Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
File:                     5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft (raw, json)
Hash identifier:          slxDg39wgsV0KEC/EB+AuNJccV2HyLvW8WaxIjNewrI=
Subject key identifier:   EC:9D:78:2D:26:2C:CB:B5:13:9E:90:8C:46:0B:75:C2:DA:DB:09:78
Authority key identifier: 5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B
Certificate issuer:       /CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
Certificate serial:       033BAE5229F3168E4707D88D71704465210D3D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
Manifest number:          0A88
Signing time:             Wed 20 Nov 2024 02:40:00 +0000
Manifest this update:     Wed 20 Nov 2024 02:35:00 +0000
Manifest next update:     Thu 21 Nov 2024 03:44:00 +0000
Files and hashes:         1: 33312e32342e38342e302f32342d3234203d3e20313336373837.roa (hash: +xv4HQvE2izBfWSwUxF6zCYpXi1N3jphq4kcXafcSys=)
                          2: 5A2F2699BA5359EA7F3702C46D4A048219E1A64B.crl (hash: 5ou7HB+XPiQiwpuCxx5bt5VKjGt3nWFzi5phd04qRSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3b:ae:52:29:f3:16:8e:47:07:d8:8d:71:70:44:65:21:0d:3d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
        Validity
            Not Before: Nov 20 02:35:00 2024 GMT
            Not After : Nov 21 03:44:00 2024 GMT
        Subject: CN=EC9D782D262CCBB5139E908C460B75C2DADB0978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:1e:c7:23:db:1f:b9:fe:f2:ce:b7:a4:32:
                    79:60:65:5f:cc:90:ed:07:89:81:3f:82:0d:72:aa:
                    71:de:4c:9a:b2:41:69:c9:8f:5a:e3:42:d9:87:0a:
                    64:f8:78:64:67:23:a3:49:10:92:f7:71:4a:d3:ef:
                    78:c0:5b:02:3c:f5:97:a6:58:71:2c:00:38:22:c5:
                    55:6e:d8:7f:e9:51:43:a9:f0:b7:96:a6:cc:c8:d4:
                    3f:1b:cf:5f:9d:cd:6b:54:7f:c2:ed:39:01:59:fb:
                    a6:bb:b1:e8:ff:18:8a:b1:45:67:e1:6b:16:a2:1b:
                    63:5e:4c:6f:34:64:78:af:d9:9b:06:6b:a7:a6:d2:
                    7b:ae:4f:35:58:d0:ec:1c:fc:3d:30:7a:0c:42:37:
                    3b:03:c0:8f:11:f2:62:d7:4e:67:8c:a6:5e:75:28:
                    7f:fa:07:8e:2a:14:04:7d:ad:fa:e8:ce:57:e8:a2:
                    ee:c4:26:99:90:78:de:f6:8c:52:ca:35:47:4c:7a:
                    ec:7b:97:8b:6d:78:ef:6f:6c:42:be:7c:5a:2a:cb:
                    18:fe:44:0c:96:83:6f:23:75:a5:a7:ca:a9:ad:65:
                    45:95:01:fa:16:f8:1e:48:1b:69:e2:73:b2:ea:4f:
                    5f:c5:15:c7:3e:f9:12:df:05:6c:68:99:38:29:ba:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9D:78:2D:26:2C:CB:B5:13:9E:90:8C:46:0B:75:C2:DA:DB:09:78
            X509v3 Authority Key Identifier:
                keyid:5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:1d:65:b4:a9:33:84:87:58:70:35:b0:50:f7:84:5c:4a:
         eb:ee:09:c7:28:32:37:b9:e0:6a:61:88:86:c0:3b:5d:ef:8b:
         2a:0a:4a:47:1c:3d:4a:61:f9:83:e7:0f:61:05:35:16:97:39:
         dd:23:2c:cc:77:f8:85:39:ea:7a:29:64:39:26:7e:1e:20:72:
         43:0b:32:ec:21:ab:62:5c:85:58:17:71:e8:12:6b:9b:1d:38:
         10:5e:c5:db:b7:d4:ff:8f:e4:33:fa:9f:90:bf:73:87:41:ca:
         5b:96:68:30:76:ba:4b:d2:1a:12:2a:0b:4e:79:95:ce:24:93:
         79:e8:fc:8a:64:14:48:ad:31:4d:81:b5:b7:85:54:0d:3a:8d:
         30:5f:e4:db:e4:00:a1:3d:65:4d:fd:c8:90:66:86:b0:0d:9d:
         df:b8:0a:bb:77:a3:8f:85:5e:1c:0c:e8:1c:55:92:c9:a6:ad:
         a6:a7:e2:87:4e:f5:e0:c4:f6:ab:e4:dd:6f:27:3c:99:c2:9b:
         b0:3d:da:cf:8b:75:27:7f:03:6f:99:92:48:38:62:a9:c6:36:
         36:94:cb:d8:e9:ff:bb:b4:c4:65:b3:de:d1:2c:0d:84:6f:75:
         45:61:d0:30:94:5e:a7:9a:41:35:31:a7:46:3d:44:13:0a:50:
         f0:42:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----