Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft
File:                     C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft (raw, json)
Hash identifier:          s+UemhVaHHVEvuY1a1WwcdL3/9OFsM6p37pNvuP9lgQ=
Subject key identifier:   E8:54:30:02:1F:CC:80:F6:12:D5:46:6C:AB:76:20:26:45:F5:3E:09
Authority key identifier: C0:1B:13:8E:E5:02:88:D5:35:67:AA:C0:D4:D0:6D:2F:86:B3:07:D1
Certificate issuer:       /CN=c01b138ee50288d53567aac0d4d06d2f86b307d1
Certificate serial:       2592726A79A4552DBD596CDA8C9A9A07EC6CB51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBsTjuUCiNU1Z6rA1NBtL4azB9E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft
Manifest number:          0542
Signing time:             Wed 27 Dec 2023 14:01:48 +0000
Manifest this update:     Wed 27 Dec 2023 13:56:48 +0000
Manifest next update:     Thu 28 Dec 2023 17:24:48 +0000
Files and hashes:         1: 36322e332e34352e302f32342d3234203d3e20323031333431.roa (hash: 0A1nVOlJAM7JxtVM0yeJQ1/Obj2HQswUx3RV99RjZmg=)
                          2: C01B138EE50288D53567AAC0D4D06D2F86B307D1.crl (hash: m7SU4JTFpCzsTb7LDi4wrK6ttrMETdvVsM2GtB6n8Y0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:92:72:6a:79:a4:55:2d:bd:59:6c:da:8c:9a:9a:07:ec:6c:b5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01b138ee50288d53567aac0d4d06d2f86b307d1
        Validity
            Not Before: Dec 27 13:56:48 2023 GMT
            Not After : Dec 28 17:24:48 2023 GMT
        Subject: CN=E85430021FCC80F612D5466CAB76202645F53E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:00:09:e3:0b:c9:9a:b4:af:3b:63:fa:c7:
                    b1:57:dd:4d:d3:dc:5c:07:bb:5a:9c:4a:cc:ce:8a:
                    5c:08:4f:a0:c5:b9:27:9f:b3:63:6b:a8:6c:77:49:
                    16:ad:9a:ef:1b:c3:4d:97:1f:d7:8a:bf:90:99:e2:
                    c9:66:b7:a0:5a:a5:64:9d:df:ba:63:98:96:33:19:
                    87:97:64:f4:66:f8:c7:3a:72:90:03:f4:cc:61:7a:
                    c0:f5:77:66:35:ae:c7:d0:3b:81:16:e3:20:a2:ec:
                    95:2a:5b:70:b5:0a:8f:83:96:57:69:bf:98:bb:61:
                    52:f8:94:fc:c9:9d:67:83:6f:e2:03:b2:45:1d:0a:
                    aa:51:99:42:8c:69:cd:5c:0e:7b:87:30:d7:ba:4a:
                    9d:d1:91:07:ee:12:0b:24:d4:d7:7e:b3:f2:b6:f4:
                    f3:7b:f5:02:fc:1b:2f:25:09:c1:f1:fc:3d:65:06:
                    47:e8:c9:fc:71:3e:5e:1f:af:68:c0:63:53:9b:4d:
                    25:18:20:57:01:31:d9:19:1c:ab:d7:53:a4:fa:34:
                    78:c2:16:31:0e:a6:83:da:ac:1a:36:2e:f5:0a:d4:
                    2c:19:65:44:55:1a:f5:c8:97:91:d7:9d:72:9c:0b:
                    42:c4:98:63:87:ba:ac:8d:bc:18:32:e6:70:f7:b0:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:30:02:1F:CC:80:F6:12:D5:46:6C:AB:76:20:26:45:F5:3E:09
            X509v3 Authority Key Identifier:
                keyid:C0:1B:13:8E:E5:02:88:D5:35:67:AA:C0:D4:D0:6D:2F:86:B3:07:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBsTjuUCiNU1Z6rA1NBtL4azB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f0:96:73:93:80:b6:17:c3:a3:fd:60:16:72:8e:7c:d9:e9:
         e9:2b:44:c4:51:3c:f4:38:9a:18:7e:fd:7e:95:db:2c:01:5d:
         6c:78:47:4e:78:2e:45:e0:d3:64:7a:65:20:6f:c9:7e:48:af:
         db:8b:e7:60:2b:92:1d:1d:b3:e0:13:20:44:b3:c6:fe:5c:6f:
         97:e0:f0:d4:8c:db:cf:59:c0:47:57:cd:d0:b5:1b:93:21:72:
         5b:93:7f:8d:80:5f:ce:40:dd:5f:56:bb:de:bd:ca:cf:c1:da:
         18:d8:1e:96:ab:47:d6:c3:6c:70:90:5b:60:c6:79:95:90:b1:
         df:28:a9:ab:25:61:2b:64:46:08:ad:e0:af:3c:2b:c4:e9:c8:
         f2:7f:b9:3c:ac:e4:2f:76:a4:93:11:6a:de:6a:01:d3:62:10:
         d8:37:75:92:c2:88:7b:84:36:e5:02:fd:80:7b:e5:ab:bf:7e:
         e7:25:7e:75:8e:6b:81:a3:45:67:7c:00:04:10:71:cb:f7:4d:
         2f:75:fd:b3:eb:5c:56:1c:21:3a:65:72:e1:32:c6:58:bf:c3:
         8e:8b:26:07:f3:65:7d:16:8a:cf:92:10:6e:86:ac:b6:f1:f0:
         db:ec:90:b8:2b:36:46:49:c6:97:58:8d:7b:55:92:ce:1c:c6:
         5f:bc:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----