Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.mft
File:                     C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.mft (raw, json)
Hash identifier:          2srKB4qQ9BNRHIiRTQ1wM0ht+UsloFO9J8GahhREpWA=
Subject key identifier:   CC:5E:1D:6E:D3:00:96:A9:4A:E5:31:A1:49:9A:AE:13:DA:84:E5:3A
Authority key identifier: C2:60:A3:C7:B7:D3:D2:1A:ED:99:F1:5D:F5:BE:E1:F5:8E:4E:EA:7D
Certificate issuer:       /CN=c260a3c7b7d3d21aed99f15df5bee1f58e4eea7d
Certificate serial:       41AEF9DDAE43B828209C60DC7B02B119BE5FAF08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmCjx7fT0hrtmfFd9b7h9Y5O6n0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.mft
Manifest number:          0526
Signing time:             Wed 20 Dec 2023 19:18:42 +0000
Manifest this update:     Wed 20 Dec 2023 19:13:42 +0000
Manifest next update:     Thu 21 Dec 2023 22:24:42 +0000
Files and hashes:         1: 3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa (hash: R/JEE9o765tE39Vl3phZZRW65TYjDrbD40t0UN1jBOE=)
                          2: C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.crl (hash: 8oRy4jq4r1dIu7FJ8M5FA2HVHmbYt7VSxYzZp689T6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ae:f9:dd:ae:43:b8:28:20:9c:60:dc:7b:02:b1:19:be:5f:af:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c260a3c7b7d3d21aed99f15df5bee1f58e4eea7d
        Validity
            Not Before: Dec 20 19:13:42 2023 GMT
            Not After : Dec 21 22:24:42 2023 GMT
        Subject: CN=CC5E1D6ED30096A94AE531A1499AAE13DA84E53A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:66:54:4b:a1:04:53:de:af:a1:37:8a:2b:
                    b5:ef:06:09:ec:07:0e:76:22:cb:a9:b5:6d:bd:fa:
                    0e:cf:90:0c:4f:4c:9b:31:45:97:51:bc:c6:98:de:
                    2b:c2:0a:21:84:57:0d:99:0b:03:55:58:b2:b1:00:
                    60:1e:5a:91:38:3e:be:8f:66:04:3e:13:d3:8c:be:
                    52:ce:59:f3:2d:d2:cd:86:f8:a3:2d:e1:95:40:cc:
                    28:6b:aa:59:d9:8b:15:79:8b:10:a9:48:59:9d:53:
                    9c:fd:5e:c0:20:13:1e:21:6e:f7:ca:c0:ab:45:f7:
                    d6:4e:20:8f:f4:a8:ea:e5:67:26:42:d4:c3:6a:cd:
                    11:75:52:a4:23:f9:73:3a:2b:f5:b3:89:fb:ac:61:
                    f7:61:8c:c1:12:94:7d:d0:93:ed:5d:10:54:30:6d:
                    39:bf:53:db:ce:8c:b4:94:15:f9:dd:7d:e3:1d:3f:
                    c2:d0:02:8f:2f:17:3c:44:bd:c3:14:b4:40:ac:55:
                    1c:25:7d:a6:71:c8:7b:c3:67:aa:ae:28:13:11:d8:
                    8f:f9:45:21:f4:a9:37:72:68:53:5c:ec:ff:07:ce:
                    53:1d:b9:e9:a2:6b:58:fc:9e:15:fc:63:8d:b6:59:
                    4d:27:d6:6a:59:ec:65:0d:9e:c4:72:8d:67:66:c4:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5E:1D:6E:D3:00:96:A9:4A:E5:31:A1:49:9A:AE:13:DA:84:E5:3A
            X509v3 Authority Key Identifier:
                keyid:C2:60:A3:C7:B7:D3:D2:1A:ED:99:F1:5D:F5:BE:E1:F5:8E:4E:EA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmCjx7fT0hrtmfFd9b7h9Y5O6n0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:16:b8:bb:f5:fb:85:95:80:dd:a1:59:39:cc:5a:9f:75:dd:
         bc:c4:8e:23:d4:84:be:f4:77:ae:14:05:5c:12:50:94:6d:ea:
         fc:35:9b:39:aa:a3:07:6a:2c:ad:3c:3d:23:b1:db:b9:20:61:
         db:72:6e:16:75:fd:5d:46:6e:ed:38:2e:50:92:54:a2:63:a5:
         f8:39:47:fe:fb:a5:28:b9:37:7c:f5:d1:5e:85:af:c2:1a:56:
         fd:0a:2f:87:59:b1:62:12:d4:32:78:9a:c2:7b:05:02:44:34:
         ba:a6:aa:65:cc:a5:25:8f:98:5a:41:af:24:fd:b4:63:2f:cf:
         13:f9:ef:19:a9:48:cb:52:8f:01:21:6f:ba:09:1d:c4:bb:55:
         1c:af:1a:8d:4d:e6:e7:69:65:6f:a2:e5:20:47:d2:74:46:c9:
         0d:c0:7f:58:f7:88:bd:7a:f1:ad:58:d5:50:38:c4:0a:89:58:
         54:dc:5b:ed:c0:e6:2d:73:97:70:b2:e2:0f:2c:8e:2d:0c:88:
         eb:72:f9:b3:82:5a:57:b2:9d:9e:88:9a:71:76:fa:49:f8:06:
         01:eb:d3:1f:5f:1c:96:80:73:18:61:d4:4d:7d:8f:e5:e2:ed:
         77:8d:5a:e0:fa:1e:b2:29:6e:3a:25:be:95:3c:4c:07:3b:4d:
         ee:47:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----