Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.mft
File:                     6085227D041EE38A5046749BFCC9B1327B980374.mft (raw, json)
Hash identifier:          1ctsPvCuTpAK6SFuOQzFG/+0M9ytrfdVZGFYNiNUGDg=
Subject key identifier:   33:47:CA:8B:20:B5:C6:C6:6F:86:28:5D:1F:1D:7D:FD:F8:D9:CC:5B
Authority key identifier: 60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
Certificate issuer:       /CN=6085227D041EE38A5046749BFCC9B1327B980374
Certificate serial:       0722F608C4FCFED07A061C2D51DAC0F6FA8A7FF1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.mft
Manifest number:          43
Signing time:             Sun 10 Dec 2023 21:09:20 +0000
Manifest this update:     Sun 10 Dec 2023 21:04:20 +0000
Manifest next update:     Mon 11 Dec 2023 22:15:20 +0000
Files and hashes:         1: 326130353a646663313a633432323a3a2f34382d3438203d3e203437343936.roa (hash: 9XA2hjM84PC03MiEnd7DMPirFdb+gB/dtrB/oBiZtoI=)
                          2: 6085227D041EE38A5046749BFCC9B1327B980374.crl (hash: XtNGISsMS49cQLrZSJJMaOnslbuquqsS6/NHGMbBYSw=)
                          3: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: VuhrRc57Yh+d4FPS5p4z7y+vRIenONiukH/Vc0UeFcQ=)
                          4: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: jmsk0cmae1euOXniUnzZ5okm831w0dKpO+hP+uBAmCo=)
                          5: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: uiMG+NX/xrnBkE4kchcYxnVMlyFtgDX+0xdvrOoTW2Q=)
                          6: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: P3sJvO93p944HO1SKD0jJGHyyDisWWRYCs2ZHUwUqNc=)
                          7: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: vAolBsDDwuYBM/zP7gxkdmJ/QKD0M3lcYhE1eLWGYaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:22:f6:08:c4:fc:fe:d0:7a:06:1c:2d:51:da:c0:f6:fa:8a:7f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085227D041EE38A5046749BFCC9B1327B980374
        Validity
            Not Before: Dec 10 21:04:20 2023 GMT
            Not After : Dec 11 22:15:20 2023 GMT
        Subject: CN=3347CA8B20B5C6C66F86285D1F1D7DFDF8D9CC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:99:17:87:54:77:a4:1c:43:fa:9c:00:5c:
                    d9:4c:c1:2b:ff:7c:75:d7:f3:18:41:3e:44:9f:57:
                    aa:56:f4:1d:4c:84:36:59:ca:9f:08:3b:f3:b7:1a:
                    46:44:43:1f:11:3e:d0:f5:74:ae:0a:47:03:ca:69:
                    82:68:4b:b6:1e:ce:83:8e:55:de:d5:35:9a:64:2c:
                    69:7c:5b:81:d1:ef:65:b0:aa:53:ac:01:9c:6f:f0:
                    86:39:eb:33:a4:85:e1:b3:e6:a2:fc:ba:c8:45:de:
                    b3:88:f1:5f:2d:c0:5f:76:d0:f9:7b:87:7e:53:ab:
                    25:be:be:12:56:5c:1f:9d:8a:99:e3:2f:97:28:5a:
                    21:1c:5e:3a:60:c0:7f:1c:12:66:2c:d7:7f:b3:84:
                    d7:50:d7:f3:ee:4b:6b:b7:05:09:95:29:e9:45:00:
                    09:ea:19:0d:db:16:59:34:3f:bd:72:fc:c6:19:32:
                    bc:3b:9c:c4:c2:b4:4f:a0:d1:b0:c6:56:06:d7:5f:
                    15:ca:33:eb:ba:d6:25:33:eb:ae:e3:2f:3b:9c:d0:
                    5b:dd:c9:ba:0f:43:c3:91:ee:78:b7:1a:63:b5:80:
                    42:8b:65:64:8e:8e:59:d2:38:c4:a0:76:1b:4a:dd:
                    0c:04:79:1c:93:0e:91:ec:e6:ea:8d:5e:c2:62:03:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:47:CA:8B:20:B5:C6:C6:6F:86:28:5D:1F:1D:7D:FD:F8:D9:CC:5B
            X509v3 Authority Key Identifier:
                keyid:60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e4:8b:39:39:d1:09:16:ee:4b:6c:8e:48:9f:34:89:02:da:
         8d:d3:37:54:46:d0:8c:a2:32:97:91:1e:8e:d6:f5:57:5c:4d:
         ba:9f:1e:ab:38:33:6f:7d:1f:59:c9:97:49:e1:74:e3:6b:c4:
         a2:2b:13:ec:d1:40:da:2f:76:a2:34:ce:0e:63:17:44:68:58:
         25:ca:f5:c3:16:e5:9a:bc:8a:9b:82:cd:1f:ee:78:45:f3:d9:
         21:5a:e8:c6:f6:70:1f:38:a9:44:02:29:29:d9:fd:87:8c:b1:
         20:c1:4d:c0:6c:71:de:5f:80:93:76:48:81:1c:01:c2:19:a4:
         48:b5:29:68:0a:b2:04:66:6b:dd:81:ce:0b:66:c0:1b:54:a2:
         46:69:b0:2d:40:a9:40:25:62:69:91:95:68:22:5d:85:5b:65:
         cd:26:79:eb:fe:cc:93:c7:35:99:61:ff:7c:ce:3a:5b:e8:78:
         83:ad:71:0f:16:da:00:db:09:36:cd:a3:5c:4a:69:9a:0a:0f:
         49:3c:d0:be:aa:9f:ba:e7:7c:96:bc:3b:4e:18:fd:5e:94:8e:
         89:e9:50:97:18:9f:66:25:e2:26:cd:bc:68:c9:14:fe:57:1b:
         65:37:24:a9:f7:aa:ea:9f:cf:f0:8a:8d:ff:b8:fd:9f:24:90:
         e6:0c:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----