Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/196/0D53C114D47620FBA73B4780213CA64D15119194.mft
File:                     0D53C114D47620FBA73B4780213CA64D15119194.mft (raw, json)
Hash identifier:          8IqiyLdm9+IPWeyqQnNsM+WMXDXCV13l3220vQHUebw=
Subject key identifier:   05:C1:63:82:09:9A:E0:31:A5:F7:87:E3:E1:42:A4:3D:51:34:D2:CF
Authority key identifier: 0D:53:C1:14:D4:76:20:FB:A7:3B:47:80:21:3C:A6:4D:15:11:91:94
Certificate issuer:       /CN=0d53c114d47620fba73b4780213ca64d15119194
Certificate serial:       13F50CED71D76B435EB99B222832DC6A7A81232D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVPBFNR2IPunO0eAITymTRURkZQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/196/0D53C114D47620FBA73B4780213CA64D15119194.mft
Manifest number:          0545
Signing time:             Tue 26 Dec 2023 20:00:56 +0000
Manifest this update:     Tue 26 Dec 2023 19:55:56 +0000
Manifest next update:     Wed 27 Dec 2023 20:22:56 +0000
Files and hashes:         1: 0D53C114D47620FBA73B4780213CA64D15119194.crl (hash: 0qItr5yhN7TEQxxT6J333TAQXvya7SJTQUP1H7BwY1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f5:0c:ed:71:d7:6b:43:5e:b9:9b:22:28:32:dc:6a:7a:81:23:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d53c114d47620fba73b4780213ca64d15119194
        Validity
            Not Before: Dec 26 19:55:56 2023 GMT
            Not After : Dec 27 20:22:56 2023 GMT
        Subject: CN=05C16382099AE031A5F787E3E142A43D5134D2CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:71:fd:5a:f8:54:13:46:f9:2a:b5:32:2d:
                    59:4d:c9:45:ef:77:a7:3b:cd:03:54:bb:f4:35:01:
                    d9:7d:f0:c2:cc:b9:a5:83:1a:c0:f7:7a:42:81:92:
                    cd:f2:f1:ce:06:51:70:f5:1e:c5:1f:17:2c:bc:16:
                    1d:77:57:d6:87:81:84:d8:f6:35:86:bb:54:73:9f:
                    86:b6:8b:7f:8b:ba:17:06:16:bb:17:2c:92:f5:3d:
                    45:31:0d:78:f9:00:57:bf:bb:49:eb:bd:e3:d5:26:
                    1d:87:94:77:bc:81:86:31:f2:ce:83:f9:c4:98:e0:
                    e9:36:3b:76:dd:21:d3:c3:34:f2:4e:7e:de:f3:ca:
                    29:c2:b6:f7:f0:82:d3:32:20:44:08:da:8a:52:17:
                    6d:9f:63:ec:85:93:2a:01:b3:f8:9d:87:af:0d:f1:
                    86:4d:c3:f2:13:7e:0e:c6:ad:d1:92:c5:9e:3f:b7:
                    38:dc:b9:3a:cc:7e:81:3a:1e:68:32:c6:12:06:88:
                    40:73:e4:66:bf:32:b3:73:64:9c:d8:8b:01:0d:b1:
                    f1:80:01:2e:70:b8:fd:0a:63:f3:10:47:39:1f:43:
                    7f:9f:c6:70:f8:b4:27:87:f2:4b:37:84:bb:83:8e:
                    06:f1:cc:ee:8f:ec:c1:2a:d1:84:03:e0:1a:ab:90:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:63:82:09:9A:E0:31:A5:F7:87:E3:E1:42:A4:3D:51:34:D2:CF
            X509v3 Authority Key Identifier:
                keyid:0D:53:C1:14:D4:76:20:FB:A7:3B:47:80:21:3C:A6:4D:15:11:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/196/0D53C114D47620FBA73B4780213CA64D15119194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVPBFNR2IPunO0eAITymTRURkZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/196/0D53C114D47620FBA73B4780213CA64D15119194.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:62:3e:1b:f5:8d:8c:39:0a:fc:2d:47:c0:ce:b5:1c:74:
         b3:cc:c2:ba:d4:da:08:8d:8f:c8:20:d9:08:ea:f9:fc:dc:86:
         30:b7:c1:1d:9f:50:cd:b5:c9:39:7c:1d:5d:c6:ac:24:36:4b:
         e9:fc:6d:5c:74:d6:d2:c5:26:e4:15:94:4b:48:18:e9:5c:b9:
         1f:1f:13:25:6c:3e:d8:2b:ea:74:25:35:0b:da:8f:ae:71:7a:
         a8:e5:ce:1e:d8:43:92:70:24:26:16:e0:09:bf:a8:7e:7b:65:
         1b:34:a6:de:20:6d:51:cc:51:b1:e1:24:06:21:d3:81:02:ef:
         de:30:9a:e9:74:51:d5:f4:b1:18:1a:c5:10:26:b6:34:8e:44:
         ad:29:fb:64:d9:0f:c7:00:e5:97:17:d3:f9:41:77:5c:d1:b6:
         3c:46:1d:ff:75:fc:17:07:d5:e0:f7:f8:05:67:f6:40:94:ba:
         49:d1:77:1d:00:c1:ad:60:1d:e0:42:d6:aa:f7:f7:ed:82:7b:
         66:2a:60:b9:ab:1b:46:a9:d6:ed:f7:80:df:5c:56:5a:6b:9e:
         22:13:30:90:de:08:b1:06:67:3a:80:d1:53:80:3b:f3:76:76:
         61:cd:49:de:03:ce:8a:f1:16:84:2a:2c:ad:e4:3c:16:80:76:
         24:ad:e1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----