Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft
File:                     86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft (raw, json)
Hash identifier:          aCAhYbOjNxqz3NObNMAuRNkXMphxjLAK+Fi/eoZRx10=
Subject key identifier:   12:E3:73:01:6E:1E:9F:3C:E3:9F:C7:66:E8:EF:F0:56:50:F4:A7:E2
Authority key identifier: 86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B
Certificate issuer:       /CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B
Certificate serial:       6B3DC1ECC31E07C951F88B8416BCB811C65E6942
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft
Manifest number:          21
Signing time:             Fri 12 Jul 2024 05:16:40 +0000
Manifest this update:     Fri 12 Jul 2024 05:11:40 +0000
Manifest next update:     Sat 13 Jul 2024 07:59:40 +0000
Files and hashes:         1: 326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa (hash: tMsNakIaNE1YSnO83Wdq/qu0k7JReRsPeGD6S/YEGho=)
                          2: 86A3055545CB4F4C420BE943F5C18559EBC1F39B.crl (hash: m1ZAi87KihV7JtxzJZ4NZgGDQBWshnCsaayxOykJnnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3d:c1:ec:c3:1e:07:c9:51:f8:8b:84:16:bc:b8:11:c6:5e:69:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B
        Validity
            Not Before: Jul 12 05:11:40 2024 GMT
            Not After : Jul 13 07:59:40 2024 GMT
        Subject: CN=12E373016E1E9F3CE39FC766E8EFF05650F4A7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:87:75:41:3d:c1:0b:66:e7:2e:84:a0:19:
                    00:93:13:0a:2e:42:0b:91:65:38:1c:7c:b9:53:8b:
                    b9:02:c1:33:16:e4:f1:ac:70:2d:1b:a1:e2:1c:ae:
                    b7:94:ab:64:6d:21:0f:f4:13:e3:11:00:96:b4:27:
                    97:55:7c:45:5c:7a:81:7f:a1:3a:29:17:a9:d2:0c:
                    2f:2f:0b:ff:69:c8:85:3c:7c:5c:c8:91:11:2b:69:
                    f3:b1:d0:b7:10:bc:61:6c:2b:79:cf:0d:38:63:0f:
                    aa:40:09:70:4a:34:d5:47:0f:04:4e:e0:ba:6c:47:
                    a0:9f:77:9f:d2:e5:b5:e0:73:a6:ca:94:a5:32:8c:
                    5e:eb:1a:e5:c3:a5:8b:0c:b3:ec:d2:16:a3:82:85:
                    cf:1e:d2:71:23:eb:f1:39:d5:8a:f8:1a:cb:d4:1c:
                    19:05:2b:c3:ca:83:47:69:b3:9b:e5:02:91:c6:cb:
                    ec:22:38:31:e0:fd:51:71:4a:f9:72:ab:c4:25:05:
                    34:89:48:b9:f9:1a:e9:b2:01:65:03:f7:6e:b8:53:
                    ba:c2:8e:c8:e1:c9:7d:a0:09:bb:bc:6c:0c:72:45:
                    98:85:b4:a6:d6:53:d8:bc:f1:72:8d:65:58:45:3d:
                    de:95:49:35:c7:d4:fc:2e:10:fc:a4:a3:b3:69:11:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E3:73:01:6E:1E:9F:3C:E3:9F:C7:66:E8:EF:F0:56:50:F4:A7:E2
            X509v3 Authority Key Identifier:
                keyid:86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:e5:43:b3:98:75:9b:38:76:0f:ab:f0:2b:f3:3d:b7:15:
         63:fa:2f:57:cc:a9:33:c1:4b:c9:47:7b:1c:19:8c:56:47:5a:
         74:f6:c6:53:77:39:ef:2b:8b:d8:62:11:d4:16:79:aa:ee:64:
         89:ff:14:ca:eb:ae:e7:13:bc:09:ae:d9:18:23:b3:8f:ce:99:
         84:56:46:3e:41:c7:e9:87:4e:a2:b8:da:dd:c6:fb:5d:74:1b:
         fb:87:1b:96:93:5c:0b:31:f6:fc:c1:52:95:ca:32:a2:66:16:
         a2:b3:90:57:d2:5d:01:24:63:5b:cc:4b:db:c9:e5:cf:11:88:
         b4:ae:d5:4c:b5:df:07:70:86:a9:fd:c9:04:dd:3a:97:f6:86:
         24:be:32:fd:91:2a:45:08:69:3f:03:ab:4e:57:5f:5a:63:d1:
         27:09:ad:f9:66:f1:59:39:bd:0d:be:69:7b:6e:9d:fc:42:22:
         69:2f:1f:bc:c8:e3:14:f3:67:89:f6:06:35:c0:93:78:dd:7b:
         36:2f:5a:0a:a2:71:ac:2f:80:57:d4:ca:b8:09:5d:2e:ed:14:
         7c:8c:71:da:d4:d0:e9:82:d5:da:3b:84:df:2a:20:3d:de:e9:
         fd:e3:73:c2:5a:4e:80:74:6f:2d:d3:6e:e2:5e:9d:88:d8:e0:
         86:37:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----