Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.mft
File:                     C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.mft (raw, json)
Hash identifier:          IlMl932cs46x+IGUbFhttijHVmHTYOCPjt1ryoHDK14=
Subject key identifier:   7E:C5:CA:79:43:20:5B:C5:EF:25:4D:BE:5E:0A:E7:40:B2:DD:A8:15
Authority key identifier: C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Certificate issuer:       /CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Certificate serial:       7D3BCD6056D5D644DA70BEDCA36972E93221DD72
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.mft
Manifest number:          6E
Signing time:             Mon 17 Jul 2023 10:43:07 +0000
Manifest this update:     Mon 17 Jul 2023 10:38:07 +0000
Manifest next update:     Tue 18 Jul 2023 11:41:07 +0000
Files and hashes:         1: 326130363a396638343a313530303a3a2f34302d3438203d3e20313939313737.roa (hash: I0Y1hSehTXZyTqffWWgTw3+n18YYqGYbh7uI1FT6fcs=)
                          2: 326130363a396638343a313730303a3a2f34302d3438203d3e203630393030.roa (hash: m0KVx+mLJXQpPZ9z9AzZrffzmdiU/NplehPgcVWuVm0=)
                          3: 326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa (hash: ORYK2Gw+ahKZ8UjzCTeCja24NIygbWylecbxxFsZbbQ=)
                          4: C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl (hash: 8WB3V/18m6a1djI9xjIkOUhU8uevsBiXLkgKaBQ/xEQ=)
                          5: 326130363a396638303a3a2f32392d3438203d3e203537383730.roa (hash: T7L+toZYQZS1SF/QXIvjuEZpG5qF16eO75uJaFC/XFI=)
                          6: A8707AD424B98E28A709FFA2BFDF7DB63930D093.cer (hash: P62sjXt5of5o2U7633Wz7nHvNuLMNCcZl5MHdcY2BtY=)
                          7: 326130363a396638353a663030303a3a2f33362d3438203d3e203630393030.roa (hash: J1vujVXy9uIbIDe+P9ZAf10KfrzrxfGQWdtrP1FD3n0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3b:cd:60:56:d5:d6:44:da:70:be:dc:a3:69:72:e9:32:21:dd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
        Validity
            Not Before: Jul 17 10:38:07 2023 GMT
            Not After : Jul 18 11:41:07 2023 GMT
        Subject: CN=7EC5CA7943205BC5EF254DBE5E0AE740B2DDA815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:4c:9d:97:b6:25:04:65:b2:a7:e9:40:cb:
                    62:82:94:b5:06:e0:81:e6:47:c9:81:62:45:d7:ca:
                    c7:08:07:e3:12:7e:86:8c:95:87:18:e7:d4:b0:0c:
                    85:12:af:92:e1:8c:17:00:85:82:6b:ca:8b:bf:17:
                    45:a7:4a:4e:3e:72:9b:90:15:d3:62:2c:c8:8e:f4:
                    e6:3b:7f:92:3e:1b:88:3c:f6:9c:e3:87:9b:0b:7b:
                    12:b1:af:c0:64:b9:9d:ee:3f:84:b3:9b:9d:a8:04:
                    cc:c1:32:7f:9c:8c:0b:73:18:4f:28:b6:46:7f:5e:
                    b9:00:68:67:92:e9:da:49:53:d1:54:d9:dd:63:93:
                    c8:fa:31:5e:ac:49:63:5d:8c:28:29:d2:77:f0:dc:
                    7f:b6:39:9a:87:c9:6a:2f:41:b9:2a:92:02:8e:ff:
                    93:f0:1f:6a:94:65:f9:e7:f4:21:58:28:58:be:c7:
                    ca:4c:df:11:79:08:ac:cc:2d:99:89:a7:43:60:7a:
