Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.mft
File:                     2D0E7AF3D6DA0D723A64675B48D697E0C2571997.mft (raw, json)
Hash identifier:          YqLdA3yYBmE/gCDQSXl0EvkgLmLbjNs5+b7WpXRiirc=
Subject key identifier:   74:2E:39:07:F3:54:D7:31:7E:FE:0F:88:F2:E3:2B:34:D1:46:00:62
Authority key identifier: 2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97
Certificate issuer:       /CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
Certificate serial:       385E79BAF52FA177726A0EF1557E713AB84E4051
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.mft
Manifest number:          07
Signing time:             Sun 12 Nov 2023 08:22:09 +0000
Manifest this update:     Sun 12 Nov 2023 08:17:09 +0000
Manifest next update:     Mon 13 Nov 2023 11:55:09 +0000
Files and hashes:         1: 32332e3135362e3130342e302f32342d3234203d3e203135333533.roa (hash: h27zLhFxvBfWPQE71JDuwbeePV75jSa/zbc/VYTCKWs=)
                          2: 323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa (hash: Yb9JU3CRWrMKdDlJAtZV9UzOmSwXBkyRyCzpwM4uvkk=)
                          3: 323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa (hash: hnloc+9Baom9la25qU3IpjmQpTajQG5FHLv3IT4JZiw=)
                          4: 2D0E7AF3D6DA0D723A64675B48D697E0C2571997.crl (hash: zIQCmfPqr2s2X/uHKkglDAg7OiHM0FvQElF8UT+XJcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5e:79:ba:f5:2f:a1:77:72:6a:0e:f1:55:7e:71:3a:b8:4e:40:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
        Validity
            Not Before: Nov 12 08:17:09 2023 GMT
            Not After : Nov 13 11:55:09 2023 GMT
        Subject: CN=742E3907F354D7317EFE0F88F2E32B34D1460062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:36:1c:7f:58:21:cb:ca:55:98:7f:25:ce:
                    99:a1:9d:31:1e:7a:61:63:7d:e5:49:38:57:51:40:
                    35:f1:f4:16:f0:b3:62:99:46:32:e7:1d:f1:b3:60:
                    e8:6d:7c:68:f7:86:72:ee:e7:df:a3:6b:be:a0:a7:
                    8c:86:a5:e6:90:40:f7:3b:d0:d6:c3:9e:2d:42:c7:
                    f7:70:ef:1a:5b:0a:fc:5f:9b:a5:e1:10:97:a3:9f:
                    bc:ce:94:cc:2f:79:4f:e6:98:89:8e:03:6a:35:1d:
                    e4:9f:cd:7d:a0:13:20:5a:d0:52:5d:e7:66:a7:d9:
                    94:4a:9a:65:11:ff:7e:b4:12:90:67:30:9f:16:34:
                    bb:31:17:c4:54:ff:53:af:86:46:93:df:1b:79:2f:
                    d1:56:80:3a:44:19:04:c3:ca:c9:0c:69:06:9d:b7:
                    6d:aa:15:41:e6:2a:2f:0c:01:0b:1f:04:db:de:a3:
                    ac:18:ab:f4:ad:0a:77:f0:6e:93:4e:50:5b:ce:2c:
                    97:0d:f7:a1:e5:48:40:bd:ed:04:13:41:dc:3d:76:
                    d8:43:85:84:2e:aa:69:49:af:be:ff:f4:2a:9b:c8:
                    72:d0:7f:db:93:d5:b9:15:5e:6c:e2:db:67:13:f4:
                    8a:bf:00:af:5e:51:ff:e8:4f:0f:19:f8:ba:db:27:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2E:39:07:F3:54:D7:31:7E:FE:0F:88:F2:E3:2B:34:D1:46:00:62
            X509v3 Authority Key Identifier:
                keyid:2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c1:18:8f:f0:67:f2:4b:86:d9:0b:bb:9d:83:0f:dd:a5:a1:
         a0:3c:0d:8b:cf:2e:bf:9b:ec:98:0e:be:73:90:1c:72:8b:f4:
         ff:f3:0e:2d:38:f7:7a:18:c6:03:e8:cd:fb:12:49:40:f3:02:
         a3:0d:1e:5e:5d:23:36:42:d4:88:b1:50:e1:0f:da:1c:c1:b0:
         88:8f:18:9a:58:6b:92:4c:14:a5:10:4c:79:ea:41:35:03:12:
         68:f4:80:d0:d0:29:87:a9:3b:7a:23:b9:30:ad:0c:9d:3b:19:
         9c:d2:9f:7a:71:ec:95:51:2a:89:9e:68:17:78:93:7f:d1:ae:
         c4:84:34:82:db:26:aa:dd:a1:0f:10:05:2b:05:0e:d5:94:a4:
         42:36:e5:db:c9:a7:4c:86:ca:f3:07:e1:ea:90:7a:92:ff:fe:
         8a:a1:96:4f:2a:a7:d0:1a:b4:63:81:d1:fb:c7:f5:1b:e2:ec:
         69:32:bc:fc:73:fc:84:98:e8:77:27:61:97:c5:d2:7b:bf:25:
         9b:1c:26:8e:2e:82:e3:42:6c:ae:0e:e7:13:91:75:a5:7f:94:
         61:fd:66:b2:c5:d4:38:0b:3c:2f:1e:93:3a:1a:f8:14:39:95:
         0a:5e:8d:dd:55:07:9b:92:2f:fd:37:40:59:4f:b7:a1:34:6b:
         a6:ee:21:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----