e5:da:29:b1:41:4b:ef:08:b1:c1:0d:
                    08:fb:7b:4a:e2:61:1b:5e:45:68:36:77:48:94:21:
                    b3:ba:b9:c6:60:1c:74:f6:bc:e4:13:09:61:ca:3b:
                    cf:76:16:5b:8a:79:c9:7f:76:5a:33:5d:e4:25:6d:
                    f4:b3:52:40:ac:9d:27:a4:74:fe:7d:70:01:ce:39:
                    fc:fa:43:11:ed:b1:56:40:15:de:a1:cc:20:27:63:
                    66:36:d8:82:fb:29:5f:38:7c:8a:84:32:07:b9:a0:
                    c1:c4:f8:b1:4d:26:9c:9d:37:d5:77:4a:aa:98:02:
                    bc:c0:e1:4d:93:43:8a:b6:f7:3c:9b:2c:50:00:92:
                    52:27:d1:31:43:25:e2:f8:75:6b:25:39:78:27:7f:
                    a9:47:8a:e2:f6:11:62:52:c7:82:d9:42:41:52:0e:
                    d8:8b:76:14:d7:42:9f:c6:be:a3:96:c7:8c:4c:0d:
                    21:c4:01:9b:26:a5:1e:70:a0:6f:18:63:bd:0e:59:
                    e7:59:0c:20:d2:04:ff:93:95:f5:6b:e1:b2:3d:15:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:70:42:77:74:C7:94:C4:9E:29:3C:8B:99:43:1A:39:3E:56:50:DC
            X509v3 Authority Key Identifier:
                keyid:B0:1C:2D:3B:55:7A:6A:01:19:7F:CA:36:1D:DD:36:CD:39:12:1C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/1/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/1/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:76:83:5f:4b:b8:3e:ff:d8:3a:a0:8c:ce:52:c6:61:de:ac:
         17:d8:b8:23:6a:18:15:46:72:dd:f5:ed:eb:e9:74:8e:cd:2e:
         b9:fc:e4:d4:5f:12:48:fe:e2:95:86:9d:2d:8b:6b:fb:a6:b8:
         38:72:2c:d7:94:9f:c9:25:d8:b2:c1:3a:f1:7d:7f:0a:43:67:
         e2:9b:40:af:e0:69:43:57:59:69:9b:06:f9:b7:2b:a5:f2:72:
         14:29:c8:68:9c:fc:88:b0:a6:17:01:b0:bb:0e:cf:68:8d:28:
         a1:b6:52:90:ed:09:5c:bb:d9:75:45:d9:76:d7:08:9b:b0:27:
         bd:b2:80:81:4a:1c:35:a6:7b:29:4b:ed:03:92:84:db:0e:59:
         d6:6a:0b:8d:f4:77:58:de:0d:7a:50:66:af:b0:cd:41:ab:92:
         46:8c:a9:78:1e:99:f2:35:6e:73:a0:0e:27:30:e4:76:a7:10:
         c5:31:8f:68:0f:c4:56:c2:9d:d7:15:b3:2d:c2:10:4b:03:bf:
         74:e3:56:15:ea:78:3b:2f:c1:6e:f4:69:d9:83:32:1d:cf:0b:
         6d:bf:e5:b3:f1:58:4d:e0:8c:f3:c8:92:98:2d:83:b2:11:cb:
         c1:13:c7:d8:34:f9:0b:87:a3:19:9f:7a:4d:64:4a:de:36:fd:
         52:52:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----