Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.mft
File:                     B3D614895C94D30810A11D74CA52246DA3BD84FC.mft (raw, json)
Hash identifier:          aVJ0NIleshIrzoNFgOYTzgyDLNuQC85XXIVIwILxtig=
Subject key identifier:   74:D2:15:0F:48:97:24:A8:82:F0:4D:F5:E1:0B:2D:89:1C:BB:F2:28
Authority key identifier: B3:D6:14:89:5C:94:D3:08:10:A1:1D:74:CA:52:24:6D:A3:BD:84:FC
Certificate issuer:       /CN=b3d614895c94d30810a11d74ca52246da3bd84fc
Certificate serial:       4FE95E00619E59BDE524E8707A490A16BF0C661E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9YUiVyU0wgQoR10ylIkbaO9hPw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.mft
Manifest number:          0365
Signing time:             Wed 27 Dec 2023 09:47:54 +0000
Manifest this update:     Wed 27 Dec 2023 09:42:54 +0000
Manifest next update:     Thu 28 Dec 2023 10:24:54 +0000
Files and hashes:         1: 36322e3230342e34352e302f32342d3234203d3e20313336373837.roa (hash: hr6gYJlr5u1kUpXVVZIkmAph1cSJBThS7vlQO+chOGw=)
                          2: B3D614895C94D30810A11D74CA52246DA3BD84FC.crl (hash: hq1BqZMCr6ARP61aWFVSnivpx7AvG8LtEp3MxgsPx6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e9:5e:00:61:9e:59:bd:e5:24:e8:70:7a:49:0a:16:bf:0c:66:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d614895c94d30810a11d74ca52246da3bd84fc
        Validity
            Not Before: Dec 27 09:42:54 2023 GMT
            Not After : Dec 28 10:24:54 2023 GMT
        Subject: CN=74D2150F489724A882F04DF5E10B2D891CBBF228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:a1:6d:92:cf:ed:58:22:0b:8f:77:46:d9:
                    7c:ba:09:42:c8:cf:10:e7:63:e1:5e:ea:bf:d2:8a:
                    e4:3f:97:90:fe:e1:7e:10:c6:bf:17:e0:a4:ff:d5:
                    d2:5d:c3:69:bd:70:4f:2d:5a:f0:a5:6e:6d:4d:09:
                    74:e2:54:fe:f9:b7:b4:41:94:44:ad:8a:59:7e:42:
                    f1:7e:dd:10:aa:27:a7:0c:fc:86:3a:ff:0f:e5:cb:
                    6d:e7:b6:66:b1:50:fa:52:00:22:be:96:f2:ba:d6:
                    0b:85:fe:db:39:c7:75:eb:28:c4:ae:64:51:68:ff:
                    75:6c:eb:5b:46:ac:12:fa:0d:61:c3:59:61:81:66:
                    9b:e2:e3:ec:96:d7:9a:e0:cd:79:78:4e:79:c3:2e:
                    eb:c2:d3:8c:60:78:0d:75:fb:71:4b:ce:e5:99:b9:
                    da:6f:c0:5e:37:26:0c:75:10:74:f3:88:10:4a:3a:
                    08:3f:c1:07:72:d4:53:25:d6:a3:de:de:77:99:56:
                    7f:67:f8:ef:4a:16:f8:67:c7:dd:8c:f5:b8:81:0e:
                    03:39:4b:3a:b1:02:6f:db:b1:16:4f:f4:21:3d:ea:
                    33:99:46:62:9f:58:35:14:9e:eb:c3:2a:da:66:6b:
                    76:35:95:48:8e:3a:6f:83:6f:cc:fc:13:7e:b1:1c:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D2:15:0F:48:97:24:A8:82:F0:4D:F5:E1:0B:2D:89:1C:BB:F2:28
            X509v3 Authority Key Identifier:
                keyid:B3:D6:14:89:5C:94:D3:08:10:A1:1D:74:CA:52:24:6D:A3:BD:84:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9YUiVyU0wgQoR10ylIkbaO9hPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:be:80:50:b6:3c:04:fc:d4:21:b9:65:f4:c0:58:29:72:11:
         59:b6:e8:23:02:62:8c:d8:80:c7:44:ff:44:26:71:05:1a:ff:
         4f:97:c7:02:04:98:7b:7e:dc:b5:ea:42:64:d4:8b:3b:e8:cb:
         2f:ad:50:11:a2:15:90:85:f0:e3:c0:0c:0a:e5:69:db:e5:c8:
         70:04:4d:a7:4c:82:79:58:6f:cc:fb:06:80:de:8e:dc:44:ed:
         ca:6b:98:5b:0a:c1:97:1d:df:68:fc:6c:ba:c4:49:97:26:58:
         9b:da:d5:81:3e:43:c3:de:43:bf:7e:58:84:a0:19:e8:50:c5:
         24:69:a6:0b:2b:67:8b:b6:6e:c5:1d:b6:a7:bc:b2:04:a1:94:
         67:65:68:a5:78:ed:f1:23:9a:e9:29:ba:83:2c:7e:4a:f7:19:
         b9:ed:ea:a4:28:09:20:1a:d8:80:ca:4a:79:8a:2b:0e:44:ab:
         18:5d:f0:2a:75:77:7c:37:d0:4c:f5:78:db:59:14:fa:03:10:
         c8:55:d0:cd:89:f1:8b:c0:97:17:0e:33:ea:bf:9c:14:9e:40:
         a3:9a:75:53:81:a2:a5:f8:74:02:69:ac:84:9d:08:88:78:a1:
         1a:1e:67:c3:96:4d:1a:f2:6e:4b:91:61:52:8f:2b:20:6a:23:
         0c:15:30:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----