Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/83E701C2FCE97B5672B4ABA6211B90F97E197B6D.mft
File:                     83E701C2FCE97B5672B4ABA6211B90F97E197B6D.mft (raw, json)
Hash identifier:          x1gaRLrMI3R7kBZTTuCO5+pOkOdaHJNjanvTvCU7Da4=
Subject key identifier:   2D:50:32:23:A4:E1:40:83:0E:FE:82:56:83:59:FB:F6:9B:22:67:FF
Authority key identifier: 83:E7:01:C2:FC:E9:7B:56:72:B4:AB:A6:21:1B:90:F9:7E:19:7B:6D
Certificate issuer:       /CN=83e701c2fce97b5672b4aba6211b90f97e197b6d
Certificate serial:       0D835CC2E8B49C230E5DACDD907363C03A4F19B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-cBwvzpe1ZytKumIRuQ-X4Ze20.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/83E701C2FCE97B5672B4ABA6211B90F97E197B6D.mft
Manifest number:          0149
Signing time:             Thu 23 Nov 2023 14:30:58 +0000
Manifest this update:     Thu 23 Nov 2023 14:25:58 +0000
Manifest next update:     Fri 24 Nov 2023 18:18:58 +0000
Files and hashes:         1: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 6QTw4pga0OhIcRKM6nmz+hpVohAJM7p0bskWg79JJXk=)
                          2: 83E701C2FCE97B5672B4ABA6211B90F97E197B6D.crl (hash: 7ixfkDRZQsVrd4g4b7crJrxZ8Ghb5VISKTJTLIw124M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:83:5c:c2:e8:b4:9c:23:0e:5d:ac:dd:90:73:63:c0:3a:4f:19:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e701c2fce97b5672b4aba6211b90f97e197b6d
        Validity
            Not Before: Nov 23 14:25:58 2023 GMT
            Not After : Nov 24 18:18:58 2023 GMT
        Subject: CN=2D503223A4E140830EFE82568359FBF69B2267FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:1a:cf:b8:a0:9e:6c:32:17:71:36:83:be:
                    74:08:b9:1a:d9:ab:f2:86:55:78:95:01:63:4c:dd:
                    2a:61:60:c9:2f:14:0a:66:09:a5:59:8a:3f:c2:e9:
                    01:72:88:13:75:cc:6c:79:ca:32:15:54:bc:68:14:
                    9a:d4:0f:6f:81:ec:b6:4e:a2:eb:64:f5:fe:06:23:
                    25:37:78:a7:7f:40:f9:f4:d1:49:f4:59:52:e9:c0:
                    08:9e:56:06:52:e9:06:ef:d2:07:56:24:a6:71:f4:
                    c8:f9:4c:1a:3d:b0:89:3a:13:cb:62:c5:a2:cc:13:
                    2b:f3:b3:58:32:a1:7c:1c:06:31:24:4d:2e:43:90:
                    46:e4:ad:48:db:7c:2b:07:2c:8f:92:12:fd:dc:70:
                    d1:ac:9f:d7:6d:e8:cb:9c:7f:01:bc:28:54:bb:65:
                    de:fe:4f:77:59:68:6a:a1:ec:01:5b:93:1c:49:92:
                    ef:c6:86:b8:fa:0a:55:74:27:61:4f:47:97:5d:d5:
                    d6:91:f2:98:ce:e6:f8:34:63:57:77:52:9e:e4:b6:
                    64:53:7b:a3:99:25:38:5a:3e:7e:a0:bc:17:e5:14:
                    bf:b8:92:6c:fa:8d:da:6f:a7:84:a9:23:50:ec:39:
                    f8:51:bd:b5:54:3f:4b:5c:eb:c5:d4:1c:d1:75:ba:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:32:23:A4:E1:40:83:0E:FE:82:56:83:59:FB:F6:9B:22:67:FF
            X509v3 Authority Key Identifier:
                keyid:83:E7:01:C2:FC:E9:7B:56:72:B4:AB:A6:21:1B:90:F9:7E:19:7B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/83E701C2FCE97B5672B4ABA6211B90F97E197B6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-cBwvzpe1ZytKumIRuQ-X4Ze20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/83E701C2FCE97B5672B4ABA6211B90F97E197B6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2e:0a:91:a9:6c:15:a5:64:bd:e3:8c:95:a4:b0:5d:d2:92:
         f4:8f:ef:85:11:df:44:aa:76:f4:33:e6:33:b5:06:2a:64:09:
         27:a4:be:8d:55:9c:cb:b7:2a:8c:62:b0:62:17:e5:61:61:88:
         13:47:27:04:c0:fc:b0:6c:8c:63:19:2c:b9:5f:f3:ef:8f:fe:
         2d:2a:81:be:5d:ba:21:0f:41:8a:a3:29:0a:f3:b3:7e:71:c1:
         48:09:1c:86:2e:ec:c4:a5:d1:1d:4d:2d:94:e2:68:0d:a8:8a:
         86:aa:fd:84:3d:1b:f7:7b:39:7b:27:34:b5:ff:57:4a:c6:4e:
         81:f8:95:ba:4d:2f:57:b5:2f:91:a0:da:ed:67:37:09:0f:1a:
         d8:83:e7:8c:e3:9b:34:9a:49:70:e7:8f:2a:c0:f2:56:dc:a5:
         73:6b:6e:43:5b:03:f8:68:55:8f:53:83:1b:4a:c5:7f:21:6d:
         e5:31:5c:b5:df:91:c5:02:f1:f0:46:35:47:6a:98:51:b6:8f:
         3f:d6:7a:6b:d1:ba:b9:2c:be:ab:07:f5:6e:28:50:9d:9b:7e:
         56:60:3c:dc:3a:0f:67:7a:88:0d:48:19:5d:88:29:b1:37:0d:
         2b:b1:79:03:91:2d:59:99:cd:e4:a0:aa:eb:ba:4b:87:f7:90:
         2a:5e:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----