Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21cb3348-665e-40cf-aa19-756be95ea30a/0/A3E7A32BE15C79D485D775E2845D85B1C7440281.mft
File:                     A3E7A32BE15C79D485D775E2845D85B1C7440281.mft (raw, json)
Hash identifier:          ObOt0fazhakCWIv6M4rumCn7aXrvAyVzqx1NKya7Keo=
Subject key identifier:   FF:F0:4A:49:B5:F6:EC:CF:57:19:6E:8C:A1:FD:F7:24:2D:91:A6:2E
Authority key identifier: A3:E7:A3:2B:E1:5C:79:D4:85:D7:75:E2:84:5D:85:B1:C7:44:02:81
Certificate issuer:       /CN=a3e7a32be15c79d485d775e2845d85b1c7440281
Certificate serial:       4B805B8AEF31A3323AA89C1766AFBCD121FB1F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-ejK-FcedSF13XihF2FscdEAoE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21cb3348-665e-40cf-aa19-756be95ea30a/0/A3E7A32BE15C79D485D775E2845D85B1C7440281.mft
Manifest number:          0A
Signing time:             Mon 23 Oct 2023 00:13:23 +0000
Manifest this update:     Mon 23 Oct 2023 00:08:23 +0000
Manifest next update:     Tue 24 Oct 2023 02:31:23 +0000
Files and hashes:         1: AS47311.asa (hash: wSd7WTku9qR8OBW0X6D1WrPs5h3EAO0ifok2iP4ekXE=)
                          2: A3E7A32BE15C79D485D775E2845D85B1C7440281.crl (hash: hNcrtw5bdkAkZ79zWNoSCC/+vFnpZnu3tx2/o6bCzo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:80:5b:8a:ef:31:a3:32:3a:a8:9c:17:66:af:bc:d1:21:fb:1f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e7a32be15c79d485d775e2845d85b1c7440281
        Validity
            Not Before: Oct 23 00:08:23 2023 GMT
            Not After : Oct 24 02:31:23 2023 GMT
        Subject: CN=FFF04A49B5F6ECCF57196E8CA1FDF7242D91A62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:bd:8f:38:87:d3:70:53:f1:c1:76:ce:38:
                    7d:47:ba:ba:af:08:61:98:3b:0c:97:12:6d:c7:0a:
                    82:c4:f4:a1:fd:14:58:97:fa:43:68:35:ae:96:23:
                    73:cd:94:cd:59:27:3e:14:d6:d6:ca:dc:5e:c4:e5:
                    b0:9e:a7:21:bf:19:48:cf:5e:d5:d4:29:d3:d6:3c:
                    83:a1:6c:64:e4:1f:bb:c4:7f:a8:00:b5:95:91:46:
                    e9:2c:52:a7:1a:5f:f3:63:0f:6a:31:5b:2d:ef:b1:
                    1c:f9:01:43:1d:b3:85:90:e8:b5:61:02:31:67:74:
                    95:26:3e:94:41:c8:1b:3c:b8:77:48:38:49:ce:41:
                    89:f5:c7:bd:b0:03:9b:94:77:33:bb:97:c2:89:5c:
                    70:65:68:41:28:7b:5b:56:b0:be:82:10:5c:d6:7c:
                    91:f1:9e:25:6c:44:4a:bb:bf:64:22:92:f6:a6:c9:
                    06:2b:81:50:ab:ec:49:20:7c:a3:4b:ff:2a:45:34:
                    4c:63:0f:a5:75:ee:52:6d:ec:33:eb:72:12:48:cb:
                    8a:2f:40:e6:8c:fa:af:e9:9b:94:89:67:bd:d2:72:
                    a3:dc:75:64:cc:fd:00:09:84:69:77:61:9e:e8:26:
                    aa:6f:28:ce:55:eb:43:43:76:3b:d7:62:24:fb:1c:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F0:4A:49:B5:F6:EC:CF:57:19:6E:8C:A1:FD:F7:24:2D:91:A6:2E
            X509v3 Authority Key Identifier:
                keyid:A3:E7:A3:2B:E1:5C:79:D4:85:D7:75:E2:84:5D:85:B1:C7:44:02:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21cb3348-665e-40cf-aa19-756be95ea30a/0/A3E7A32BE15C79D485D775E2845D85B1C7440281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-ejK-FcedSF13XihF2FscdEAoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21cb3348-665e-40cf-aa19-756be95ea30a/0/A3E7A32BE15C79D485D775E2845D85B1C7440281.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:de:f9:6c:e8:cd:73:f0:6b:4e:76:df:c8:0a:c0:21:9a:27:
         59:e8:55:7f:d9:14:83:ea:2c:3a:12:a7:c4:9f:22:d7:e1:49:
         e7:0d:16:33:ee:31:10:1d:75:2a:32:76:fb:83:2c:c1:f7:4e:
         07:7f:ca:d3:a7:28:3a:2c:81:ab:6c:5d:48:93:0a:46:45:91:
         9a:af:db:59:d4:a6:8c:29:a3:a6:31:d4:b1:4c:48:66:ce:24:
         29:a9:96:9d:25:08:0d:b6:b1:15:79:d6:ea:24:b6:6e:72:b3:
         73:6a:dc:40:6d:f4:d1:71:27:93:fd:d9:37:80:8a:0e:b4:d2:
         c8:a8:13:e4:4f:0b:68:4d:3f:6a:61:e4:d3:56:74:69:af:ec:
         e1:92:bf:11:03:c5:9c:96:da:20:cc:da:af:af:73:2c:81:d0:
         d7:46:14:ee:35:71:f2:06:57:cb:50:40:04:68:d6:99:4d:7a:
         c0:50:24:05:f5:00:23:d0:8d:f7:80:3b:17:f3:46:e8:80:db:
         bd:a4:fc:63:4f:d4:69:14:d2:ae:5c:38:23:a0:70:e6:ec:97:
         cf:30:b3:46:be:06:44:0f:11:88:79:d4:43:da:b2:fc:38:53:
         78:3b:e6:be:44:a6:10:26:b6:67:69:a6:b4:69:d8:de:9c:ac:
         2c:00:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----