Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.mft
File:                     EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.mft (raw, json)
Hash identifier:          inWM68jJZ29/OsmQSl5X6EGxDfbLxMO7+pSlyy9u4l8=
Subject key identifier:   A5:5B:F4:0D:6C:88:67:42:52:27:05:DD:4A:0F:A9:C3:34:EF:4A:BA
Authority key identifier: EB:AF:FB:93:6E:16:DE:1D:04:CE:D5:D5:36:8D:CC:3C:77:9B:98:BB
Certificate issuer:       /CN=ebaffb936e16de1d04ced5d5368dcc3c779b98bb
Certificate serial:       659FACB905CEB263404780D44CC51604D90EF636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66_7k24W3h0EztXVNo3MPHebmLs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.mft
Manifest number:          63
Signing time:             Sat 31 Dec 2022 10:43:56 +0000
Manifest this update:     Sat 31 Dec 2022 10:38:56 +0000
Manifest next update:     Sun 01 Jan 2023 14:32:56 +0000
Files and hashes:         1: 326131333a3830303a3a2f32392d3239203d3e203531303838.roa (hash: +g/aPpBttd+i4e+JBXY9u8IKwosWzJhVLzATyDGsg+s=)
                          2: 3134362e31392e39372e302f32342d3234203d3e203531303838.roa (hash: elFXGX9oCeLx6HDWmvdmVk6xstYNsUeANCtC1WBBQ4g=)
                          3: EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.crl (hash: OBJJPAZm/p2wAjTrUuoEc2uzXJjXz5YcmaKme4NEdBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9f:ac:b9:05:ce:b2:63:40:47:80:d4:4c:c5:16:04:d9:0e:f6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebaffb936e16de1d04ced5d5368dcc3c779b98bb
        Validity
            Not Before: Dec 31 10:38:56 2022 GMT
            Not After : Jan  1 14:32:56 2023 GMT
        Subject: CN=A55BF40D6C886742522705DD4A0FA9C334EF4ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:03:0f:48:ad:c2:3e:cd:66:db:4e:05:36:
                    46:65:e0:ea:0b:a6:08:79:ef:9c:fc:85:3a:ba:36:
                    68:92:41:30:0d:05:84:f3:f5:ca:6b:53:6e:16:36:
                    99:b9:ca:79:c8:43:96:3a:1d:93:ec:00:da:a9:ce:
                    f7:cd:78:4c:d1:0a:0a:e2:b4:48:93:8b:f0:c0:cb:
                    a4:77:24:3e:ac:61:b9:bf:fe:91:dd:b9:14:4b:0a:
                    cc:6e:64:7d:e0:eb:03:98:3b:9b:e4:ca:62:f5:80:
                    4b:99:b3:f7:94:f0:98:2e:99:9f:9f:2a:47:05:e8:
                    49:22:e9:9a:fe:95:3e:3a:a8:08:60:5b:69:c7:63:
                    34:ac:e4:fd:ac:1e:a2:95:41:85:df:4e:7e:d6:3f:
                    75:1d:4d:ca:6c:b8:44:30:e2:fb:44:38:3f:1f:74:
                    00:29:0c:6c:8e:39:37:92:23:97:f0:9b:98:66:1d:
                    19:9c:a5:8a:45:fb:fb:b9:b7:ae:96:e1:4d:e5:3c:
                    db:63:0f:e6:64:47:a4:16:30:2b:86:fa:73:47:c4:
                    de:18:2e:ba:9d:0e:7d:03:ef:17:36:70:b6:b2:37:
                    67:4c:82:2b:da:fa:ff:6b:a6:35:c9:69:ba:24:fb:
                    19:7b:d6:c5:69:8e:7f:0c:4d:12:06:40:d8:01:ff:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5B:F4:0D:6C:88:67:42:52:27:05:DD:4A:0F:A9:C3:34:EF:4A:BA
            X509v3 Authority Key Identifier:
                keyid:EB:AF:FB:93:6E:16:DE:1D:04:CE:D5:D5:36:8D:CC:3C:77:9B:98:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66_7k24W3h0EztXVNo3MPHebmLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e3:12:9b:39:b5:6a:ee:51:bb:a5:1e:4a:49:ab:85:06:9d:
         47:06:43:4b:6e:a8:bb:23:a1:3e:89:01:db:88:4c:93:43:ef:
         9f:d0:a5:2c:44:66:b5:25:3c:19:04:33:04:64:03:a0:ab:9a:
         06:4c:23:46:f3:b9:83:31:ea:1f:28:21:f4:88:17:24:a4:92:
         d2:75:2c:57:ae:15:04:61:e0:82:c0:fc:b9:5c:fa:61:ce:f9:
         0a:ae:9f:21:87:f1:61:ac:c6:3c:09:90:0d:59:7f:87:8d:4b:
         54:36:2c:5b:2b:38:08:25:42:bf:56:f8:ce:40:e1:a2:bb:2c:
         a8:88:51:db:81:28:f9:95:9b:be:8c:7d:3d:34:76:31:64:7d:
         30:4f:24:98:ec:d1:dd:a0:db:52:5f:fe:9f:42:93:e3:a4:57:
         7d:05:fa:07:e6:a8:ca:75:11:55:ed:4a:19:d9:47:ad:42:3e:
         19:08:4a:4f:7d:88:0e:af:e2:86:75:28:4e:5f:d2:83:4a:b3:
         74:ef:0c:c1:05:e4:10:78:22:fe:6e:08:fa:8f:d7:a6:2a:0e:
         02:d5:c5:a0:1b:27:c1:69:1a:7a:b9:e8:53:27:00:77:00:d4:
         cf:52:12:4c:40:eb:94:19:15:54:a9:c0:98:58:80:5b:80:b0:
         5b:a1:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----