Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/C9D3B7260210834DFAC41F1585A1E0A2055065AE.mft
File:                     C9D3B7260210834DFAC41F1585A1E0A2055065AE.mft (raw, json)
Hash identifier:          VpkANYnlSkzOkjvxhps6icUmxe1KJuuB0gJ3AsxtKG0=
Subject key identifier:   00:0B:55:D5:C9:1D:40:16:06:3E:C5:05:A7:6B:4F:42:15:8F:A4:F6
Authority key identifier: C9:D3:B7:26:02:10:83:4D:FA:C4:1F:15:85:A1:E0:A2:05:50:65:AE
Certificate issuer:       /CN=c9d3b7260210834dfac41f1585a1e0a2055065ae
Certificate serial:       50C10C74E24E9C42EEA7E086326056A1F3D0E156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydO3JgIQg036xB8VhaHgogVQZa4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/C9D3B7260210834DFAC41F1585A1E0A2055065AE.mft
Manifest number:          05
Signing time:             Wed 05 Apr 2023 06:22:31 +0000
Manifest this update:     Wed 05 Apr 2023 06:17:31 +0000
Manifest next update:     Thu 06 Apr 2023 07:35:31 +0000
Files and hashes:         1: 34352e3132382e31342e302f32332d3234203d3e2033333230.roa (hash: TEVzRHxvq30Gemjm5HSCgHA34gfkNz3pxZDlbR1xHN4=)
                          2: C9D3B7260210834DFAC41F1585A1E0A2055065AE.crl (hash: olrzAJqfQrpfLQt3ctfzwblImpqkzqQpawK48ntE9FQ=)
                          3: 34352e3132382e31322e302f32332d3234203d3e2033333230.roa (hash: EdGVLVzXnzNZciMgZxgxKlBzYYhBjcxAe6BgVI6JWjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c1:0c:74:e2:4e:9c:42:ee:a7:e0:86:32:60:56:a1:f3:d0:e1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d3b7260210834dfac41f1585a1e0a2055065ae
        Validity
            Not Before: Apr  5 06:17:31 2023 GMT
            Not After : Apr  6 07:35:31 2023 GMT
        Subject: CN=000B55D5C91D4016063EC505A76B4F42158FA4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:6c:e6:ed:7f:3e:c6:2e:7b:20:c1:2b:3e:
                    8d:a9:9b:49:f8:7c:0e:53:63:89:06:d4:65:f7:bc:
                    5b:aa:bf:e2:57:cb:65:77:78:80:04:83:6f:34:e5:
                    ab:20:f8:bd:c0:f8:c8:d4:4e:9d:ae:3b:cb:bf:09:
                    b7:1d:ef:42:5d:91:9d:13:bc:6d:15:d1:37:d4:67:
                    fb:03:e0:7e:41:51:94:e5:f0:36:21:a1:2f:aa:ff:
                    4c:a3:a0:e0:88:2e:52:4c:57:ca:ac:48:71:8c:c8:
                    b6:e7:6b:ce:29:e3:af:94:0c:a8:81:f4:07:cc:69:
                    da:92:40:27:d5:02:1b:d7:fa:65:a3:60:58:bc:90:
                    91:db:fb:2d:fc:9b:cc:73:45:1c:dc:0c:cd:73:0d:
                    a4:8f:eb:aa:7c:32:73:0f:8b:d1:12:8e:b0:18:97:
                    dc:bc:2e:88:ea:71:2d:3c:98:3e:87:4b:06:be:57:
                    56:d7:98:f1:72:15:07:d3:f9:5d:1d:8a:02:ab:f5:
                    4c:a8:7c:46:bf:c9:98:2c:5a:bb:61:8a:54:e3:19:
                    4f:54:44:ad:1c:53:41:0d:dc:c5:41:29:1b:d4:c4:
                    41:26:c7:dd:77:9f:16:bf:87:af:a8:b3:e3:12:bc:
                    95:8e:01:f7:46:43:18:97:98:b1:f0:cd:3b:dc:3b:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:55:D5:C9:1D:40:16:06:3E:C5:05:A7:6B:4F:42:15:8F:A4:F6
            X509v3 Authority Key Identifier:
                keyid:C9:D3:B7:26:02:10:83:4D:FA:C4:1F:15:85:A1:E0:A2:05:50:65:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/C9D3B7260210834DFAC41F1585A1E0A2055065AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydO3JgIQg036xB8VhaHgogVQZa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/C9D3B7260210834DFAC41F1585A1E0A2055065AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:89:2e:00:4a:e6:90:79:cc:63:fc:66:4e:2d:ab:b3:c3:1c:
         f1:de:51:14:1a:0a:33:e9:20:97:b3:91:90:66:df:17:3d:7b:
         fa:65:31:46:7b:a2:e1:b0:2f:bd:a6:0a:43:cf:d1:a8:24:25:
         42:56:da:3a:89:6a:08:ac:c3:0f:d6:e1:ab:d4:a6:a0:47:aa:
         24:a3:22:c5:00:13:d3:1d:44:7e:d5:f8:62:88:c3:bc:88:e8:
         fc:fb:fc:aa:fd:31:36:48:e7:35:72:18:f6:5c:89:35:ef:a5:
         3a:ae:80:23:4a:3c:fa:7e:18:b8:2f:c2:3b:a0:ae:2b:25:21:
         33:6c:86:7a:86:10:8c:27:bd:2d:96:d7:71:87:f5:3c:4c:d2:
         31:35:3b:e4:a3:83:21:27:b9:79:e2:82:9f:90:9b:ab:39:e2:
         12:7d:9d:26:79:58:0e:a7:2d:43:bb:f4:77:e7:a0:ca:ca:ee:
         12:8d:d9:c8:bc:37:45:98:fb:35:b2:e3:d3:b7:59:d4:26:3a:
         65:82:4e:e7:0d:80:87:dc:32:69:88:e7:9d:03:e8:8b:fc:a8:
         5b:68:ff:4a:d5:ad:37:e6:02:37:b0:a4:71:bc:2c:12:93:fd:
         de:04:82:b7:3f:18:ba:cb:4f:7d:14:8b:90:93:87:fe:78:f2:
         1f:0a:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----