Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/FDC1A908766B391E371B6E3F5E6A1141EFE78A48.mft
File:                     FDC1A908766B391E371B6E3F5E6A1141EFE78A48.mft (raw, json)
Hash identifier:          49YCsmNauyh2lsXqMHabbmyqJtEy3ufVBVvEWpnYoA0=
Subject key identifier:   F7:EC:D2:CD:EB:FF:99:34:99:14:96:C8:9F:85:A9:F3:75:17:E3:57
Authority key identifier: FD:C1:A9:08:76:6B:39:1E:37:1B:6E:3F:5E:6A:11:41:EF:E7:8A:48
Certificate issuer:       /CN=fdc1a908766b391e371b6e3f5e6a1141efe78a48
Certificate serial:       28A9F5986BC914FCD06720C493CD9352A2CC4A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cGpCHZrOR43G24_XmoRQe_nikg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/FDC1A908766B391E371B6E3F5E6A1141EFE78A48.mft
Manifest number:          E0
Signing time:             Sun 19 Nov 2023 22:55:03 +0000
Manifest this update:     Sun 19 Nov 2023 22:50:03 +0000
Manifest next update:     Mon 20 Nov 2023 23:14:03 +0000
Files and hashes:         1: FDC1A908766B391E371B6E3F5E6A1141EFE78A48.crl (hash: GRt2hf1PeSzWBUSlyJzjzXQZ6J8rqPGdt1F3J67iQmE=)
                          2: 3138382e36342e3134332e302f32342d3234203d3e20323035323230.roa (hash: hlfvyJG8ogwKoiMqcJcuHt0gGuqJD1S55exOSospGeE=)
                          3: 326130373a316334303a3a2f32392d3438203d3e20323130383833.roa (hash: 0gPh66KhgWgHcKsr2G/yUDyvB3KVu706aNoW2M5Ow+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a9:f5:98:6b:c9:14:fc:d0:67:20:c4:93:cd:93:52:a2:cc:4a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc1a908766b391e371b6e3f5e6a1141efe78a48
        Validity
            Not Before: Nov 19 22:50:03 2023 GMT
            Not After : Nov 20 23:14:03 2023 GMT
        Subject: CN=F7ECD2CDEBFF9934991496C89F85A9F37517E357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:bf:2c:f0:c5:ed:58:da:9c:5c:a6:68:e5:
                    e9:81:91:25:d0:ad:27:1f:b8:b1:0a:bc:2d:70:7e:
                    66:ad:c3:e0:2d:4f:cc:6e:25:44:0f:2b:d5:a4:16:
                    4e:55:c3:01:26:a4:20:80:17:c8:3c:dd:64:06:b2:
                    f1:e9:ed:cd:87:f0:58:18:45:c2:90:6b:63:fa:76:
                    4c:bd:24:51:08:52:a4:96:0f:b8:78:f1:ff:28:00:
                    8e:1b:15:81:7d:73:d5:39:4f:a7:7c:6c:7d:1a:f3:
                    3d:ed:d3:45:b0:9d:77:d6:fc:bd:e1:5b:82:d2:c8:
                    60:1c:12:43:fc:fa:8b:46:2c:f9:d3:05:07:df:28:
                    86:86:12:60:12:53:d4:39:ce:0f:f6:74:d9:76:dc:
                    e0:f0:85:68:81:14:5c:bc:e4:0b:b7:2e:9d:10:a3:
                    54:b9:60:e5:82:a9:b0:69:31:d3:5f:65:8e:f7:29:
                    b1:06:9a:52:40:49:49:1f:2b:ba:45:ec:bf:01:83:
                    24:95:32:2b:0a:5d:da:5d:8b:d2:58:b6:a8:7c:a6:
                    51:e0:13:4c:96:bc:15:1c:06:b5:90:47:b6:2f:f6:
                    2c:21:c3:5a:51:f3:4a:b6:f6:b6:62:e7:65:b1:9e:
                    19:d5:a6:0b:89:25:96:a7:75:23:3b:af:96:63:37:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EC:D2:CD:EB:FF:99:34:99:14:96:C8:9F:85:A9:F3:75:17:E3:57
            X509v3 Authority Key Identifier:
                keyid:FD:C1:A9:08:76:6B:39:1E:37:1B:6E:3F:5E:6A:11:41:EF:E7:8A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/FDC1A908766B391E371B6E3F5E6A1141EFE78A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cGpCHZrOR43G24_XmoRQe_nikg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/FDC1A908766B391E371B6E3F5E6A1141EFE78A48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9b:9b:7a:36:51:21:c5:65:34:24:b3:a7:9e:14:c9:18:c8:
         96:1f:a2:be:79:3e:6b:51:01:f0:cf:7d:5e:96:4f:75:6d:78:
         82:bb:94:ac:95:a6:18:bb:79:7b:b1:4c:34:6a:73:44:99:6f:
         3a:ca:fd:76:0a:70:b7:00:4d:f3:80:12:b7:27:48:2c:7e:e6:
         aa:84:e6:5e:27:1a:3d:4c:80:c0:0a:86:e0:33:9b:38:34:0f:
         fb:17:07:cf:f1:64:0b:5b:c1:30:d3:97:84:b5:a2:d2:1c:3f:
         24:6c:cc:0e:35:1f:be:20:5a:f4:5a:02:0b:b8:5e:33:91:bc:
         24:3f:d4:7b:8e:5d:e8:ea:a8:d6:3e:11:07:b1:81:d5:50:39:
         83:77:a0:2c:81:b6:44:66:82:d9:fb:ef:7e:64:18:af:fc:8a:
         df:27:eb:6c:64:c8:77:2e:d1:93:e4:58:92:60:81:47:44:98:
         39:b3:11:51:6c:ac:21:ec:a1:6d:1c:da:9d:b6:0a:98:d3:64:
         b9:39:49:95:83:68:9d:c5:d1:db:96:c6:89:0e:d9:67:c1:a3:
         a3:45:fe:ea:57:ba:ad:8f:84:81:f3:f7:ea:c8:2a:4d:14:5b:
         39:65:a4:a8:91:e2:bf:b0:24:ea:11:cb:85:b6:dc:7f:c1:14:
         92:7b:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----