Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.mft
File:                     EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.mft (raw, json)
Hash identifier:          ApQ2U5ShPXAtCKfv+v26s6BwQcb4zvnlpNnZlSkXPlw=
Subject key identifier:   40:CC:03:AD:DB:D3:C1:D1:CA:F1:18:9A:1F:DF:E9:A6:25:A5:98:27
Authority key identifier: EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
Certificate issuer:       /CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
Certificate serial:       0CC1B453F16EE79209376DBC68B112F0B5E687AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.mft
Manifest number:          0154
Signing time:             Wed 29 Nov 2023 05:45:58 +0000
Manifest this update:     Wed 29 Nov 2023 05:40:58 +0000
Manifest next update:     Thu 30 Nov 2023 08:25:58 +0000
Files and hashes:         1: 3231322e32332e3231392e302f32342d3234203d3e203631333137.roa (hash: TooHw1s64/pEeT6ufKcCsjP/Sjk3uJ3LjjvTj5vPmpI=)
                          2: EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.crl (hash: LRTCUpRDSN3ghZqBwaiYgpEGA7//gJyqxeM1GssknaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c1:b4:53:f1:6e:e7:92:09:37:6d:bc:68:b1:12:f0:b5:e6:87:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
        Validity
            Not Before: Nov 29 05:40:58 2023 GMT
            Not After : Nov 30 08:25:58 2023 GMT
        Subject: CN=40CC03ADDBD3C1D1CAF1189A1FDFE9A625A59827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:e2:1b:bc:5a:e1:2d:09:3c:d1:87:d3:30:
                    a9:34:0e:07:4d:42:cb:18:1f:60:5e:0c:63:2c:81:
                    ce:e3:a4:43:54:55:70:f8:ac:4c:17:59:ae:b5:da:
                    a8:50:b0:e3:19:8f:a1:b0:fd:cb:4a:cf:52:86:52:
                    51:a7:9e:b1:e8:e7:a1:9f:19:3b:a5:06:d7:9d:83:
                    15:fe:9b:40:9c:f2:9c:39:33:7b:2a:e7:f6:73:10:
                    56:75:d1:cc:3a:17:05:0e:d0:d0:b9:7d:d5:d4:cd:
                    22:1f:1b:9c:0e:ac:a4:49:64:ac:7c:6c:35:60:f6:
                    ac:7f:9f:9e:b6:93:b2:71:7a:6b:6b:76:4b:45:9f:
                    86:a0:16:ea:d8:08:8b:0b:06:4c:39:83:e4:42:13:
                    bf:80:de:00:d4:07:e0:cc:7e:ff:0e:01:ab:c3:06:
                    a4:b0:a8:64:dd:b2:a4:82:97:e0:e9:a5:f1:d8:3e:
                    6b:74:42:47:6e:38:31:65:0c:29:12:66:a5:1e:e4:
                    7f:8a:50:28:ca:32:58:2d:ef:38:c4:da:59:d7:9f:
                    84:f7:d7:b7:c5:7f:59:03:7e:cf:8b:d0:2f:ee:68:
                    5f:01:4a:78:7f:11:4e:6d:16:7e:55:aa:d7:ba:0f:
                    71:e8:18:29:f5:73:4b:bc:1b:c1:72:1a:5b:12:8b:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CC:03:AD:DB:D3:C1:D1:CA:F1:18:9A:1F:DF:E9:A6:25:A5:98:27
            X509v3 Authority Key Identifier:
                keyid:EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:26:e0:b5:d9:16:5e:73:4a:b1:60:c0:36:f9:82:9f:e5:aa:
         f3:b7:cd:df:74:9b:06:31:69:7d:a8:8e:b8:10:d7:05:b4:63:
         5b:5a:c8:52:d2:1c:7c:92:7d:ef:21:ac:21:01:f3:f7:2b:2e:
         e7:65:2f:48:10:3d:48:59:48:04:6c:5e:37:03:f6:53:37:14:
         30:bb:1e:36:8b:ec:3a:bc:a2:3f:99:86:5b:bd:bd:3a:a2:fb:
         23:30:b5:4c:7b:97:c2:4d:e8:5c:99:84:83:cd:1a:ce:f8:ec:
         5d:c7:77:92:03:b6:8d:48:1e:7b:3f:1d:f6:93:3d:51:54:5d:
         60:df:ed:df:b1:51:37:49:75:3e:47:54:c2:3a:43:8f:79:b4:
         69:17:1a:de:b8:56:92:fc:20:55:b9:2a:0b:bc:16:09:30:bb:
         64:c0:2c:0a:5d:e0:7a:57:ed:0c:0b:ff:17:45:fd:e6:0e:19:
         aa:0b:b7:44:bd:b3:1f:55:a6:18:07:50:25:a0:1e:b2:85:7c:
         f4:d2:73:20:74:bf:df:85:de:7a:1f:9c:b5:51:9e:a7:5b:26:
         27:f1:b4:a1:69:ed:c0:9e:a1:80:2d:02:c3:19:54:44:55:ec:
         50:ba:e9:1d:dd:c6:fa:6d:d2:5d:94:01:86:48:53:ce:92:80:
         b8:49:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----