Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/90D5599F5E99C95860993A481D04260C5A594FA8.mft
File:                     90D5599F5E99C95860993A481D04260C5A594FA8.mft (raw, json)
Hash identifier:          CnZU6Yb/KHWIJ/oTZJPhzZ3xY3mnNID/jg90OrIt8bU=
Subject key identifier:   A9:19:0E:26:AA:2C:0B:98:C0:41:9C:AF:6B:FC:64:AA:95:4E:8E:0F
Authority key identifier: 90:D5:59:9F:5E:99:C9:58:60:99:3A:48:1D:04:26:0C:5A:59:4F:A8
Certificate issuer:       /CN=96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8
Certificate serial:       09D83C3ACF1AB9151748C059628B6BD12FC52D91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/90D5599F5E99C95860993A481D04260C5A594FA8.mft
Manifest number:          32
Signing time:             Tue 21 May 2024 14:59:38 +0000
Manifest this update:     Tue 21 May 2024 14:54:38 +0000
Manifest next update:     Wed 22 May 2024 18:45:38 +0000
Files and hashes:         1: 32332e3137372e38382e302f32342d3234203d3e20323136343632.roa (hash: OB4q4vDmOi74C6GUvxXO9idio6259snEYructpk16ps=)
                          2: 90D5599F5E99C95860993A481D04260C5A594FA8.crl (hash: VEXI9GDkSw6Gte6Ufn7n66yGCPg9EZCug/3KnNogUfc=)
                          3: 32332e3137372e38382e302f32342d3234203d3e203630383538.roa (hash: WVbIJBGuIJ3DxtHsj6k4MYFh2yT2yB4/JvtfmG5cPKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d8:3c:3a:cf:1a:b9:15:17:48:c0:59:62:8b:6b:d1:2f:c5:2d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8
        Validity
            Not Before: May 21 14:54:38 2024 GMT
            Not After : May 22 18:45:38 2024 GMT
        Subject: CN=A9190E26AA2C0B98C0419CAF6BFC64AA954E8E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:99:b5:5c:4e:41:55:9a:fd:69:aa:67:26:
                    d2:1c:ed:5c:d7:fe:76:60:5e:d9:6d:b3:a7:a8:50:
                    81:6d:a6:44:e2:55:59:1e:74:3b:61:c1:8a:22:47:
                    1f:cd:22:c7:d5:2d:1d:6c:d1:0f:ec:c8:3b:85:a6:
                    58:b0:21:e2:17:c0:34:f6:a2:50:db:0a:a7:fa:17:
                    6b:ec:6c:f7:1b:db:46:1a:5d:86:4d:4d:cf:66:11:
                    54:e0:d8:97:4f:08:2b:76:b0:70:36:21:c2:82:61:
                    44:2a:6f:49:8f:70:07:f9:bb:32:78:64:5d:0b:6b:
                    98:bb:11:c8:f0:84:6b:e0:1a:e4:45:34:70:f9:5b:
                    8c:4b:dd:56:5d:66:f4:ec:2a:58:56:71:68:55:45:
                    6e:c8:15:0a:f8:75:bf:2a:75:c0:4f:b9:b6:4a:0e:
                    49:f2:28:8b:43:e1:b7:08:64:da:ca:bb:e0:51:03:
                    73:9b:d8:c1:a3:cd:02:0c:92:34:37:ed:55:a7:e2:
                    3c:ad:a4:ad:4d:ef:23:1d:29:6b:7e:f4:ff:6d:a4:
                    58:8a:97:09:ef:0f:57:58:88:46:bc:28:6b:a1:00:
                    18:bf:d2:31:29:a8:8f:01:73:e5:37:76:52:dd:4c:
                    31:26:f2:ec:24:77:5c:b8:ca:3f:47:58:06:10:56:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:19:0E:26:AA:2C:0B:98:C0:41:9C:AF:6B:FC:64:AA:95:4E:8E:0F
            X509v3 Authority Key Identifier:
                keyid:90:D5:59:9F:5E:99:C9:58:60:99:3A:48:1D:04:26:0C:5A:59:4F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/90D5599F5E99C95860993A481D04260C5A594FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/90D5599F5E99C95860993A481D04260C5A594FA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:05:8f:29:42:0d:0f:f4:c4:d8:a8:02:f6:fa:71:64:e8:
         20:2b:46:88:a6:3d:e0:83:92:d3:3e:81:95:5e:91:63:39:63:
         70:82:f6:d6:c1:96:a6:7e:0c:4f:45:e1:44:28:aa:fe:97:e8:
         61:54:04:1a:24:9c:b3:3c:ed:5d:31:a5:38:d2:45:d4:f3:a3:
         65:7f:5d:c4:b3:e3:ae:cd:f5:9c:38:2d:fa:92:47:a6:24:23:
         e4:76:63:b1:f1:87:49:ea:8d:47:00:71:07:6a:4c:7d:27:2b:
         7a:05:23:55:74:f9:cb:fd:b9:a7:13:97:f6:61:62:0c:50:29:
         39:74:4e:23:61:fe:8b:a9:2a:f4:d7:e5:2d:d5:2f:68:1c:aa:
         f3:26:5a:c4:75:b5:88:a1:18:f2:9f:fe:c8:0d:b1:65:9d:c1:
         50:94:9a:67:bc:6c:30:6d:bc:6b:8e:67:04:c2:7a:41:ee:96:
         c6:54:c6:f6:1c:67:32:eb:f5:a8:56:ab:6a:9c:91:c5:c9:56:
         9d:12:80:c3:08:23:2e:c3:34:88:38:d2:2f:02:ac:c6:78:5c:
         60:36:5c:1b:34:cd:c5:31:b1:aa:c9:3d:45:19:dc:f3:1c:46:
         fc:88:5b:d6:7b:33:36:9c:3c:d4:c9:1e:db:7e:af:19:f7:92:
         b6:1e:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----