Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/3DF98017329492D62229F4A4C1DD782B87F27B01.mft
File:                     3DF98017329492D62229F4A4C1DD782B87F27B01.mft (raw, json)
Hash identifier:          8WMrDt7dmuEmMHjAZOLtFA0csRUAgdF9w7gan+61xM8=
Subject key identifier:   2F:D7:E1:2E:51:D0:3E:97:B4:EF:04:AB:1B:96:FB:0A:72:F3:94:A6
Authority key identifier: 3D:F9:80:17:32:94:92:D6:22:29:F4:A4:C1:DD:78:2B:87:F2:7B:01
Certificate issuer:       /CN=3df98017329492d62229f4a4c1dd782b87f27b01
Certificate serial:       201AAE71C5D17F597B7B071A8DB0804984F6D546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfmAFzKUktYiKfSkwd14K4fyewE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/3DF98017329492D62229F4A4C1DD782B87F27B01.mft
Manifest number:          0527
Signing time:             Thu 21 Dec 2023 12:27:11 +0000
Manifest this update:     Thu 21 Dec 2023 12:22:11 +0000
Manifest next update:     Fri 22 Dec 2023 12:44:11 +0000
Files and hashes:         1: 3DF98017329492D62229F4A4C1DD782B87F27B01.crl (hash: eWryHrOMtSPeXzHxmCLmKPNzAtkJ7EWMtpG5GD8tBf8=)
                          2: 33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa (hash: dtdxhCIXERhZPoWLWZcDsIHxyCxZDvsG3SEHHkXwfhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:ae:71:c5:d1:7f:59:7b:7b:07:1a:8d:b0:80:49:84:f6:d5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df98017329492d62229f4a4c1dd782b87f27b01
        Validity
            Not Before: Dec 21 12:22:11 2023 GMT
            Not After : Dec 22 12:44:11 2023 GMT
        Subject: CN=2FD7E12E51D03E97B4EF04AB1B96FB0A72F394A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:18:01:4d:df:28:60:5d:3d:8b:65:6b:e2:
                    34:dc:18:d1:29:2d:62:e7:39:65:bf:da:a6:82:e9:
                    56:ce:de:f4:7c:fb:f9:4e:08:7a:ca:1b:f2:59:74:
                    b6:35:ac:2b:ad:9a:11:3d:b2:e5:69:a3:ba:8e:b8:
                    d9:89:1a:f7:1c:fa:78:ab:f7:a1:31:79:79:91:2a:
                    cc:8b:b0:06:65:ac:27:f3:d1:c2:49:09:c8:1f:c3:
                    fe:76:3c:15:1d:ab:e4:7f:97:b8:f9:b4:18:12:fe:
                    e3:26:3a:59:17:4c:a2:b5:af:c3:1e:84:ec:34:ee:
                    67:ff:2e:a1:1e:a0:16:b7:ad:71:d5:b0:1f:c6:43:
                    a1:f4:5f:8c:1f:9e:c8:f2:c4:ad:d5:29:00:93:9c:
                    c5:fc:e4:a6:36:ca:14:92:64:6b:40:98:7b:9b:2d:
                    59:2e:68:09:cd:d7:e9:75:7f:64:2e:c9:72:0c:08:
                    73:c6:76:10:cf:e3:2b:bc:ce:21:17:8c:73:4b:dd:
                    6c:98:8e:3d:7b:0c:60:09:d9:04:06:9e:f9:86:36:
                    c6:aa:ad:27:3c:96:e1:b4:b1:24:18:e2:88:d9:66:
                    a3:42:5a:f7:cd:d7:42:ac:e8:d4:a5:4c:25:a3:35:
                    08:62:fe:59:92:8c:db:3c:ab:58:c8:57:31:b9:63:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D7:E1:2E:51:D0:3E:97:B4:EF:04:AB:1B:96:FB:0A:72:F3:94:A6
            X509v3 Authority Key Identifier:
                keyid:3D:F9:80:17:32:94:92:D6:22:29:F4:A4:C1:DD:78:2B:87:F2:7B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/3DF98017329492D62229F4A4C1DD782B87F27B01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfmAFzKUktYiKfSkwd14K4fyewE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/3DF98017329492D62229F4A4C1DD782B87F27B01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:70:8c:2d:34:53:10:9d:b4:75:50:bd:b5:e4:c3:4f:b5:
         46:1b:e0:9d:c9:9d:d8:78:38:3d:d9:37:f5:c5:0c:09:1a:34:
         d7:6c:63:47:e9:bd:7b:5c:e2:26:af:65:59:1d:e6:f1:35:2a:
         d0:c4:07:e0:1b:76:8a:8b:40:3f:71:5c:97:85:de:7f:63:c1:
         ab:14:e9:73:3e:4e:ed:45:b8:6e:44:22:32:79:c4:74:32:7c:
         37:29:55:b0:f4:db:be:5d:29:f8:4c:bf:f7:4f:e1:7d:ac:aa:
         99:10:9c:68:d2:86:fa:2d:79:5f:4d:45:5b:51:50:18:9c:a5:
         d9:27:b4:d2:e6:67:65:75:61:c6:fa:f0:3c:5f:88:c8:24:c2:
         af:e6:80:a5:70:30:5e:40:d5:ca:86:4d:bb:54:2b:f9:23:94:
         39:e7:83:c8:52:e4:ea:f1:64:4c:3b:7f:2b:5a:90:60:e9:99:
         97:24:f6:68:77:b4:f2:8c:7c:19:e9:1c:e1:c6:02:dc:28:f8:
         f0:01:77:74:42:bf:4f:fc:57:44:9a:86:52:0c:98:68:7c:3d:
         a1:0c:0e:48:84:9c:34:e6:d3:b3:33:26:6c:1b:29:f9:11:bc:
         bb:13:ca:3d:7a:fe:50:de:db:7c:ad:d8:6c:be:d7:f2:b5:20:
         90:03:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----