Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.mft
File:                     96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.mft (raw, json)
Hash identifier:          JtlhnSQxLAyctfvlA0R2UGkT9pun+pIhmZhVRJkTEjg=
Subject key identifier:   8D:A7:74:03:38:67:C1:7E:E4:09:0B:55:FF:72:0B:E8:BF:CF:5A:20
Authority key identifier: 96:D0:EC:0D:9F:1A:81:63:6A:AB:CE:EF:A2:CE:15:21:EF:D2:D2:CD
Certificate issuer:       /CN=96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD
Certificate serial:       7647A4FD998AC32A5D6819DB22C0A5AC72173573
Authority info access:    rsync://rpki.co/repo/HYSP/0/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.mft
Manifest number:          96
Signing time:             Sun 09 Apr 2023 17:51:23 +0000
Manifest this update:     Sun 09 Apr 2023 17:46:23 +0000
Manifest next update:     Mon 10 Apr 2023 18:24:23 +0000
Files and hashes:         1: 96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.crl (hash: +JcPX7BpCOzTeHmk7qpn3PLxo0MFRkiv9kj/161bCoM=)
                          2: 323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa (hash: roK5aAh8OlvRTS28b+fyNIk7lmgufka1vo1JjnR+VMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:47:a4:fd:99:8a:c3:2a:5d:68:19:db:22:c0:a5:ac:72:17:35:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD
        Validity
            Not Before: Apr  9 17:46:23 2023 GMT
            Not After : Apr 10 18:24:23 2023 GMT
        Subject: CN=8DA774033867C17EE4090B55FF720BE8BFCF5A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:4d:a2:9f:c5:fb:41:33:a1:61:53:b2:49:
                    ff:bb:3c:b1:71:3a:72:e8:b5:7e:3c:12:79:44:c4:
                    70:df:5a:86:26:6d:1e:5d:28:71:26:84:ea:bc:a2:
                    68:a6:a3:3f:49:05:01:cf:8f:77:04:42:51:3f:5b:
                    c0:8e:40:00:88:34:ff:ab:f2:c2:4d:a2:36:37:3d:
                    4e:ed:9f:ca:a3:cf:29:7a:59:53:c1:06:f3:d0:0a:
                    c4:42:15:f6:ce:e2:ae:5a:53:0a:e4:cc:ef:b9:27:
                    1b:bb:b4:a8:cb:fb:c7:7d:87:72:f1:cf:98:7c:18:
                    88:20:9f:88:c1:45:97:f3:e4:85:0b:7d:d5:08:f5:
                    c9:53:8a:d1:7a:5e:6f:60:cf:c9:89:ef:bf:f5:74:
                    97:80:fb:cf:54:31:9e:2f:08:f9:b6:50:ac:70:97:
                    91:a8:e7:fb:1f:e9:ac:d0:55:da:7c:c1:5b:5d:8e:
                    c8:8e:d1:b7:5d:d1:87:f4:a1:bc:09:aa:6d:37:e7:
                    19:e1:ea:4d:1d:fe:67:ef:b9:e0:fe:af:be:f1:dc:
                    b2:3b:ec:99:9f:bf:ca:8a:70:02:b4:74:f5:46:b4:
                    23:8d:6c:38:44:50:41:a6:c9:c5:1c:3f:c0:b9:6f:
                    08:95:8b:51:6c:ee:a2:73:16:c7:bd:c0:f5:45:a7:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A7:74:03:38:67:C1:7E:E4:09:0B:55:FF:72:0B:E8:BF:CF:5A:20
