Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/2/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.mft
File:                     3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.mft (raw, json)
Hash identifier:          4XnGzEa06Af0mhT7pFOVdTs0+eecJhrK4oI13q5Nevs=
Subject key identifier:   C5:2C:F6:B6:4B:7C:23:A8:4D:12:9A:7D:93:75:06:E4:12:34:40:E7
Authority key identifier: 3A:87:92:2E:3D:FC:7A:58:61:DC:7C:AF:8C:B7:63:B2:33:E6:EE:7B
Certificate issuer:       /CN=3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B
Certificate serial:       1AA030A27EA3A6F9106F4E4223D6ABDCE6C71EA1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/2/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.mft
Manifest number:          01
Signing time:             Sat 25 Nov 2023 08:43:31 +0000
Manifest this update:     Sat 25 Nov 2023 08:38:31 +0000
Manifest next update:     Sun 26 Nov 2023 12:20:31 +0000
Files and hashes:         1: 3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.crl (hash: JrNXERAiSo33dDROMTKsXC7J+1Ltk4FDfBKnFzRjOi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a0:30:a2:7e:a3:a6:f9:10:6f:4e:42:23:d6:ab:dc:e6:c7:1e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B
        Validity
            Not Before: Nov 25 08:38:31 2023 GMT
            Not After : Nov 26 12:20:31 2023 GMT
        Subject: CN=C52CF6B64B7C23A84D129A7D937506E4123440E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:eb:ee:38:fa:76:4b:3c:6a:98:23:6e:1d:32:
                    f1:6b:71:47:75:eb:38:3e:a0:7b:d8:a7:bf:64:8d:
                    6a:2b:d6:81:11:21:6d:31:b0:68:0e:05:71:85:c9:
                    9e:47:81:23:d3:2a:42:8f:11:f5:ee:1c:70:bb:13:
                    4c:72:25:93:79:bd:de:21:0d:5b:b5:86:b0:1b:a0:
                    93:06:b8:3c:83:25:87:36:be:63:70:1f:d8:31:da:
                    49:60:c9:45:be:eb:a7:f8:27:cc:c8:b6:a5:fd:49:
                    f6:d8:38:b3:91:a3:1a:36:b6:1a:24:a2:2b:e8:00:
                    c1:cf:50:66:86:78:7b:c2:f8:f9:d0:9f:7e:e3:ef:
                    d7:60:e8:a5:b5:4c:5e:ec:0e:4a:88:09:1b:15:b4:
                    f7:ed:8c:c6:65:a2:90:21:17:ab:46:56:15:65:8a:
                    0f:f0:53:36:55:d7:cd:cc:9c:d4:63:08:7c:d1:46:
                    bb:e8:d5:b5:b2:40:b0:f5:07:af:26:e7:74:01:2b:
                    1a:03:b4:e7:f0:19:0a:79:48:7f:ee:38:23:04:7e:
                    39:71:8b:fa:3e:cb:ec:da:2d:42:b9:7d:53:a9:6a:
                    24:11:13:ea:01:7f:87:8f:9e:f9:22:da:7a:58:32:
                    aa:86:b6:12:79:32:11:50:bc:c6:e8:e3:d4:70:62:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2C:F6:B6:4B:7C:23:A8:4D:12:9A:7D:93:75:06:E4:12:34:40:E7
            X509v3 Authority Key Identifier:
                keyid:3A:87:92:2E:3D:FC:7A:58:61:DC:7C:AF:8C:B7:63:B2:33:E6:EE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/2/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/2/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7a:66:2e:e7:21:2a:1b:29:c5:51:14:75:68:d9:b0:20:ec:
         66:ff:e3:12:e1:f2:1a:03:4c:38:b6:03:f2:d2:93:d3:5e:84:
         6a:ed:91:b9:a1:a9:e8:b6:af:53:1f:c5:80:fd:57:7b:98:61:
         3f:c5:e5:cb:f6:41:e0:91:50:65:5a:eb:ab:40:85:fe:0f:d5:
         ca:35:e4:c0:45:ff:3d:78:d2:a8:58:17:8e:56:31:66:45:ed:
         d7:0a:a7:91:40:80:34:3a:66:db:bd:fa:5a:37:45:4b:cb:b2:
         fd:29:0d:15:dc:bd:7e:75:7d:f5:18:51:c3:be:2b:54:82:2c:
         3c:98:85:b0:92:2d:6c:ce:b1:b3:3d:db:a9:7b:e7:95:a6:89:
         93:cc:34:9e:73:ca:b4:fc:8a:a6:90:81:86:8b:88:43:db:6c:
         8d:74:6f:a1:87:2c:ce:5f:4b:7a:3c:2b:3d:49:ea:d1:c3:ee:
         c1:fb:19:05:4a:41:a7:1c:43:59:4f:74:5b:1e:07:ed:e6:a4:
         50:84:b9:05:4b:dd:58:7f:83:ae:6a:36:66:1c:18:8c:de:e3:
         3f:18:15:4a:02:48:50:d5:24:a2:59:22:28:b7:8e:4b:c2:e0:
         c9:8e:5c:87:41:71:32:f0:92:0d:46:59:6b:38:5d:6d:bf:22:
         aa:a0:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----