Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.mft
File:                     B3D614895C94D30810A11D74CA52246DA3BD84FC.mft (raw, json)
Hash identifier:          YTXrzyodzWNNRltZupjb3dfzTcl2somDrGFICuepgdM=
Subject key identifier:   78:67:7A:E7:A6:31:0E:A0:0D:24:C9:7B:B8:E8:3C:AF:10:67:6E:B8
Authority key identifier: B3:D6:14:89:5C:94:D3:08:10:A1:1D:74:CA:52:24:6D:A3:BD:84:FC
Certificate issuer:       /CN=b3d614895c94d30810a11d74ca52246da3bd84fc
Certificate serial:       1C11CFC66BD856E6881EECA2EE3E583AC33718FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9YUiVyU0wgQoR10ylIkbaO9hPw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.mft
Manifest number:          0364
Signing time:             Tue 26 Dec 2023 20:00:56 +0000
Manifest this update:     Tue 26 Dec 2023 19:55:56 +0000
Manifest next update:     Wed 27 Dec 2023 21:36:56 +0000
Files and hashes:         1: B3D614895C94D30810A11D74CA52246DA3BD84FC.crl (hash: daMGg+r/sSGvli8I1JxGbKer+wU0wKV2wTe6gmLgQqA=)
                          2: 36322e3230342e34352e302f32342d3234203d3e20313336373837.roa (hash: hr6gYJlr5u1kUpXVVZIkmAph1cSJBThS7vlQO+chOGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:cf:c6:6b:d8:56:e6:88:1e:ec:a2:ee:3e:58:3a:c3:37:18:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d614895c94d30810a11d74ca52246da3bd84fc
        Validity
            Not Before: Dec 26 19:55:56 2023 GMT
            Not After : Dec 27 21:36:56 2023 GMT
        Subject: CN=78677AE7A6310EA00D24C97BB8E83CAF10676EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b3:c0:1f:cc:c9:f9:bb:96:e1:c1:31:7e:85:
                    cd:ac:56:00:c4:25:98:5f:7e:07:1e:6b:5e:42:e5:
                    cf:b7:9b:12:da:40:0a:fb:d3:9a:44:63:f2:51:08:
                    dd:76:e5:8e:4f:b6:1c:e2:52:2f:a3:5c:0a:ff:37:
                    48:bd:ea:bd:79:7e:60:5b:8b:e3:d5:4d:b8:98:c8:
                    79:7c:08:27:6f:20:27:03:8c:df:ef:77:c0:f1:19:
                    52:29:17:04:9e:9f:67:62:5c:90:e5:03:e8:97:4b:
                    aa:61:cb:0e:44:29:e5:14:10:da:47:68:ba:71:23:
                    e9:54:d7:36:38:7e:12:95:13:fd:ad:bc:4b:48:13:
                    3c:33:cb:b2:ff:7e:28:f0:21:26:b1:04:5e:ef:48:
                    b3:2c:0c:bb:0e:3a:cf:05:8c:d0:8c:b5:4d:14:43:
                    1c:98:31:59:0d:33:8e:ed:5d:f4:07:9b:d3:c1:d5:
                    59:f7:26:65:24:d4:61:ff:08:f8:8d:29:f5:b8:6a:
                    51:20:58:7b:e2:cb:ef:95:93:eb:3a:2c:e9:fd:31:
                    2a:c6:c6:b6:92:dd:ad:b7:48:7c:30:d3:88:78:56:
                    2d:f5:f0:4c:1e:7b:f0:85:a7:53:fc:88:26:52:9f:
                    58:05:80:d4:6e:90:20:a7:37:2a:47:80:fd:57:32:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:67:7A:E7:A6:31:0E:A0:0D:24:C9:7B:B8:E8:3C:AF:10:67:6E:B8
            X509v3 Authority Key Identifier:
                keyid:B3:D6:14:89:5C:94:D3:08:10:A1:1D:74:CA:52:24:6D:A3:BD:84:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9YUiVyU0wgQoR10ylIkbaO9hPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:ce:60:c1:3e:d4:a3:4f:f0:c5:d7:6b:11:01:4c:e5:4b:
         1e:af:4a:9a:53:5c:df:62:59:a4:9c:d8:74:5d:e0:28:31:58:
         6d:8f:2e:76:29:ce:19:af:ad:1e:8f:db:65:1c:6f:b4:8e:53:
         bd:c2:01:83:60:b8:11:3b:f4:ce:fa:57:59:fa:f6:27:35:19:
         45:e9:87:5e:09:63:46:3e:2a:f3:98:c6:65:8c:10:5a:2c:cb:
         05:98:45:92:f2:23:19:ed:39:7b:85:0c:03:01:4f:dd:02:fa:
         da:55:af:ca:37:fc:9d:2b:18:35:10:3b:df:ca:37:a1:77:02:
         e5:4e:4f:1d:9b:78:3a:a8:a0:0a:8a:05:47:51:22:6a:38:10:
         b9:fb:ba:fa:eb:6b:02:4b:01:6d:f0:2f:94:c5:9d:eb:8f:d7:
         30:2a:f0:90:1d:54:be:83:b4:19:13:a5:f2:f9:ee:8e:22:fe:
         0b:99:96:5e:b5:f5:f3:b6:41:40:29:67:14:2c:dd:ab:4d:09:
         99:cf:27:ed:74:48:53:27:e3:aa:19:9d:a4:2b:f9:0b:41:44:
         e4:e5:3d:ca:1c:42:31:24:cd:8c:65:e0:ec:1c:a6:db:aa:ef:
         c4:a4:81:3d:24:83:6a:ee:52:a8:94:ae:ad:92:a7:20:6c:64:
         e5:d9:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----