Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.mft
File:                     BE1602129721F44032C45A0138DD897317B19CC5.mft (raw, json)
Hash identifier:          6jOLsA6W5cmqASvUFRZG+9HzVmTeF0308V5zqnOqUQI=
Subject key identifier:   AE:88:7D:90:FD:61:1C:E2:79:84:FB:2C:64:AF:74:04:79:3C:9E:FE
Authority key identifier: BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5
Certificate issuer:       /CN=be1602129721f44032c45a0138dd897317b19cc5
Certificate serial:       7E87B6C9480DCA39690706BAF0D258506928D8ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.mft
Manifest number:          FB
Signing time:             Sun 24 Sep 2023 23:43:09 +0000
Manifest this update:     Sun 24 Sep 2023 23:38:09 +0000
Manifest next update:     Tue 26 Sep 2023 00:48:09 +0000
Files and hashes:         1: BE1602129721F44032C45A0138DD897317B19CC5.crl (hash: NseYSOpUyb7MsgR+6p9eSZEcVcSy2XUUp+iNgmaxWwE=)
                          2: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: mcDO3drfaZQudXPxLI7xgMTkkMByzqhvrzpS66D48pg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:87:b6:c9:48:0d:ca:39:69:07:06:ba:f0:d2:58:50:69:28:d8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be1602129721f44032c45a0138dd897317b19cc5
        Validity
            Not Before: Sep 24 23:38:09 2023 GMT
            Not After : Sep 26 00:48:09 2023 GMT
        Subject: CN=AE887D90FD611CE27984FB2C64AF7404793C9EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:9d:9b:31:7c:34:f9:a2:b0:d7:3b:a1:46:
                    ea:48:75:9a:1f:ba:cf:99:55:d2:89:51:1e:5d:8f:
                    36:2c:04:93:8b:d7:86:0d:54:81:a0:12:7e:d2:6f:
                    c2:9f:fc:03:87:9a:24:3e:d2:0b:50:e4:f7:75:98:
                    a3:c2:6b:49:b2:bf:1a:f7:7b:89:e4:d6:ee:ca:52:
                    6f:6e:73:86:fb:13:21:f8:21:12:3e:99:e7:b7:af:
                    6f:48:fd:2c:85:fc:71:11:74:2c:2c:0e:db:92:ca:
                    cf:3d:1e:51:bf:88:77:dd:07:1c:bb:ba:96:49:77:
                    7f:5c:97:de:21:19:e8:c1:b6:24:5d:d2:d1:08:e3:
                    62:be:e2:33:f5:92:31:ad:d9:11:02:83:ef:ab:83:
                    c2:a5:dc:b7:2e:1e:3f:90:f1:4c:15:c1:76:0f:02:
                    1f:e9:4f:ed:2a:72:c5:f5:87:ba:8d:35:10:3b:8d:
                    60:dc:de:bb:20:39:42:96:c0:db:31:b5:3b:ee:af:
                    d2:64:bd:b1:ed:d9:2d:3f:1c:ae:67:18:b7:c9:40:
                    0e:1a:ad:63:07:9b:86:9b:7d:70:70:9c:eb:99:37:
                    ce:c6:74:c1:62:ff:1c:c3:9b:50:40:43:d7:48:15:
                    0f:dd:0c:2b:8a:b1:51:ef:d6:8a:56:d7:b4:70:59:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:88:7D:90:FD:61:1C:E2:79:84:FB:2C:64:AF:74:04:79:3C:9E:FE
            X509v3 Authority Key Identifier:
                keyid:BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:59:ba:6b:6f:d6:dc:d1:16:54:49:f7:10:2f:d7:f6:eb:92:
         c9:e3:9d:6e:e4:ac:1f:ba:b7:59:01:cc:ed:30:25:98:2b:1b:
         92:39:84:93:76:f4:1d:ee:fc:4c:eb:71:20:f0:fc:52:3a:f9:
         6e:02:9d:c4:b5:24:71:ba:2a:72:e4:d4:24:d4:25:94:fd:f6:
         04:60:81:a9:86:e1:7a:02:42:8e:ff:fd:e4:6f:30:a9:0f:c2:
         5c:2c:37:0c:f1:bf:e4:fc:bf:36:16:00:e6:1a:92:83:da:9c:
         35:08:58:7b:bd:da:36:e5:cf:7b:c6:3e:57:29:4e:f8:da:4f:
         b6:5a:f4:72:7e:af:2c:5e:d5:a5:fa:3d:d5:5b:4d:64:56:1a:
         5f:3a:ce:61:5f:e5:6d:43:76:0d:54:3c:8a:b5:99:17:53:aa:
         32:bb:a3:9d:be:d8:48:24:ed:73:df:ac:fc:bd:c5:0f:3b:2f:
         c5:2f:ec:53:e8:81:96:95:e7:b4:fa:a0:bf:11:f3:70:b0:bf:
         06:76:f9:7e:ef:22:b9:c4:23:ef:53:a5:03:ec:76:c7:2d:a4:
         3a:84:a3:76:bb:df:b7:dd:7a:20:2e:94:6b:7b:cb:b8:93:1a:
         f1:db:0c:cc:85:5a:6a:5a:c1:de:92:5c:30:1e:e3:18:2c:84:
         f0:4e:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----