Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/4/DF71786F96C33C00E59FE4F08F397F68081756A7.mft
File:                     DF71786F96C33C00E59FE4F08F397F68081756A7.mft (raw, json)
Hash identifier:          UwEfVM+mfpjMZU0pftJoEl3XszPuNnrjK1aMGp4hZK4=
Subject key identifier:   1D:DE:89:7D:51:FE:A5:91:C7:2A:D0:67:83:77:67:F7:7A:90:92:EF
Authority key identifier: DF:71:78:6F:96:C3:3C:00:E5:9F:E4:F0:8F:39:7F:68:08:17:56:A7
Certificate issuer:       /CN=df71786f96c33c00e59fe4f08f397f68081756a7
Certificate serial:       6A4296B8E16EAB4FF75AF625D07ABD0F03F0906E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33F4b5bDPADln-Twjzl_aAgXVqc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/4/DF71786F96C33C00E59FE4F08F397F68081756A7.mft
Manifest number:          0186
Signing time:             Sun 31 Dec 2023 08:52:12 +0000
Manifest this update:     Sun 31 Dec 2023 08:47:12 +0000
Manifest next update:     Mon 01 Jan 2024 10:19:12 +0000
Files and hashes:         1: DF71786F96C33C00E59FE4F08F397F68081756A7.crl (hash: QPFezf61q+dZ02TcmyiBgLN7tvfzYHJHr2JnnDRmsKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:42:96:b8:e1:6e:ab:4f:f7:5a:f6:25:d0:7a:bd:0f:03:f0:90:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df71786f96c33c00e59fe4f08f397f68081756a7
        Validity
            Not Before: Dec 31 08:47:12 2023 GMT
            Not After : Jan  1 10:19:12 2024 GMT
        Subject: CN=1DDE897D51FEA591C72AD067837767F77A9092EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:ee:4f:50:1c:93:f0:b6:c8:c1:1b:f0:be:
                    d0:d7:9a:e5:ad:75:cc:bc:2b:e1:8f:0f:5f:f2:54:
                    42:2b:46:e4:39:50:66:de:f4:2c:58:5e:72:bc:54:
                    eb:4c:82:40:ef:0f:d5:f0:22:de:33:80:1c:86:2c:
                    5e:03:93:a0:1d:44:fc:ea:d9:13:0d:f1:69:77:5c:
                    df:89:3a:59:e8:d8:8e:59:cc:91:f0:b7:3b:9b:6d:
                    72:86:f5:74:f7:ae:74:56:5c:5e:47:e4:41:e4:f2:
                    72:14:5b:ec:bb:16:29:28:c9:d6:ca:38:49:b3:14:
                    07:86:48:39:94:76:ef:e8:0d:93:2e:da:79:23:89:
                    19:95:b8:db:d9:a8:fe:da:93:f7:b6:08:41:6b:2c:
                    9f:6a:ea:eb:db:60:f4:9a:85:4c:09:2f:6a:bb:fb:
                    b0:cb:64:78:ae:7d:1a:bd:64:60:21:12:5b:51:c1:
                    fa:2d:2c:bc:06:e4:9f:88:db:2e:4b:43:58:35:e1:
                    ab:1f:10:b7:fd:0c:d0:27:15:c4:49:54:fb:02:ba:
                    b3:6a:da:46:54:f8:79:d0:3f:42:33:3b:c1:f7:da:
                    26:f2:73:20:49:dd:0e:e6:3e:9c:92:57:ff:9f:d6:
                    f8:d4:47:c7:a8:5b:80:d7:ed:4c:12:d5:86:05:aa:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DE:89:7D:51:FE:A5:91:C7:2A:D0:67:83:77:67:F7:7A:90:92:EF
            X509v3 Authority Key Identifier:
                keyid:DF:71:78:6F:96:C3:3C:00:E5:9F:E4:F0:8F:39:7F:68:08:17:56:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/4/DF71786F96C33C00E59FE4F08F397F68081756A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33F4b5bDPADln-Twjzl_aAgXVqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/4/DF71786F96C33C00E59FE4F08F397F68081756A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0b:d5:a6:d2:ed:77:8b:a3:9f:8f:82:52:0b:bd:1d:cf:df:
         36:db:3b:1d:95:58:90:07:00:ab:95:d3:06:a4:b5:3e:14:de:
         cc:c6:5e:e6:76:45:33:09:bc:e7:bd:a8:ed:f1:44:f9:d6:ab:
         92:b5:8f:35:43:b4:73:6c:49:96:4b:13:fd:95:87:fd:f2:fb:
         60:f0:bc:8e:46:90:69:80:b2:3c:7e:9f:cc:69:89:59:9c:22:
         a6:cd:4d:ff:10:ae:14:08:c4:81:93:8c:27:d3:5f:99:c9:16:
         96:e9:9a:bc:59:d0:d4:b4:fa:02:d5:c6:5c:ac:02:4b:1a:c0:
         aa:ce:03:f0:e3:35:fb:2a:18:ed:84:5e:55:d0:cd:41:f5:27:
         ff:8f:37:d5:8c:fa:94:82:2b:80:8a:f8:7b:4c:42:51:6e:c3:
         cb:1d:52:d5:a1:b5:28:d8:70:50:5d:71:22:85:ad:66:89:4d:
         f7:56:cb:e1:09:de:45:16:ce:0c:0d:6f:71:e3:56:75:c8:59:
         95:74:da:43:cb:9a:b1:c7:06:01:91:93:7d:bb:43:4f:13:49:
         87:8a:23:f7:67:74:ad:3f:72:97:4b:f4:2c:58:a4:43:6b:e1:
         9c:64:b7:88:36:32:28:06:e0:63:ce:bd:29:91:b3:37:bd:ad:
         dc:85:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----