Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.mft
File:                     40925AF8017EBCF7C34D1A62658CC465308245C0.mft (raw, json)
Hash identifier:          YhmNzD1eOhnD4ohSXtM1sZkpblwDtoPa7itXGfb0U84=
Subject key identifier:   9E:74:CB:C2:25:DA:E7:49:89:27:87:55:A5:C2:60:FB:9D:27:B0:2F
Authority key identifier: 40:92:5A:F8:01:7E:BC:F7:C3:4D:1A:62:65:8C:C4:65:30:82:45:C0
Certificate issuer:       /CN=40925af8017ebcf7c34d1a62658cc465308245c0
Certificate serial:       066A01F78A6B83278E1832FA1B999364C8B9622D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJJa-AF-vPfDTRpiZYzEZTCCRcA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.mft
Manifest number:          0531
Signing time:             Thu 21 Dec 2023 15:44:38 +0000
Manifest this update:     Thu 21 Dec 2023 15:39:38 +0000
Manifest next update:     Fri 22 Dec 2023 16:00:38 +0000
Files and hashes:         1: 38302e37312e3134382e302f32342d3234203d3e20323031333431.roa (hash: MyYhDCClqOEVfO2vmjRhAsiP6s592VYzOcyJsCiwYE8=)
                          2: 40925AF8017EBCF7C34D1A62658CC465308245C0.crl (hash: Uf+IX2fchs/Mwy9TJkNwdLXZ+3QwFYIRrBRJxUwbEWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6a:01:f7:8a:6b:83:27:8e:18:32:fa:1b:99:93:64:c8:b9:62:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40925af8017ebcf7c34d1a62658cc465308245c0
        Validity
            Not Before: Dec 21 15:39:38 2023 GMT
            Not After : Dec 22 16:00:38 2023 GMT
        Subject: CN=9E74CBC225DAE74989278755A5C260FB9D27B02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:18:67:64:9b:ef:61:20:7c:77:19:ce:4d:
                    d2:8f:f5:cd:b1:24:8f:2b:d3:37:1b:b2:1c:33:93:
                    88:56:ab:7e:58:7f:1d:2e:16:12:7f:4e:43:1d:23:
                    e3:d7:cc:ee:20:57:3f:18:dc:38:ce:00:0b:43:a5:
                    a3:f7:a7:47:96:5a:ee:94:f0:e9:7d:b8:0a:81:67:
                    1f:c9:4d:a9:4d:de:87:2f:72:d9:ad:20:6c:27:a6:
                    8b:f2:3a:7b:88:7f:47:1f:4f:57:0a:a4:c4:d8:2c:
                    3d:c3:14:82:43:12:73:0c:ff:bf:df:45:1e:53:25:
                    c8:1c:25:58:34:51:9c:2d:d0:4c:59:f9:75:e8:54:
                    6b:89:f6:5c:82:66:aa:c4:5a:1c:18:ac:bb:6c:f5:
                    39:5c:ef:8f:f2:9f:8b:77:d9:2b:ad:5f:24:d4:e7:
                    21:ba:c8:c1:9d:e8:5b:33:8f:27:15:58:9a:66:dd:
                    4c:e5:fe:e8:53:f3:1d:14:77:42:d6:a0:1f:8a:b2:
                    d2:f2:ce:a8:69:da:e6:e0:bf:35:2a:a2:dd:7b:4e:
                    bd:76:0b:5c:9b:f7:f4:33:43:d4:3b:28:b2:ca:73:
                    19:e2:31:61:94:07:c8:67:59:e2:fb:74:03:dc:af:
                    52:23:67:ff:c5:f0:e8:a0:dc:1a:ff:64:2d:75:dd:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:CB:C2:25:DA:E7:49:89:27:87:55:A5:C2:60:FB:9D:27:B0:2F
            X509v3 Authority Key Identifier:
                keyid:40:92:5A:F8:01:7E:BC:F7:C3:4D:1A:62:65:8C:C4:65:30:82:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJJa-AF-vPfDTRpiZYzEZTCCRcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:81:b2:37:12:7d:e6:83:20:0b:af:2b:bc:d7:41:d9:4e:fc:
         14:ce:29:da:96:61:19:b7:ec:1f:7e:21:30:da:d6:13:08:a4:
         96:7f:c3:8f:72:d7:be:54:f9:53:d6:b9:95:6d:76:97:51:32:
         34:1c:fc:dd:5b:12:9c:d2:b6:da:ca:22:6b:50:0f:ce:d5:21:
         26:8f:58:b4:44:30:c6:91:30:42:2e:dd:24:c3:a7:30:58:82:
         5d:b0:32:75:af:04:e5:0a:db:3b:f0:60:3d:ec:cb:e8:cc:c4:
         e5:e1:1f:26:7e:ca:4f:76:02:72:76:22:cf:ef:3b:43:d9:d1:
         f3:23:5a:67:1e:4a:f5:1b:a2:55:33:49:a0:35:4b:30:46:bf:
         b6:1a:e9:ad:28:e9:5c:29:d1:c9:94:fe:76:9c:ef:ff:e1:ee:
         98:87:bb:b8:67:f6:3f:b5:c3:af:06:a6:02:ef:77:7a:fa:97:
         8a:73:36:1c:69:38:fc:fd:11:0f:d0:18:28:6c:c4:55:69:8e:
         b9:d2:53:e9:6b:51:c5:4a:64:bf:af:83:b8:a0:10:d3:b8:ac:
         72:ef:63:53:94:2c:ed:ca:3b:be:6b:dc:b9:e7:fc:62:fa:dd:
         dc:50:89:bf:66:a7:d6:f9:8c:9e:22:fa:6a:14:40:e0:16:e2:
         88:f8:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----