Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.mft
File:                     423F0571785ED23F10A6CC7B27AC1B1C8781A67A.mft (raw, json)
Hash identifier:          /hz7wmBp7Ysy4+CMWyoz6lOuog52pog9oapQqrIB35I=
Subject key identifier:   9F:F7:40:72:AE:E5:5C:48:F5:92:04:FF:37:50:6F:1F:BF:C9:01:C9
Authority key identifier: 42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
Certificate issuer:       /CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Certificate serial:       071F4579F38A73351FAD64CDBB900B6E1210C1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.mft
Manifest number:          0127
Signing time:             Wed 01 Nov 2023 03:35:55 +0000
Manifest this update:     Wed 01 Nov 2023 03:30:55 +0000
Manifest next update:     Thu 02 Nov 2023 07:08:55 +0000
Files and hashes:         1: 3139332e33302e3131372e302f32342d3234203d3e20383334.roa (hash: 58iuU3GKwbOT7MV52Ogb/F6KureJnMhU6wkMAPWlwJw=)
                          2: 423F0571785ED23F10A6CC7B27AC1B1C8781A67A.crl (hash: dNjDVvkf8NpFtCH7YRcO31ycSWY46uVDOjqmXCqQp1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1f:45:79:f3:8a:73:35:1f:ad:64:cd:bb:90:0b:6e:12:10:c1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
        Validity
            Not Before: Nov  1 03:30:55 2023 GMT
            Not After : Nov  2 07:08:55 2023 GMT
        Subject: CN=9FF74072AEE55C48F59204FF37506F1FBFC901C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:d3:47:e8:77:64:19:d1:f6:9b:e9:08:87:
                    af:5b:eb:89:b0:34:93:44:43:cb:f9:f5:e3:5c:39:
                    d0:fa:71:c0:50:e1:37:ee:4e:50:f3:36:3e:21:61:
                    2e:c7:ad:aa:f8:36:d0:a9:23:85:f1:28:39:da:22:
                    1e:c5:4c:74:05:7e:e5:7b:04:c4:73:5c:95:3b:08:
                    9a:f5:9f:8f:36:f5:cd:b5:30:77:f9:e3:4c:dc:ea:
                    cd:8f:a5:21:ef:9a:65:50:87:d1:cb:4c:6d:3c:de:
                    01:bd:12:d7:2f:92:62:a2:bc:9f:79:88:95:b4:14:
                    61:2d:16:09:df:d9:84:2c:a7:44:09:f8:30:b5:47:
                    7c:9a:5f:7a:6c:30:3f:63:d4:30:09:c7:d3:ec:db:
                    1b:3c:23:c1:34:7a:15:8d:82:eb:ed:6b:1f:67:8c:
                    a1:9b:6e:2b:0e:79:ed:de:5f:fd:38:1b:fa:2d:af:
                    ee:eb:40:96:fc:55:37:2e:10:0c:fc:a2:ce:6d:19:
                    97:75:27:7a:5f:71:78:f2:d2:3a:b6:29:ff:79:fd:
                    3f:26:55:b0:b0:45:6a:5d:b7:fe:66:a7:a4:98:00:
                    b5:44:5e:f5:e9:99:a3:7a:65:68:f3:48:73:58:2e:
                    8e:03:7a:c9:fc:00:68:be:00:e4:e9:a4:8f:60:48:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F7:40:72:AE:E5:5C:48:F5:92:04:FF:37:50:6F:1F:BF:C9:01:C9
            X509v3 Authority Key Identifier:
                keyid:42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:fc:29:04:62:b6:8c:42:48:20:4c:e6:27:7f:28:4b:95:
         19:11:f2:d5:14:23:c5:7c:24:e9:91:bf:46:c1:9f:fc:b3:f6:
         00:c6:07:a8:8a:ff:f9:a6:c6:04:67:79:cf:9c:b8:1f:17:61:
         fc:b1:ef:5a:6c:e5:93:e4:07:6f:66:44:83:4a:64:80:8c:8a:
         a8:ee:c9:22:ea:34:dd:33:9a:67:3e:bb:5b:e0:3b:25:2f:34:
         ae:fe:3a:f4:8d:aa:ab:4d:f8:90:42:32:71:09:28:34:8f:a9:
         89:ff:5f:e8:cb:26:fc:3b:93:d4:89:7d:cf:6d:ab:09:a5:65:
         4b:4a:03:2a:3a:35:6d:ee:46:6a:19:0a:ee:59:8a:6f:aa:55:
         bb:69:76:d2:76:d3:be:f7:dc:7c:9b:ea:d7:3d:0d:61:9b:b2:
         d3:ae:27:88:e9:fd:61:3d:62:3f:25:79:16:cd:45:b8:5d:bd:
         f5:70:92:b5:17:06:13:c2:04:5f:c1:10:8b:90:a9:d8:04:b0:
         41:76:bd:28:e6:af:13:de:d5:a3:91:7c:9d:e7:88:95:44:0b:
         92:b6:07:e9:b1:fe:3b:c9:6c:30:9f:01:09:71:6d:42:74:68:
         cd:19:32:f9:92:41:f5:41:ea:54:93:99:d7:69:0c:a3:90:c9:
         5a:f2:fd:ba
-----BEGIN CERTIFICATE-----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