Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4e4c505e-f236-4169-9f4e-3ad99578db6c/0/5D8E5883FA17E93EDA29C9A5076BABA8978A88D6.mft
File:                     5D8E5883FA17E93EDA29C9A5076BABA8978A88D6.mft (raw, json)
Hash identifier:          7DaHzlJmp351N019o6cmkioTsDfUVDLzjf+xKoC5fVI=
Subject key identifier:   75:C9:14:FC:CC:BA:91:DB:5B:57:C4:77:EE:37:AB:DA:F9:E6:77:0A
Authority key identifier: 5D:8E:58:83:FA:17:E9:3E:DA:29:C9:A5:07:6B:AB:A8:97:8A:88:D6
Certificate issuer:       /CN=5d8e5883fa17e93eda29c9a5076baba8978a88d6
Certificate serial:       59A5DA433917566704E3BA8CAF2ED35CD9421446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XY5Yg_oX6T7aKcmlB2urqJeKiNY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4e4c505e-f236-4169-9f4e-3ad99578db6c/0/5D8E5883FA17E93EDA29C9A5076BABA8978A88D6.mft
Manifest number:          DB
Signing time:             Fri 15 Dec 2023 10:05:59 +0000
Manifest this update:     Fri 15 Dec 2023 10:00:59 +0000
Manifest next update:     Sat 16 Dec 2023 11:11:59 +0000
Files and hashes:         1: 5D8E5883FA17E93EDA29C9A5076BABA8978A88D6.crl (hash: jmPwuxyPvNAQ0yFoTNlX3ggGgwfz8++UKa93JXBLGoo=)
                          2: 3139352e3231312e35312e302f32342d3234203d3e203536393133.roa (hash: WapPbQ8klxvQK2lams8DcCYrTuMGKqT8AaYJ3AcO+Sc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a5:da:43:39:17:56:67:04:e3:ba:8c:af:2e:d3:5c:d9:42:14:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8e5883fa17e93eda29c9a5076baba8978a88d6
        Validity
            Not Before: Dec 15 10:00:59 2023 GMT
            Not After : Dec 16 11:11:59 2023 GMT
        Subject: CN=75C914FCCCBA91DB5B57C477EE37ABDAF9E6770A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bd:47:4c:ec:64:35:82:78:95:e2:e8:14:d8:
                    b0:1e:64:47:4c:24:e0:e8:4a:36:a4:27:8b:70:39:
                    1f:21:af:96:12:06:bd:86:e8:1f:ba:d3:24:bc:d0:
                    d9:29:59:11:cd:cf:41:02:0b:14:0d:7c:ce:c5:22:
                    64:49:66:4c:1c:f7:a2:9f:01:37:06:f5:c8:cb:c2:
                    75:79:3b:39:8a:f7:e0:32:ef:91:4b:e1:ad:20:e9:
                    74:08:2b:90:7c:fa:c0:de:4b:44:c5:70:50:56:b0:
                    b6:1e:c1:dd:91:cb:95:92:e7:95:74:67:02:63:8f:
                    24:0c:e5:6a:8e:e6:63:08:82:f4:c0:04:ab:ce:11:
                    e6:dc:31:32:40:90:44:26:4b:f6:56:08:ab:29:a5:
                    79:33:f4:00:14:82:b6:1b:1f:6d:5f:ab:57:a1:db:
                    8a:ef:fb:48:9a:0a:e5:37:bd:ef:11:b5:3f:c0:14:
                    17:ea:b4:1d:43:63:cc:5e:0a:90:2f:3f:e3:b8:ee:
                    6b:1f:c5:ae:8a:60:ef:9a:e5:f5:9e:d8:87:f3:d5:
                    2f:b1:da:75:17:f0:74:54:1b:55:81:a6:56:b4:2d:
                    2e:d5:c7:33:e6:bb:fc:e6:c0:ec:5c:0e:26:5d:0c:
                    0f:78:80:7e:16:1e:f8:b0:8e:25:79:28:e9:68:4b:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C9:14:FC:CC:BA:91:DB:5B:57:C4:77:EE:37:AB:DA:F9:E6:77:0A
            X509v3 Authority Key Identifier:
                keyid:5D:8E:58:83:FA:17:E9:3E:DA:29:C9:A5:07:6B:AB:A8:97:8A:88:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4e4c505e-f236-4169-9f4e-3ad99578db6c/0/5D8E5883FA17E93EDA29C9A5076BABA8978A88D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY5Yg_oX6T7aKcmlB2urqJeKiNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e4c505e-f236-4169-9f4e-3ad99578db6c/0/5D8E5883FA17E93EDA29C9A5076BABA8978A88D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:24:fd:2d:c6:30:c7:7e:f1:2c:11:f3:ab:61:45:9c:19:e6:
         65:1b:b3:5b:ad:c7:63:a9:3a:01:f3:34:3f:61:2e:b1:f1:33:
         e6:15:2e:b4:e5:fd:d0:cf:7f:40:61:30:f3:cb:19:19:c4:39:
         94:bd:d3:81:f4:6e:74:2b:b0:fb:ca:44:13:d2:ba:b0:02:84:
         7f:f1:ef:8b:37:51:d9:dd:13:d6:da:da:04:00:7c:c0:2a:8e:
         89:6b:f2:09:8d:c4:a6:88:a1:d2:84:14:59:37:00:3d:46:35:
         9b:3b:a8:8f:a8:19:10:0c:97:81:cc:c4:d5:e8:6b:fa:ad:69:
         60:07:57:05:fd:d0:1d:1e:4d:5c:a0:1e:6f:a3:d2:be:bc:87:
         dd:bb:ca:42:1a:3c:13:ce:16:f1:85:a8:46:4d:da:2d:dd:1d:
         79:3a:55:79:34:11:b2:68:09:32:ad:a8:f2:dd:b7:43:c6:4e:
         c5:99:ab:a0:29:41:34:8b:68:10:b9:12:ee:c9:39:8c:ec:7e:
         eb:6f:39:14:ea:b1:f7:54:46:44:a7:4f:4a:60:6e:98:45:4d:
         c0:f7:38:47:39:6e:e8:02:97:2e:4e:ab:9e:e6:2f:a7:0e:55:
         c3:ad:52:a7:59:56:2e:6a:e8:d0:dd:7b:c6:72:a0:ba:f1:5a:
         82:ea:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----