Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/EF426F94C58940B7071B544A524D3C9EA3456B00.mft
File:                     EF426F94C58940B7071B544A524D3C9EA3456B00.mft (raw, json)
Hash identifier:          KNHdC/jek9kqNfHR/UhQUMFPgDNIHY0UcRrmMP5njOE=
Subject key identifier:   EE:45:31:50:8D:F5:40:14:A4:86:D8:70:64:7A:24:0E:33:49:98:71
Authority key identifier: EF:42:6F:94:C5:89:40:B7:07:1B:54:4A:52:4D:3C:9E:A3:45:6B:00
Certificate issuer:       /CN=EF426F94C58940B7071B544A524D3C9EA3456B00
Certificate serial:       733E399AE50C66104883084271AEC891FE5EA103
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/EF426F94C58940B7071B544A524D3C9EA3456B00.mft
Manifest number:          09
Signing time:             Thu 13 Apr 2023 11:19:12 +0000
Manifest this update:     Thu 13 Apr 2023 11:14:12 +0000
Manifest next update:     Fri 14 Apr 2023 13:41:12 +0000
Files and hashes:         1: 3231362e3134362e32342e302f32342d3234203d3e20323132363138.roa (hash: QTM2WTkhIg4lk8Goos8UTvNRe0AxrWrYokgI8Q7uf+4=)
                          2: EF426F94C58940B7071B544A524D3C9EA3456B00.crl (hash: 2DCUC0bUcosnHQZyJq02M7AAvZIvBNc5nd8Nw/W37CU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3e:39:9a:e5:0c:66:10:48:83:08:42:71:ae:c8:91:fe:5e:a1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF426F94C58940B7071B544A524D3C9EA3456B00
        Validity
            Not Before: Apr 13 11:14:12 2023 GMT
            Not After : Apr 14 13:41:12 2023 GMT
        Subject: CN=EE4531508DF54014A486D870647A240E33499871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:c8:b2:32:49:33:7a:97:11:fc:45:6d:c2:
                    31:3c:44:1e:cc:af:3a:fe:15:b6:da:56:56:54:55:
                    8a:44:cb:0e:fb:ad:47:11:94:48:b3:bf:bd:cb:17:
                    d3:85:cb:15:81:04:c8:7a:55:23:7b:d9:2e:15:d7:
                    30:1d:b0:6b:db:74:31:3b:a4:7b:de:65:ae:c0:a6:
                    19:7d:41:ad:90:e0:2c:e7:06:9c:20:1c:d7:90:7e:
                    3b:2f:03:27:d0:49:06:84:a5:01:5b:99:37:9c:e9:
                    ff:ed:e7:6a:74:c0:25:59:b3:e6:bc:7a:84:1d:82:
                    86:1e:a6:9a:08:11:ac:04:c9:33:03:70:5a:5a:a2:
                    36:f3:17:f2:ce:b1:74:4e:9c:52:7d:37:d2:71:bb:
                    62:da:66:ae:4b:dd:63:8f:2e:71:6e:f1:be:ad:0e:
                    fc:52:52:bd:7a:0b:2a:10:f3:ac:64:bf:a7:37:ad:
                    bd:e0:d9:f6:e4:a3:70:af:c7:89:7b:d3:68:56:d4:
                    43:77:ba:16:81:5b:e1:ed:46:b1:d8:95:22:68:c6:
                    05:51:d0:32:ab:3e:f4:1f:c5:b7:93:a6:f6:74:d1:
                    0b:af:6a:b8:ea:f2:e9:28:b8:22:bf:26:db:f2:0e:
                    d9:f3:c4:49:72:04:22:36:75:9c:48:c5:fb:2b:2d:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:31:50:8D:F5:40:14:A4:86:D8:70:64:7A:24:0E:33:49:98:71
            X509v3 Authority Key Identifier:
                keyid:EF:42:6F:94:C5:89:40:B7:07:1B:54:4A:52:4D:3C:9E:A3:45:6B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/EF426F94C58940B7071B544A524D3C9EA3456B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/EF426F94C58940B7071B544A524D3C9EA3456B00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:72:fb:dc:cd:af:cf:0e:f6:c6:74:b2:9c:bf:71:81:a5:81:
         f9:71:ac:d6:19:af:2f:ca:93:17:be:73:6f:de:b7:ad:31:1e:
         e2:11:c4:6c:ab:4f:75:b4:fb:c3:12:6a:2c:32:6c:16:38:b8:
         6c:a2:4f:f4:8f:0f:cd:60:03:14:a6:78:e7:72:d2:f1:cf:a6:
         d0:40:20:ec:48:58:a2:cf:cb:61:06:a0:97:e5:9b:5b:2e:81:
         20:9c:7d:8f:3b:48:51:a2:3a:71:88:69:79:c1:6c:7e:ce:e5:
         61:b0:1e:34:eb:90:f5:fa:f1:d4:0d:d9:98:f9:5d:68:e6:3b:
         70:56:12:48:1b:d5:5b:18:ff:56:3f:f5:5e:56:75:b2:f5:db:
         b9:39:38:c2:38:3c:ae:42:f1:b8:a1:70:54:7a:0b:9a:c4:ce:
         8b:ba:ba:98:b8:c5:9d:b5:bf:0f:a7:ec:03:49:72:44:56:0a:
         d8:97:3d:3a:0d:cf:ce:5b:f9:d0:98:99:50:2a:b3:6e:31:d2:
         49:e7:93:1b:73:64:60:b8:c0:2a:55:de:d5:cd:dc:ee:35:93:
         e9:37:31:17:a4:91:87:8c:b9:be:17:6b:cd:23:ca:ee:99:0b:
         78:66:de:94:4a:af:6a:7f:df:58:3b:66:cf:64:6a:5a:cf:ee:
         07:78:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----