Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/21/AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.mft
File:                     AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.mft (raw, json)
Hash identifier:          aE1Icf3EANadBiDDd/d5OjpGCOGRbyaZ7y3seim7Cik=
Subject key identifier:   3E:49:39:08:8C:C5:57:B2:B0:63:03:AA:82:03:77:0B:46:AB:7C:12
Authority key identifier: AB:90:A0:EB:6F:E6:40:6D:48:AE:52:94:DA:B2:D0:E9:A6:F4:7B:2C
Certificate issuer:       /CN=ab90a0eb6fe6406d48ae5294dab2d0e9a6f47b2c
Certificate serial:       78A585FD8BD09C56AE08296DD5389B7FC468A5FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5Cg62_mQG1IrlKU2rLQ6ab0eyw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/21/AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.mft
Manifest number:          3A
Signing time:             Thu 22 Jun 2023 03:06:58 +0000
Manifest this update:     Thu 22 Jun 2023 03:01:58 +0000
Manifest next update:     Fri 23 Jun 2023 05:02:58 +0000
Files and hashes:         1: AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.crl (hash: Lt3eZbm8mrcn+z79Yb6s/iRYibtblf5UUYSSz55o3Rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:85:fd:8b:d0:9c:56:ae:08:29:6d:d5:38:9b:7f:c4:68:a5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab90a0eb6fe6406d48ae5294dab2d0e9a6f47b2c
        Validity
            Not Before: Jun 22 03:01:58 2023 GMT
            Not After : Jun 23 05:02:58 2023 GMT
        Subject: CN=3E4939088CC557B2B06303AA8203770B46AB7C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:8d:fd:6a:c3:7a:a3:f6:50:3c:a2:e2:30:
                    2f:32:27:58:e1:a6:33:33:bc:82:8b:eb:08:43:13:
                    92:31:0d:94:23:6e:dc:2b:73:59:44:7e:86:9b:b7:
                    9c:49:06:83:86:f5:61:f0:23:ef:e8:76:78:70:f0:
                    a5:40:b5:df:9a:89:84:83:14:53:14:33:2c:84:09:
                    f1:ab:a0:be:79:2b:37:d9:a6:cb:f2:06:b4:2b:f4:
                    72:14:d6:87:17:90:53:31:0b:96:d6:10:5b:40:d7:
                    a7:09:b5:d7:b2:6b:d6:3e:2f:30:ae:7e:77:4b:92:
                    02:46:ff:8e:8b:8c:a8:d9:fe:3c:b9:86:33:c1:7a:
                    01:22:92:f5:32:22:9e:3b:71:bf:bf:bc:ce:fc:82:
                    39:51:8f:45:84:15:4c:4b:45:9d:25:d7:fb:da:c2:
                    54:cf:6a:ec:f7:fd:c4:70:3f:fb:27:a1:73:0f:4d:
                    0a:df:6f:47:8d:27:7a:97:19:34:0f:0d:e3:15:53:
                    17:12:76:2f:ab:71:12:ba:f7:9d:fd:21:ba:2e:b0:
                    cd:bf:23:81:e9:7e:c0:07:1e:00:23:c0:e7:a2:fb:
                    b6:3f:3c:12:55:86:25:50:10:4a:91:d4:9f:e7:49:
                    63:a0:39:3b:b8:26:43:a0:ca:c3:8f:a4:f5:4d:a1:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:49:39:08:8C:C5:57:B2:B0:63:03:AA:82:03:77:0B:46:AB:7C:12
            X509v3 Authority Key Identifier:
                keyid:AB:90:A0:EB:6F:E6:40:6D:48:AE:52:94:DA:B2:D0:E9:A6:F4:7B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/21/AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5Cg62_mQG1IrlKU2rLQ6ab0eyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/21/AB90A0EB6FE6406D48AE5294DAB2D0E9A6F47B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:15:7e:02:92:d8:d6:ef:92:dd:7f:ee:cc:59:06:04:10:be:
         09:1a:8a:e3:f4:0d:78:f4:3f:69:2a:fb:ac:ec:05:99:ff:b4:
         13:b9:a2:7f:53:ec:18:1f:37:27:9f:6e:e2:14:e1:bc:47:50:
         33:ce:4c:78:6b:39:6a:ec:c3:8a:9b:b1:e0:2d:e6:44:37:37:
         33:be:9d:1b:27:bc:b5:99:72:43:53:1a:39:46:f6:45:3a:af:
         00:e6:05:67:60:01:28:ad:8a:34:f4:62:2a:2e:79:bf:16:b9:
         d3:54:fc:97:72:67:c0:91:02:41:24:2f:61:29:2e:c7:34:ab:
         13:3d:a1:a5:87:de:92:f5:7b:92:f8:4f:a2:c6:5f:c4:05:3f:
         29:d2:0f:ff:1b:51:af:f0:87:8a:f8:a3:ec:7b:a2:02:a1:39:
         4d:a0:82:c8:1f:f2:b2:40:2e:57:bf:ee:aa:6b:20:90:f6:a6:
         35:26:89:a9:c7:b1:4f:31:48:19:a7:03:59:54:7f:bb:16:e7:
         1a:60:5e:b5:55:4b:e5:cf:90:8f:fc:9b:b5:58:1b:99:de:ac:
         e8:87:11:b8:69:a1:a5:e4:a0:5e:5d:7c:66:14:73:22:9a:d9:
         61:74:1b:8c:af:e0:34:fa:d6:7e:cb:94:da:67:1e:96:24:5f:
         3c:84:23:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----