            X509v3 Authority Key Identifier:
                keyid:96:D0:EC:0D:9F:1A:81:63:6A:AB:CE:EF:A2:CE:15:21:EF:D2:D2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c5:63:34:d7:04:7a:43:0c:e0:cb:2b:d9:2d:80:16:f2:7c:
         93:f8:e8:e4:cb:91:60:02:ff:81:81:81:82:d7:19:d9:01:93:
         85:ef:17:ff:4c:94:75:f6:86:6a:20:6a:f5:9d:23:4a:54:31:
         76:05:d1:c6:a6:c1:eb:42:ea:ef:af:05:46:4e:84:be:1e:e8:
         b0:d2:da:f3:c2:d0:11:12:4a:6c:2a:7b:a2:ff:08:49:03:51:
         1c:2e:23:32:cf:61:6b:fa:38:6c:64:8e:c9:95:67:c6:5b:62:
         4e:3e:63:70:df:29:e2:87:c0:8d:de:f1:cf:ba:f2:47:0f:32:
         d3:a7:f5:43:05:76:0d:e8:5a:e4:d7:5e:53:02:78:27:87:23:
         d6:0c:b8:db:c4:6f:bb:49:1f:0a:85:87:f5:c7:2d:3f:ef:b6:
         fe:c9:e2:81:5f:59:b0:6e:5d:de:c6:54:b3:d4:ff:e5:6b:12:
         b3:89:2e:c4:e8:c4:85:9f:55:5a:68:c4:54:bf:a4:46:d6:56:
         9f:2b:e7:e0:d6:fb:58:36:e7:cd:a5:ba:f8:92:7d:0e:52:14:
         9c:0d:76:29:61:51:21:19:76:41:62:ec:99:0b:69:5b:2a:bd:
         11:85:9f:13:2c:10:c7:5f:33:f2:c6:91:0b:87:97:46:df:ba:
         ec:6e:f1:06
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUdkek/ZmKwypdaBnbIsClrHIXNXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZEMEVDMEQ5RjFBODE2MzZBQUJDRUVGQTJDRTE1MjFF
RkQyRDJDRDAeFw0yMzA0MDkxNzQ2MjNaFw0yMzA0MTAxODI0MjNaMDMxMTAvBgNV
BAMTKDhEQTc3NDAzMzg2N0MxN0VFNDA5MEI1NUZGNzIwQkU4QkZDRjVBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULk2in8X7QTOhYVOySf+7PLFx
OnLotX48EnlExHDfWoYmbR5dKHEmhOq8omimoz9JBQHPj3cEQlE/W8COQACINP+r
8sJNojY3PU7tn8qjzyl6WVPBBvPQCsRCFfbO4q5aUwrkzO+5Jxu7tKjL+8d9h3Lx
z5h8GIggn4jBRZfz5IULfdUI9clTitF6Xm9gz8mJ77/1dJeA+89UMZ4vCPm2UKxw
l5Go5/sf6azQVdp8wVtdjsiO0bdd0Yf0obwJqm035xnh6k0d/mfvueD+r77x3LI7
7Jmfv8qKcAK0dPVGtCONbDhEUEGmycUcP8C5bwiVi1Fs7qJzFse9wPVFpxlxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUjad0AzhnwX7kCQtV/3IL6L/PWiAwHwYDVR0j
BBgwFoAUltDsDZ8agWNqq87vos4VIe/S0s0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzIvOTZEMEVDMEQ5RjFBODE2MzZBQUJDRUVGQTJDRTE1MjFFRkQyRDJDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kuY28v
cmVwby9IWVNQLzAvOTZEMEVDMEQ5RjFBODE2MzZBQUJDRUVGQTJDRTE1MjFFRkQy
RDJDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMi85NkQwRUMwRDlGMUE4MTYzNkFB
QkNFRUZBMkNFMTUyMUVGRDJEMkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8VjNNcEekMM4Msr2S2A
FvJ8k/jo5MuRYAL/gYGBgtcZ2QGThe8X/0yUdfaGaiBq9Z0jSlQxdgXRxqbB60Lq
768FRk6Evh7osNLa88LQERJKbCp7ov8ISQNRHC4jMs9ha/o4bGSOyZVnxltiTj5j
cN8p4ofAjd7xz7ryRw8y06f1QwV2Deha5NdeUwJ4J4cj1gy428Rvu0kfCoWH9cct
P++2/snigV9ZsG5d3sZUs9T/5WsSs4kuxOjEhZ9VWmjEVL+kRtZWnyvn4Nb7WDbn
zaW6+JJ9DlIUnA12KWFRIRl2QWLsmQtpWyq9EYWfEywQx18z8saRC4eXRt+67G7x
Bg==
-----END CERTIFICATE-----