Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/08fd9179-4ef9-4b01-ae08-a50baa6ea49b/0/303B5F3197342813299CCE0A66DFEA38B3F52426.mft
File:                     303B5F3197342813299CCE0A66DFEA38B3F52426.mft (raw, json)
Hash identifier:          4EJE86sZ+74Unngji5/mr3ahwHHNcE4tK8hc/xBNGik=
Subject key identifier:   F6:A4:C4:BC:91:AA:BB:94:EB:28:69:F6:13:C2:25:3A:38:C2:CB:C3
Authority key identifier: 30:3B:5F:31:97:34:28:13:29:9C:CE:0A:66:DF:EA:38:B3:F5:24:26
Certificate issuer:       /CN=303b5f3197342813299cce0a66dfea38b3f52426
Certificate serial:       153B352003A1F97B212831E10E1CBBE0E586C2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDtfMZc0KBMpnM4KZt_qOLP1JCY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/08fd9179-4ef9-4b01-ae08-a50baa6ea49b/0/303B5F3197342813299CCE0A66DFEA38B3F52426.mft
Manifest number:          8C
Signing time:             Mon 05 Jun 2023 07:54:23 +0000
Manifest this update:     Mon 05 Jun 2023 07:49:23 +0000
Manifest next update:     Tue 06 Jun 2023 10:18:23 +0000
Files and hashes:         1: 39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa (hash: hgcWN6zVgnYjqaqxLz+ZpE2Vj1StxJ1hD0gIK/hU4go=)
                          2: 303B5F3197342813299CCE0A66DFEA38B3F52426.crl (hash: sPT2muPcE8vH9sj56wjHCMiZDlPYwv1qIjOYvy8uH0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3b:35:20:03:a1:f9:7b:21:28:31:e1:0e:1c:bb:e0:e5:86:c2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303b5f3197342813299cce0a66dfea38b3f52426
        Validity
            Not Before: Jun  5 07:49:23 2023 GMT
            Not After : Jun  6 10:18:23 2023 GMT
        Subject: CN=F6A4C4BC91AABB94EB2869F613C2253A38C2CBC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:c4:2f:ee:01:6a:31:a8:da:a2:09:fa:a0:
                    98:14:83:87:c4:82:4f:f9:95:f7:1b:7e:cc:d3:3d:
                    3d:f5:94:ec:37:10:36:4f:07:a2:f8:05:d6:5b:b1:
                    ef:da:bd:75:ea:89:9a:b1:1d:ce:5b:4d:fa:b3:2f:
                    7a:cb:2a:e3:95:cd:8a:74:77:4b:b7:42:8d:87:bd:
                    b8:49:52:77:cb:b3:29:fb:a6:24:2d:d9:0b:cc:c5:
                    7a:62:89:c7:81:b0:ee:d6:f4:da:8e:4b:ff:b9:ce:
                    c1:75:44:4b:75:ec:03:91:38:81:65:74:d3:6b:51:
                    11:6e:da:c5:0e:75:1b:21:50:f1:d3:89:42:73:21:
                    76:1d:f8:0e:f9:41:29:b7:9c:af:4e:9b:de:cb:60:
                    3d:d7:84:ce:f5:34:bf:68:13:c6:76:2d:0c:3b:fe:
                    c8:ae:f3:8b:d0:a2:ed:5b:40:de:e7:47:2f:7b:1e:
                    f8:7a:3d:2f:6e:62:aa:f0:ea:8d:21:ae:d7:5f:27:
                    d8:dc:88:8f:fb:15:99:7e:a1:97:c8:91:cf:0f:33:
                    a8:7d:2a:2e:a8:6e:64:cc:48:1d:6e:3a:60:84:2b:
                    16:13:60:25:2c:75:29:1d:eb:70:73:56:cd:3a:9a:
                    a7:83:22:ab:24:49:1e:5f:d4:84:f3:98:7b:12:c5:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A4:C4:BC:91:AA:BB:94:EB:28:69:F6:13:C2:25:3A:38:C2:CB:C3
            X509v3 Authority Key Identifier:
