Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft
File:                     FAE8907C5DE93E22E975390DB5621669314C4E18.mft (raw, json)
Hash identifier:          nyfmEY5N5/G75Op0ERA/eciX1+zjPzpMZO6dQ12yqRw=
Subject key identifier:   78:0E:91:80:DA:6F:5F:A5:0C:D8:A4:76:F6:13:82:A1:6C:4C:DA:BD
Authority key identifier: FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18
Certificate issuer:       /CN=fae8907c5de93e22e975390db5621669314c4e18
Certificate serial:       1AEE0C5CCB847ED11FD18562105A73699691CB2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft
Manifest number:          0364
Signing time:             Tue 26 Dec 2023 20:00:58 +0000
Manifest this update:     Tue 26 Dec 2023 19:55:58 +0000
Manifest next update:     Wed 27 Dec 2023 22:57:58 +0000
Files and hashes:         1: 3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa (hash: U96cJMm3pGO5b07LUu1NTnBFmnO6SNexAeSENeYI1r4=)
                          2: FAE8907C5DE93E22E975390DB5621669314C4E18.crl (hash: ZW9v3iyjMSLg9wEhHPk8ZKIHRkPvzZexksECaSLzUFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ee:0c:5c:cb:84:7e:d1:1f:d1:85:62:10:5a:73:69:96:91:cb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae8907c5de93e22e975390db5621669314c4e18
        Validity
            Not Before: Dec 26 19:55:58 2023 GMT
            Not After : Dec 27 22:57:58 2023 GMT
        Subject: CN=780E9180DA6F5FA50CD8A476F61382A16C4CDABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:60:d5:48:48:1f:cb:db:7b:34:1b:4e:c5:
                    9e:5e:2a:74:71:b1:98:d4:09:44:4a:e8:e4:25:78:
                    d6:e9:d1:22:b9:fe:bd:cb:d0:89:03:a4:03:b4:b7:
                    58:c2:a3:8f:c3:3c:ce:cf:da:f1:c8:33:ad:d4:b2:
                    7a:50:f6:d1:d8:cd:84:17:9e:87:ae:98:46:69:57:
                    84:19:20:10:72:19:c0:5c:3d:82:15:de:da:b3:08:
                    69:08:d5:ce:10:d4:a6:26:26:aa:cc:04:37:a2:78:
                    15:39:7c:a1:39:72:2f:c1:b7:7e:f5:ea:e4:8c:ff:
                    21:47:5d:ff:9c:28:2d:b4:db:e1:48:ed:f3:a6:47:
                    b9:87:35:17:07:48:d0:df:06:ef:7f:27:2a:5c:7d:
                    cc:99:6e:fb:7e:cb:8e:c6:5c:fb:ef:ed:e3:d3:ae:
                    c6:0f:09:e2:50:08:99:1d:77:66:9d:b7:b7:68:53:
                    3b:18:0e:0d:91:ce:99:28:61:a9:a5:27:17:66:f7:
                    9c:10:2d:9e:08:97:c7:00:6c:ea:ec:23:43:34:0b:
                    c5:c6:25:ea:e7:9f:93:c0:da:b7:2e:f7:e1:fc:7d:
                    ee:50:36:f8:0b:ef:b2:0e:56:fe:b3:a4:4f:29:3b:
                    78:23:2c:35:9b:a8:37:d5:f9:e0:cb:ec:9c:4e:59:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0E:91:80:DA:6F:5F:A5:0C:D8:A4:76:F6:13:82:A1:6C:4C:DA:BD
            X509v3 Authority Key Identifier:
                keyid:FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:9b:58:35:ae:c3:0f:f7:c6:b6:b5:16:6c:9a:bc:7a:da:
         a4:fd:39:70:43:85:ab:8a:b0:93:49:30:cc:28:5a:6e:da:dc:
         77:ee:65:f5:cf:76:2b:c1:30:46:cb:41:dd:4c:e4:53:05:f1:
         a4:80:d0:4d:4e:ff:99:eb:19:b2:a8:32:f2:28:71:7c:cb:42:
         89:f7:a3:6a:99:f2:67:01:c1:61:92:37:5e:51:12:1e:de:c5:
         85:1c:15:05:03:17:c2:29:fd:96:0b:0e:2b:ff:de:0f:2d:78:
         aa:5a:d2:08:54:2a:07:d1:27:ff:16:7f:78:e8:2d:74:f6:85:
         77:2e:34:a3:03:4a:5b:67:c0:2f:a6:97:ab:46:af:30:9e:18:
         ff:50:91:0f:fc:1c:fd:4a:fc:3b:69:3d:d2:d5:ce:3c:43:05:
         d1:26:bf:a3:f9:90:de:5c:8e:2a:62:00:18:33:55:05:4c:16:
         37:d3:0f:04:48:b9:a4:e8:a6:be:5a:39:47:db:72:e7:a1:0e:
         4b:e0:39:aa:60:82:f5:01:c3:48:dd:6b:30:9b:4c:03:90:2e:
         1e:41:c8:9f:6d:31:15:ab:c8:c9:96:e0:6b:d3:3d:28:d0:d8:
         4e:22:2a:9c:3c:83:8e:5a:ad:83:4b:4a:b2:39:ff:d7:e9:fb:
         5b:68:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----