Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft
File:                     9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft (raw, json)
Hash identifier:          b16WH6lT2q68CrTpHSkqnCzft94ugLEg0cylLCPVkTM=
Subject key identifier:   98:95:8C:BE:43:02:5F:48:DA:D4:75:A6:52:0B:B5:66:66:E9:68:BC
Authority key identifier: 9B:4C:46:6B:CC:F6:BF:97:C3:EE:0F:C7:F0:32:21:24:24:27:87:8E
Certificate issuer:       /CN=9b4c466bccf6bf97c3ee0fc7f03221242427878e
Certificate serial:       2989F05E56C473C088FBC74B47BA7395CFD92F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0xGa8z2v5fD7g_H8DIhJCQnh44.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft
Manifest number:          05
Signing time:             Sun 26 Nov 2023 10:57:31 +0000
Manifest this update:     Sun 26 Nov 2023 10:52:31 +0000
Manifest next update:     Mon 27 Nov 2023 13:41:31 +0000
Files and hashes:         1: AS47272.asa (hash: z133DC5mdxf6INSPB4Kb/0ADNera2VZ6SSSEX2PY6GU=)
                          2: 9B4C466BCCF6BF97C3EE0FC7F03221242427878E.crl (hash: 4A1qOFVEP095gsD/3YHdfL0aAihjf96lbkcYoA3F0xY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:89:f0:5e:56:c4:73:c0:88:fb:c7:4b:47:ba:73:95:cf:d9:2f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b4c466bccf6bf97c3ee0fc7f03221242427878e
        Validity
            Not Before: Nov 26 10:52:31 2023 GMT
            Not After : Nov 27 13:41:31 2023 GMT
        Subject: CN=98958CBE43025F48DAD475A6520BB56666E968BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:63:35:be:66:8d:9c:97:16:56:73:8f:09:
                    9a:a9:46:c5:78:aa:2d:5a:21:d8:be:90:ab:e6:f7:
                    29:73:ee:47:18:66:c1:d9:52:54:a9:d4:8c:dc:da:
                    20:22:cd:de:da:b6:bd:08:06:e4:f9:c3:59:66:89:
                    26:35:28:c4:17:c1:8d:5b:4a:57:6e:59:13:33:7f:
                    65:90:6a:d2:87:1a:7c:a8:a6:f3:29:e9:f1:3f:e0:
                    54:5e:50:e9:13:6d:5c:3b:32:60:dd:d5:18:23:96:
                    bb:ad:b5:24:aa:3a:67:84:83:d4:d7:f2:cf:53:1e:
                    df:bc:b4:5b:3c:40:ef:15:fe:ca:36:d6:c0:a4:98:
                    40:ad:64:9c:30:2f:55:70:43:98:eb:e7:e1:ed:4e:
                    af:a4:5c:6a:2a:74:c7:32:1d:98:89:56:35:01:3f:
                    7c:77:88:61:66:dd:c6:23:a4:4f:bf:2a:c1:81:a2:
                    34:7f:dc:f3:4c:5b:fd:43:96:87:46:9c:5b:c6:5e:
                    ef:57:9d:46:a2:dc:ce:89:09:27:79:59:82:52:12:
                    de:46:61:d8:e9:4b:a7:1a:60:40:9c:51:29:66:95:
                    00:66:59:82:f4:17:13:f7:ca:f7:d8:ad:ce:ea:36:
                    b2:5c:5e:b7:2a:91:00:73:43:2d:93:ef:c5:de:ae:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:95:8C:BE:43:02:5F:48:DA:D4:75:A6:52:0B:B5:66:66:E9:68:BC
            X509v3 Authority Key Identifier:
                keyid:9B:4C:46:6B:CC:F6:BF:97:C3:EE:0F:C7:F0:32:21:24:24:27:87:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0xGa8z2v5fD7g_H8DIhJCQnh44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:69:c9:f4:5d:11:6d:3c:b4:0b:e3:53:12:b8:a3:f3:33:dd:
         d3:8a:00:5d:1a:26:a6:8b:5e:44:e4:1b:39:cd:62:13:01:48:
         3c:3a:e0:2b:d9:6a:cd:90:92:d0:fd:c2:5d:23:44:a4:4b:19:
         d9:33:c0:f7:82:d7:76:29:58:0b:0a:11:e1:0b:33:05:f5:67:
         e1:d8:10:81:a3:bd:9c:32:d3:63:aa:10:ca:17:cb:7d:5e:d0:
         ef:e0:51:17:0e:3d:d5:6c:1e:f6:4d:4a:dc:ba:ac:6e:b4:c0:
         8b:d7:de:33:34:a4:c9:95:63:cc:0b:05:d9:50:c8:ba:fb:af:
         b2:26:44:8d:86:29:e7:83:9d:b9:a2:e6:2b:56:07:75:62:2e:
         31:d3:a1:8b:d9:05:01:58:17:1d:2a:1c:35:94:c7:eb:c5:ef:
         69:83:4e:e2:35:75:ce:94:be:f9:ff:f9:2b:14:6b:15:b6:aa:
         f9:71:da:6a:bf:43:c0:83:64:92:cf:9b:40:e0:75:cd:c6:54:
         06:a5:dc:46:13:e8:fc:23:f9:a1:72:d1:85:fa:bf:4a:22:9e:
         3b:19:d8:f1:a8:f8:d5:c4:f5:3b:45:ec:22:e6:e9:9d:9a:40:
         76:95:7e:8f:c2:b3:47:86:fd:b1:85:96:55:9f:bc:e7:d9:2a:
         b6:b1:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----