                keyid:30:3B:5F:31:97:34:28:13:29:9C:CE:0A:66:DF:EA:38:B3:F5:24:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/08fd9179-4ef9-4b01-ae08-a50baa6ea49b/0/303B5F3197342813299CCE0A66DFEA38B3F52426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDtfMZc0KBMpnM4KZt_qOLP1JCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/08fd9179-4ef9-4b01-ae08-a50baa6ea49b/0/303B5F3197342813299CCE0A66DFEA38B3F52426.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:04:6e:7b:c4:77:3f:37:ee:ea:e5:32:8c:55:06:5e:8b:e7:
         fa:35:47:17:72:6c:4f:5d:7c:38:07:a1:e2:ab:f3:4b:14:ef:
         f6:f7:c3:c6:18:0c:51:12:df:f1:42:7c:b9:4f:89:60:48:fd:
         61:71:31:9d:03:65:fc:49:8c:18:56:0d:d4:8d:f0:a4:90:27:
         fa:57:72:3c:b6:ac:9d:86:97:30:4b:89:cd:92:f0:f1:04:9e:
         c1:1a:d3:d2:1e:d8:a2:08:4b:8e:99:53:d0:5f:45:05:6f:69:
         64:fd:7c:c8:d0:c6:64:1d:69:c7:76:8b:7a:1b:a7:21:3f:26:
         f6:b7:d2:cf:c4:7c:ea:f7:b3:23:d7:f8:9a:cb:4f:28:dd:6b:
         64:bb:f6:31:dd:f5:01:0b:39:71:b2:3b:01:99:51:e0:9a:08:
         bb:94:6f:45:e7:66:7f:c6:ca:f2:14:3f:21:e8:3c:f0:c8:36:
         db:a6:73:71:15:53:e0:99:16:58:71:0b:e7:2a:26:d4:e3:3d:
         97:81:25:b4:cf:3d:4b:7f:e4:49:7a:5d:a6:9c:c7:cd:2f:42:
         ec:0c:a9:30:f6:db:0d:8a:50:f3:3d:e0:49:29:a1:72:2b:e7:
         cf:93:eb:98:81:95:bc:a5:83:07:cd:94:ec:db:29:a4:6f:c8:
         ca:19:f2:1a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFTs1IAOh+XshKDHhDhy74OWGwvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAzYjVmMzE5NzM0MjgxMzI5OWNjZTBhNjZkZmVhMzhi
M2Y1MjQyNjAeFw0yMzA2MDUwNzQ5MjNaFw0yMzA2MDYxMDE4MjNaMDMxMTAvBgNV
BAMTKEY2QTRDNEJDOTFBQUJCOTRFQjI4NjlGNjEzQzIyNTNBMzhDMkNCQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrMQv7gFqMajaogn6oJgUg4fE
gk/5lfcbfszTPT31lOw3EDZPB6L4BdZbse/avXXqiZqxHc5bTfqzL3rLKuOVzYp0
d0u3Qo2HvbhJUnfLsyn7piQt2QvMxXpiiceBsO7W9NqOS/+5zsF1REt17AOROIFl
dNNrURFu2sUOdRshUPHTiUJzIXYd+A75QSm3nK9Om97LYD3XhM71NL9oE8Z2LQw7
/siu84vQou1bQN7nRy97Hvh6PS9uYqrw6o0hrtdfJ9jciI/7FZl+oZfIkc8PM6h9
Ki6obmTMSB1uOmCEKxYTYCUsdSkd63BzVs06mqeDIqskSR5f1ITzmHsSxenLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU9qTEvJGqu5TrKGn2E8IlOjjCy8MwHwYDVR0j
BBgwFoAUMDtfMZc0KBMpnM4KZt/qOLP1JCYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDhmZDkxNzktNGVmOS00YjAxLWFlMDgtYTUwYmFhNmVh
NDliLzAvMzAzQjVGMzE5NzM0MjgxMzI5OUNDRTBBNjZERkVBMzhCM0Y1MjQyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01EdGZNWmMwS0JNcG5NNEtadF9xT0xQ
MUpDWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wOGZkOTE3OS00
ZWY5LTRiMDEtYWUwOC1hNTBiYWE2ZWE0OWIvMC8zMDNCNUYzMTk3MzQyODEzMjk5
Q0NFMEE2NkRGRUEzOEIzRjUyNDI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwRue8R3Pzfu6uUyjFUG
Xovn+jVHF3JsT118OAeh4qvzSxTv9vfDxhgMURLf8UJ8uU+JYEj9YXExnQNl/EmM
GFYN1I3wpJAn+ldyPLasnYaXMEuJzZLw8QSewRrT0h7YoghLjplT0F9FBW9pZP18
yNDGZB1px3aLehunIT8m9rfSz8R86vezI9f4mstPKN1rZLv2Md31AQs5cbI7AZlR
4JoIu5RvRedmf8bK8hQ/Ieg88Mg226ZzcRVT4JkWWHEL5yom1OM9l4EltM89S3/k
SXpdppzHzS9C7AypMPbbDYpQ8z3gSSmhcivnz5PrmIGVvKWDB82U7NsppG/Iyhny
Gg==
-----END CERTIFICATE-----