Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.mft
File:                     709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.mft (raw, json)
Hash identifier:          WffuGYehCAEAUUmeAJE2dLsd+ma9rZOOWJbU2/WENW8=
Subject key identifier:   4A:9E:16:97:19:CD:FB:26:B1:00:08:47:DB:AD:6C:51:15:77:90:44
Authority key identifier: 70:9F:1C:51:C0:A2:E8:6D:0D:F1:D6:93:D4:98:8E:E1:E9:20:00:CA
Certificate issuer:       /CN=709f1c51c0a2e86d0df1d693d4988ee1e92000ca
Certificate serial:       66452C518CC63DC9EA051E70480D6B3718BE0C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJ8cUcCi6G0N8daT1JiO4ekgAMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.mft
Manifest number:          0546
Signing time:             Tue 26 Dec 2023 20:00:56 +0000
Manifest this update:     Tue 26 Dec 2023 19:55:56 +0000
Manifest next update:     Wed 27 Dec 2023 21:52:56 +0000
Files and hashes:         1: 39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa (hash: 2T92KEJPmh9VrcOEsFi5CMatw6U9b4QD9jactejyOpY=)
                          2: 709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.crl (hash: AtRCIAhmKEew/hUQNGJVfE8yZURPCRKyy+Sjhz6gTjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:2c:51:8c:c6:3d:c9:ea:05:1e:70:48:0d:6b:37:18:be:0c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709f1c51c0a2e86d0df1d693d4988ee1e92000ca
        Validity
            Not Before: Dec 26 19:55:56 2023 GMT
            Not After : Dec 27 21:52:56 2023 GMT
        Subject: CN=4A9E169719CDFB26B1000847DBAD6C5115779044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:df:0a:2f:a4:87:2a:f3:d5:fe:1d:a8:82:81:
                    08:76:0c:c2:86:36:1a:d4:0a:1f:39:4c:64:a1:76:
                    8e:e3:ea:8f:2f:66:d4:b3:d6:6a:47:48:8a:2f:28:
                    5f:7d:02:e1:5b:22:84:6e:fa:cb:7c:de:fb:89:81:
                    61:f3:44:9c:40:48:dc:57:97:e1:40:56:aa:34:b8:
                    d8:6f:f2:27:92:0f:e0:ea:cb:dd:a2:b9:56:1b:65:
                    28:a0:a2:8c:00:15:1b:7f:58:02:39:e2:db:14:78:
                    7a:e2:85:e3:13:60:39:0c:a6:8a:50:22:5c:00:89:
                    b2:23:4a:b0:1f:ae:fe:2e:2a:1d:61:50:14:ea:29:
                    a7:1a:e8:76:44:1f:c1:4d:af:8d:c4:b4:77:5d:43:
                    8e:c3:2f:f6:f2:39:a0:68:81:f2:87:56:e6:89:f7:
                    9a:d8:31:4a:3b:38:02:81:1a:1e:18:cd:8d:1b:4c:
                    e3:f2:cb:7e:1f:2b:c0:be:51:f8:94:a9:2d:65:f2:
                    d1:c0:1b:8d:69:a5:1f:83:c3:c8:89:e0:6e:94:6b:
                    fb:09:39:f8:cb:ef:86:71:cf:34:7a:03:0f:58:95:
                    a7:e0:89:d9:2d:f9:d2:63:48:9a:6f:36:fb:0e:7d:
                    fb:3a:37:25:b3:57:b9:b8:14:4c:aa:42:38:76:f6:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9E:16:97:19:CD:FB:26:B1:00:08:47:DB:AD:6C:51:15:77:90:44
            X509v3 Authority Key Identifier:
                keyid:70:9F:1C:51:C0:A2:E8:6D:0D:F1:D6:93:D4:98:8E:E1:E9:20:00:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ8cUcCi6G0N8daT1JiO4ekgAMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:c7:79:e7:f7:71:b8:bf:4a:34:60:67:85:e3:a1:cc:a6:
         3f:45:cd:c2:4a:5f:00:ce:8d:67:34:49:60:7f:ae:32:01:37:
         64:73:f4:18:b6:22:e9:39:d3:dd:75:6a:1f:0f:f2:a8:dd:11:
         c5:d1:73:9c:a4:03:f9:f9:d5:5a:08:ad:81:26:ef:2e:11:dd:
         7a:2b:78:c6:3c:ea:70:17:f5:69:40:42:31:a0:43:3d:71:b4:
         43:49:5c:3b:6c:2f:fd:90:8a:5e:fa:31:2c:3e:89:b6:ad:10:
         2e:f8:0c:08:dd:b4:35:73:4a:8d:7a:08:2f:e1:58:9f:77:ad:
         f0:f5:76:93:0d:2a:a7:10:c7:0e:44:c4:23:2f:5e:e4:a9:7e:
         a8:93:c7:63:9f:97:db:08:9c:6d:83:17:12:6a:d9:87:01:3c:
         45:6f:82:6a:df:40:cc:71:be:17:87:2d:d8:7b:d5:6e:6b:c2:
         fe:fe:53:44:9e:85:cc:c9:b3:93:8e:ba:6e:c6:3a:4c:76:f1:
         57:de:62:75:10:db:c4:ad:fb:fe:d0:7e:cf:4f:e4:09:d3:3b:
         78:ff:51:1c:ad:85:e2:a2:a7:30:e3:e2:e4:33:af:c7:67:f2:
         69:9e:f8:69:9e:f5:cf:38:3d:14:fe:ac:3a:6a:9a:bb:3d:8d:
         a4:bb:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----