Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/3/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.mft
File:                     851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.mft (raw, json)
Hash identifier:          L6jU3nsVXgRlMRpqBsCnn6vi7Ixsde1/XgVBfkuujq0=
Subject key identifier:   BE:56:08:C0:3F:C4:6B:0B:9F:B2:35:5B:A7:F1:86:C5:D6:12:1F:A2
Authority key identifier: 85:1E:6B:12:F9:EB:E8:76:8A:DF:14:2B:31:8E:2E:2E:4C:C9:0A:E8
Certificate issuer:       /CN=851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8
Certificate serial:       629952C9B94A6345D2A2F5E01EF79622F67CAA87
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/3/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.mft
Manifest number:          73
Signing time:             Sun 17 Sep 2023 23:12:54 +0000
Manifest this update:     Sun 17 Sep 2023 23:07:54 +0000
Manifest next update:     Mon 18 Sep 2023 23:58:54 +0000
Files and hashes:         1: 851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.crl (hash: dmUMZNH9MgcWg/ofp3KIC7mygwz+0GyAAhxEjxyK9ZQ=)
                          2: 326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa (hash: WD2wK2g6fffxt9IFE2UP4xNChLzYtEdXvU9PqkG7fgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:99:52:c9:b9:4a:63:45:d2:a2:f5:e0:1e:f7:96:22:f6:7c:aa:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8
        Validity
            Not Before: Sep 17 23:07:54 2023 GMT
            Not After : Sep 18 23:58:54 2023 GMT
        Subject: CN=BE5608C03FC46B0B9FB2355BA7F186C5D6121FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:1b:86:39:34:40:30:d2:e4:29:cf:6b:a8:
                    d4:de:5f:10:c8:45:7e:7e:b1:04:87:7a:a8:7e:ef:
                    af:f6:96:ff:18:e3:d9:d0:a0:40:c8:94:7c:1d:30:
                    2d:4f:61:5e:81:dc:ee:22:ae:45:5f:5d:c1:79:5d:
                    46:d5:6a:3d:15:b6:e2:ce:d6:d1:3b:52:bd:38:89:
                    ec:b7:71:af:0d:31:5a:4b:52:d6:79:cf:f0:80:df:
                    cf:54:5a:97:59:5a:cd:c2:da:01:e8:6c:e7:ea:27:
                    c2:90:ed:ae:6d:91:e6:08:eb:08:60:51:6c:89:df:
                    14:c2:09:a0:bc:b8:80:fb:34:20:65:b0:54:8c:3d:
                    fd:24:87:8e:cd:28:fb:03:99:e9:90:b1:94:c1:65:
                    7d:74:83:b5:89:8a:64:54:b7:79:06:6f:d7:c3:87:
                    77:af:09:c4:df:68:a6:c4:91:e5:d1:94:4c:52:2f:
                    04:04:50:aa:00:2e:26:78:91:9a:1c:46:a7:2c:30:
                    82:42:3b:6b:09:9c:03:4e:fa:34:0c:82:34:37:20:
                    f3:99:8e:dc:18:42:e1:37:c4:ee:6b:e8:63:d7:43:
                    af:56:81:4d:f5:a3:d8:34:17:36:5e:52:f8:54:f8:
                    e4:02:2f:8d:2e:8f:99:49:60:8e:0b:5e:dd:0e:d9:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:08:C0:3F:C4:6B:0B:9F:B2:35:5B:A7:F1:86:C5:D6:12:1F:A2
            X509v3 Authority Key Identifier:
                keyid:85:1E:6B:12:F9:EB:E8:76:8A:DF:14:2B:31:8E:2E:2E:4C:C9:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/3/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/3/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0d:d0:8a:5f:d8:11:08:03:b0:13:92:f0:6c:f4:09:28:fd:
         c0:05:fc:02:9c:38:94:ab:91:f2:92:70:ac:c9:1a:21:56:ab:
         cb:e3:88:6a:2a:95:bf:40:d0:a6:0f:c7:2e:a9:80:3b:c3:3b:
         5f:7d:e9:31:dc:47:df:61:0d:b5:87:0c:25:f4:51:87:f6:36:
         a7:ce:8b:71:9e:b6:e0:e7:15:e4:34:30:53:c5:dc:97:70:e9:
         db:85:d7:5d:15:3c:37:56:d8:9c:26:ab:d4:25:e4:50:75:45:
         ab:c4:4f:b1:44:5d:77:db:da:aa:f7:e0:21:eb:43:03:40:27:
         72:66:9f:64:4a:50:dc:bb:93:f9:6a:7d:09:ff:71:9c:3a:48:
         77:aa:8c:68:b0:4d:c2:54:db:ef:b6:57:84:82:2e:bd:e4:0f:
         c0:2d:fd:13:c9:4a:c3:8b:27:c1:c2:e9:63:95:84:e5:cb:64:
         53:d6:5d:b3:b1:ab:08:b1:dc:10:1c:5b:9f:81:13:71:e3:f4:
         0c:2f:66:7c:de:2f:c5:3d:ee:8b:78:68:2b:86:3d:07:d6:12:
         9a:04:09:1f:78:99:2a:01:77:d4:6e:a3:a6:41:c5:0a:1c:e9:
         c9:66:c2:a3:1c:9f:38:94:ba:01:59:b3:39:c7:27:c0:ca:24:
         06:08:9e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----