Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.mft
File:                     7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.mft (raw, json)
Hash identifier:          E6nZhefbnM2O2HoF8xctStl2XraGLX4KSJTyU7V/3TA=
Subject key identifier:   31:63:24:CB:EE:0E:4B:7A:08:4E:B5:90:38:14:E0:78:74:86:1A:A3
Authority key identifier: 7C:F5:8A:51:FB:1A:F5:AF:75:86:05:0D:F9:A4:D2:0D:EE:D5:E2:58
Certificate issuer:       /CN=7cf58a51fb1af5af7586050df9a4d20deed5e258
Certificate serial:       5A4522D7C8D26E50814128C108FCE66737B176C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPWKUfsa9a91hgUN-aTSDe7V4lg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.mft
Manifest number:          06
Signing time:             Wed 27 Sep 2023 14:36:40 +0000
Manifest this update:     Wed 27 Sep 2023 14:31:40 +0000
Manifest next update:     Thu 28 Sep 2023 18:08:40 +0000
Files and hashes:         1: 7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.crl (hash: fcb1l1umb2fZnxiAECTCU2o3I8cltjlZUGNYKwGVhew=)
                          2: 323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa (hash: +x76BVaxnvS58YUNhnc2ba4qVUjOrp5KQWvj+XuK+do=)
                          3: 323030313a3637633a313239633a3a2f34382d3438203d3e20323030393735.roa (hash: jA9jY0dvmgIsSMiw47W8X92LxTzwIwOzJBbP3AtjHdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:45:22:d7:c8:d2:6e:50:81:41:28:c1:08:fc:e6:67:37:b1:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf58a51fb1af5af7586050df9a4d20deed5e258
        Validity
            Not Before: Sep 27 14:31:40 2023 GMT
            Not After : Sep 28 18:08:40 2023 GMT
        Subject: CN=316324CBEE0E4B7A084EB5903814E07874861AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:28:97:e9:eb:8d:e9:2d:9f:79:ae:dd:3f:
                    4e:41:b6:d2:6e:66:1b:78:f4:6a:9d:05:26:95:47:
                    2b:2a:ec:5f:7e:ef:54:17:06:55:b5:f1:bd:37:cb:
                    5c:d5:0e:65:24:ed:ae:c4:46:f6:84:6f:3f:28:b5:
                    bb:28:55:eb:8b:b9:a3:0d:c2:8a:7d:ba:31:d3:77:
                    fd:66:93:65:e8:27:cb:2b:2c:83:bd:59:bf:3e:b1:
                    b4:94:7b:bb:77:de:3e:56:f6:43:30:b6:c6:35:c7:
                    e9:09:e8:27:78:a0:75:3a:7a:7c:b1:2c:c7:98:e0:
                    96:55:bf:2b:38:eb:a6:c2:19:2f:ae:11:04:4f:c0:
                    05:42:8e:50:9d:79:77:d2:cc:29:a1:d2:b0:68:ae:
                    3f:84:05:ff:7e:1b:fb:36:95:f7:d3:2e:34:ea:ba:
                    9d:22:4a:b6:52:09:b4:1c:d3:06:01:c9:af:d0:78:
                    dc:99:ed:72:b9:cc:19:d5:29:8c:9d:b3:a7:64:d3:
                    65:ae:70:76:61:8c:17:e0:83:08:25:ae:c2:d4:c4:
                    d0:04:f7:67:30:e3:7a:ef:16:8f:62:ca:0c:d6:b2:
                    a5:a9:f2:69:c1:72:41:76:2f:55:3a:20:67:d7:8f:
                    f5:5d:74:08:fe:b6:bb:8a:46:23:ac:f1:3f:74:5c:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:63:24:CB:EE:0E:4B:7A:08:4E:B5:90:38:14:E0:78:74:86:1A:A3
            X509v3 Authority Key Identifier:
                keyid:7C:F5:8A:51:FB:1A:F5:AF:75:86:05:0D:F9:A4:D2:0D:EE:D5:E2:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPWKUfsa9a91hgUN-aTSDe7V4lg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:36:a3:3f:08:f4:e4:2a:46:f1:7f:86:e3:88:ac:d2:7b:2a:
         92:1e:07:17:fd:12:91:5c:2d:fa:d0:72:ec:6b:ca:e2:b9:24:
         85:80:f5:2c:8f:6a:29:72:54:c8:c6:b1:0e:85:ef:7a:65:fc:
         f5:91:35:fb:4e:c9:4a:03:2d:4c:92:a9:ab:c9:6d:6f:cc:e5:
         c7:f2:7e:50:56:80:06:a1:97:22:4e:1a:1d:78:f0:b8:87:95:
         6a:59:c7:7a:e5:da:66:be:d7:ee:0e:8b:c4:b5:13:5e:dd:d4:
         32:20:32:49:c0:0a:97:d3:e1:a3:fc:50:3a:c6:42:a4:b4:4f:
         3e:f4:43:fb:6d:15:a2:59:d7:72:52:6a:af:4f:66:c3:9b:bf:
         56:31:a3:7b:42:d7:36:45:87:74:c7:c2:0b:8b:d7:48:7d:21:
         f2:0b:bf:ee:6f:02:dd:7a:9c:7f:1a:58:97:90:60:d6:e4:5e:
         f2:ed:ec:1f:89:96:39:69:a4:21:c2:b8:ca:78:08:6d:70:f7:
         98:f1:eb:cc:39:76:a1:02:7b:1d:f4:4e:0f:3e:65:2b:5e:40:
         19:b8:d0:44:2e:37:16:cb:f5:5c:86:55:85:04:cb:44:02:87:
         92:c0:9a:04:49:07:f2:de:b4:a2:5d:ca:43:b3:23:4b:cf:b2:
         b8:59:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----