Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03571b7c-de3c-4f1b-9f7a-784a035be109/0/4CD01338E4E114BD5824D41840D1BDCE8B452A50.mft
File:                     4CD01338E4E114BD5824D41840D1BDCE8B452A50.mft (raw, json)
Hash identifier:          synUHDFn5+uRXh+R7ykevY7AtoDkkcHttzdpsReth0s=
Subject key identifier:   C2:28:DB:DA:D0:D3:D7:68:A8:C8:B3:E0:75:92:08:F0:10:63:A0:9C
Authority key identifier: 4C:D0:13:38:E4:E1:14:BD:58:24:D4:18:40:D1:BD:CE:8B:45:2A:50
Certificate issuer:       /CN=4cd01338e4e114bd5824d41840d1bdce8b452a50
Certificate serial:       4BE7E2D6091B84C053CFA0381DF15C635F043EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNATOOThFL1YJNQYQNG9zotFKlA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/03571b7c-de3c-4f1b-9f7a-784a035be109/0/4CD01338E4E114BD5824D41840D1BDCE8B452A50.mft
Manifest number:          02
Signing time:             Mon 25 Dec 2023 23:27:05 +0000
Manifest this update:     Mon 25 Dec 2023 23:22:05 +0000
Manifest next update:     Wed 27 Dec 2023 00:05:05 +0000
Files and hashes:         1: 4CD01338E4E114BD5824D41840D1BDCE8B452A50.crl (hash: iCgyw18hpVPi0nPtk1hx2lCgZVV0RvS5LPLTsS2fT2s=)
                          2: AS215978.asa (hash: 30eFgmVad0FNjKRcUklUSGWpJe+26EqIdY5gHnIyPvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e7:e2:d6:09:1b:84:c0:53:cf:a0:38:1d:f1:5c:63:5f:04:3e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd01338e4e114bd5824d41840d1bdce8b452a50
        Validity
            Not Before: Dec 25 23:22:05 2023 GMT
            Not After : Dec 27 00:05:05 2023 GMT
        Subject: CN=C228DBDAD0D3D768A8C8B3E0759208F01063A09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:49:aa:cc:fd:0f:dd:3f:15:a7:6e:5d:d4:
                    a6:56:e6:bc:62:7e:75:52:db:e1:6f:22:d2:c7:bf:
                    ff:5c:dd:e9:f1:0d:66:86:2b:4b:21:b8:b9:f6:7a:
                    13:55:66:25:c0:66:ad:78:29:18:d2:21:29:34:69:
                    b3:6a:f2:b1:6e:e2:57:1a:56:ec:70:27:55:c2:7e:
                    c2:f9:7e:49:bf:c7:ff:66:d4:41:d7:b9:3d:f0:21:
                    91:7c:83:65:5d:b5:64:6a:05:a9:a0:ab:20:1f:1b:
                    6b:35:ce:6b:4f:27:66:16:d1:78:6a:27:7a:90:77:
                    9f:fd:e5:19:c5:ca:d6:52:73:e5:09:6f:db:a3:9f:
                    a2:ef:cc:8a:2b:0e:eb:77:dc:31:52:c0:da:3f:0f:
                    04:a7:f6:77:e3:6f:6f:80:55:45:41:ea:cc:14:a0:
                    a2:b8:f8:79:09:5b:6d:3b:72:7c:1f:25:64:04:6a:
                    4c:8f:2d:fa:86:bd:49:bf:ba:f7:44:4d:03:a2:32:
                    43:68:a4:47:2c:65:57:44:a8:cf:cb:b8:0e:46:65:
                    94:8b:0f:b1:3f:4c:36:b0:e2:b2:ba:bd:f6:fe:c0:
                    91:77:bf:49:24:e9:3d:10:ed:87:c3:51:49:c1:d7:
                    c1:e3:64:cc:dc:09:8c:f7:dc:e9:fd:42:1b:a4:74:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:DB:DA:D0:D3:D7:68:A8:C8:B3:E0:75:92:08:F0:10:63:A0:9C
            X509v3 Authority Key Identifier:
                keyid:4C:D0:13:38:E4:E1:14:BD:58:24:D4:18:40:D1:BD:CE:8B:45:2A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/03571b7c-de3c-4f1b-9f7a-784a035be109/0/4CD01338E4E114BD5824D41840D1BDCE8B452A50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNATOOThFL1YJNQYQNG9zotFKlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03571b7c-de3c-4f1b-9f7a-784a035be109/0/4CD01338E4E114BD5824D41840D1BDCE8B452A50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:36:72:17:55:2a:8e:48:50:d2:ff:37:af:6c:0a:9f:53:28:
         96:02:97:01:ff:23:eb:5d:1d:da:ce:04:ea:b9:ae:da:ed:98:
         60:e4:2a:f1:1d:8a:7e:4d:5a:fe:c3:26:18:af:fd:28:f9:57:
         0b:5c:9d:91:82:60:80:56:31:f0:5c:19:ce:99:28:76:73:72:
         52:90:6f:47:d9:88:76:e3:6a:fc:21:d8:69:bd:69:c0:a5:95:
         40:d8:f1:4c:95:b3:6f:fc:92:a4:5a:ad:2d:8c:3b:f2:52:70:
         3b:ba:98:a7:78:cf:51:0b:cc:d1:6e:cc:97:c9:f6:af:40:f6:
         ef:7d:63:37:2f:ad:9a:17:b1:f7:4d:2a:a6:9c:01:db:9a:c9:
         80:52:a8:7c:d2:be:99:88:1c:b8:da:f0:2f:58:0d:4c:67:ed:
         f8:44:d4:b9:aa:ca:83:fc:42:92:00:99:99:7c:d4:46:85:dd:
         d9:ab:0b:8a:93:06:cb:35:8c:82:1a:db:e7:b5:05:11:13:05:
         7a:c5:5a:83:c4:b1:15:f5:42:9e:23:cb:2c:eb:09:89:93:e1:
         a8:db:24:93:dd:0a:fd:32:cd:fa:db:be:f8:e8:e2:5e:b2:e0:
         65:7b:03:89:f0:dc:82:8b:55:71:8f:91:53:26:ee:ca:4f:f0:
         88:26:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----