                    82:ad:f1:34:e7:29:9e:9d:f4:0d:ed:58:d5:5d:22:
                    0c:60:28:3b:1c:ce:b5:d9:50:3f:e1:ff:6a:06:62:
                    48:bf:ba:4a:d9:80:ea:84:31:28:20:11:e3:47:43:
                    c2:16:f8:90:0c:c2:3a:50:34:17:9f:12:65:d7:9e:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C5:CA:79:43:20:5B:C5:EF:25:4D:BE:5E:0A:E7:40:B2:DD:A8:15
            X509v3 Authority Key Identifier:
                keyid:C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f0:3b:dd:d3:92:10:c5:61:03:52:61:fa:38:fd:36:96:fa:
         b5:dc:18:97:0a:aa:33:a6:45:77:2a:5e:fb:ef:1f:37:1c:f2:
         ea:0d:77:91:37:7d:7c:63:3b:7c:bc:1e:2a:e3:6b:e6:41:d9:
         84:29:89:19:00:27:0f:58:b4:c3:35:72:bf:5b:34:1a:81:9b:
         b9:b6:d3:00:3d:f9:4f:bc:ac:ae:d9:cf:92:0d:59:69:66:62:
         33:0d:57:99:4f:84:75:eb:b1:80:4b:70:a7:87:f7:85:33:0e:
         7f:9d:fb:42:8d:ec:19:69:63:c2:1c:8d:09:b7:8c:de:d0:5f:
         96:fb:4c:bf:c6:6c:84:f2:7d:45:0d:d5:ef:64:3b:8b:8c:a2:
         e3:90:bc:51:70:2a:b4:24:69:13:3c:11:0c:10:dd:31:cd:f1:
         da:6f:ac:01:9d:6d:ea:f3:ba:06:c2:1f:40:c3:64:5c:9f:0c:
         d1:79:87:bf:92:20:68:0b:bc:b8:00:a6:37:bc:0f:5d:23:7a:
         1b:4e:25:e3:6d:c1:14:74:61:fa:e6:c6:79:01:ec:30:57:0e:
         26:94:e9:fe:1d:73:fa:e7:9a:ea:b0:e3:fd:4d:26:b8:24:3d:
         b8:f4:17:b5:3e:33:7a:05:53:b8:08:d4:07:0f:66:a9:41:d8:
         b4:ea:95:8c
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUfTvNYFbV1kTacL7co2ly6TIh3XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIyNzA1NTdFMTNCQUE3Q0U3QzRBOEUwODIwQ0RGRTNF
QTMyMjI0OTAeFw0yMzA3MTcxMDM4MDdaFw0yMzA3MTgxMTQxMDdaMDMxMTAvBgNV
BAMTKDdFQzVDQTc5NDMyMDVCQzVFRjI1NERCRTVFMEFFNzQwQjJEREE4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWUydl7YlBGWyp+lAy2KClLUG
4IHmR8mBYkXXyscIB+MSfoaMlYcY59SwDIUSr5LhjBcAhYJryou/F0WnSk4+cpuQ
FdNiLMiO9OY7f5I+G4g89pzjh5sLexKxr8BkuZ3uP4Szm52oBMzBMn+cjAtzGE8o
tkZ/XrkAaGeS6dpJU9FU2d1jk8j6MV6sSWNdjCgp0nfw3H+2OZqHyWovQbkqkgKO
/5PwH2qUZfnn9CFYKFi+x8pM3xF5CKzMLZmJp0NgeoKt8TTnKZ6d9A3tWNVdIgxg
KDsczrXZUD/h/2oGYki/ukrZgOqEMSggEeNHQ8IW+JAMwjpQNBefEmXXnvhbAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUfsXKeUMgW8XvJU2+XgrnQLLdqBUwHwYDVR0j
BBgwFoAUwicFV+E7qnznxKjgggzf4+oyIkkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0MTFkNmItMzYxNS00YTg2LTg2NzMtMzQwY2UyZjIy
NmVlLzYvQzIyNzA1NTdFMTNCQUE3Q0U3QzRBOEUwODIwQ0RGRTNFQTMyMjI0OS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQzIyNzA1NTdFMTNCQUE3Q0U3QzRBOEUwODIwQ0RGRTNFQTMy
MjI0OS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQxMWQ2Yi0z
NjE1LTRhODYtODY3My0zNDBjZTJmMjI2ZWUvNi9DMjI3MDU1N0UxM0JBQTdDRTdD
NEE4RTA4MjBDREZFM0VBMzIyMjQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvA73dOSEMVhA1Jh+jj9
Npb6tdwYlwqqM6ZFdype++8fNxzy6g13kTd9fGM7fLweKuNr5kHZhCmJGQAnD1i0
wzVyv1s0GoGbubbTAD35T7ysrtnPkg1ZaWZiMw1XmU+EdeuxgEtwp4f3hTMOf537
Qo3sGWljwhyNCbeM3tBflvtMv8ZshPJ9RQ3V72Q7i4yi45C8UXAqtCRpEzwRDBDd
Mc3x2m+sAZ1t6vO6BsIfQMNkXJ8M0XmHv5IgaAu8uACmN7wPXSN6G04l423BFHRh
+ubGeQHsMFcOJpTp/h1z+uea6rDj/U0muCQ9uPQXtT4zegVTuAjUBw9mqUHYtOqV
jA==
-----END CERTIFICATE-----