Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8574e975-c52f-4c08-81d0-2a0ae9876c92/0/517EB47B21069E2ACCA5181FBA0ABFD0E9284B2A.mft
File:                     517EB47B21069E2ACCA5181FBA0ABFD0E9284B2A.mft (raw, json)
Hash identifier:          dJ8ZAlAV5J7mXB+Rf9N43sY/kXgSYsq0C+mdOnB3NA4=
Subject key identifier:   CC:DA:AA:9B:8B:27:97:7E:E9:B9:D5:13:7A:E9:F4:94:90:BE:FF:4B
Authority key identifier: 51:7E:B4:7B:21:06:9E:2A:CC:A5:18:1F:BA:0A:BF:D0:E9:28:4B:2A
Certificate issuer:       /CN=517eb47b21069e2acca5181fba0abfd0e9284b2a
Certificate serial:       43240FDD164C41A73D8E2382855B210DFA76554B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX60eyEGnirMpRgfugq_0OkoSyo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8574e975-c52f-4c08-81d0-2a0ae9876c92/0/517EB47B21069E2ACCA5181FBA0ABFD0E9284B2A.mft
Manifest number:          0134
Signing time:             Wed 08 Nov 2023 06:30:45 +0000
Manifest this update:     Wed 08 Nov 2023 06:25:45 +0000
Manifest next update:     Thu 09 Nov 2023 08:52:45 +0000
Files and hashes:         1: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: qMvjY/fWn5InV6J4cS4hy8H0yoL+x8y94PhGRhmRcwE=)
                          2: 517EB47B21069E2ACCA5181FBA0ABFD0E9284B2A.crl (hash: XfIT/v3D4ayGGSwnqn1Yc00OqkQGBKXdIKGwbvy1dV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:24:0f:dd:16:4c:41:a7:3d:8e:23:82:85:5b:21:0d:fa:76:55:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517eb47b21069e2acca5181fba0abfd0e9284b2a
        Validity
            Not Before: Nov  8 06:25:45 2023 GMT
            Not After : Nov  9 08:52:45 2023 GMT
        Subject: CN=CCDAAA9B8B27977EE9B9D5137AE9F49490BEFF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:8e:7d:b5:c5:3a:64:d9:5a:95:3b:f2:f2:
                    a4:9f:ab:ed:80:87:2f:10:b0:07:8e:6a:29:15:fb:
                    60:c7:38:b3:cd:b2:6c:50:2e:f6:eb:87:5b:0a:fc:
                    2d:f6:bd:49:2d:f6:3d:50:8f:2b:eb:75:ac:88:88:
                    7f:39:0c:d7:88:5c:03:a9:d1:26:39:f8:2b:95:ff:
                    0b:44:2f:08:f9:20:40:21:47:ee:c7:a0:ca:68:db:
                    e1:b0:24:ac:4e:70:60:65:f3:bb:df:b9:c6:d3:18:
                    02:f1:1a:97:e4:5c:fc:e5:40:fa:c0:7b:7c:97:c4:
                    af:8e:db:35:ab:1c:75:f5:07:18:0a:e6:49:3a:23:
                    66:94:fb:17:39:51:46:6a:09:bd:b7:66:12:b0:6f:
                    9e:bf:1c:a8:9a:96:b2:63:40:0e:01:a3:84:3e:5a:
                    f1:6f:5e:99:2e:4f:18:39:e9:fb:30:75:3c:de:bd:
                    c4:5c:f3:36:63:d5:9b:b6:50:50:83:4b:6b:91:39:
                    bc:1b:32:4e:5c:4b:ff:03:4a:29:e3:c1:32:83:72:
                    80:26:b0:f1:ed:74:d0:c0:e7:4f:4a:5b:31:39:9d:
                    57:52:aa:1b:31:ef:b4:70:97:1b:34:88:fa:b6:c6:
                    21:24:e2:6e:23:77:69:cb:f7:e4:e6:6e:2f:89:51:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DA:AA:9B:8B:27:97:7E:E9:B9:D5:13:7A:E9:F4:94:90:BE:FF:4B
            X509v3 Authority Key Identifier:
                keyid:51:7E:B4:7B:21:06:9E:2A:CC:A5:18:1F:BA:0A:BF:D0:E9:28:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8574e975-c52f-4c08-81d0-2a0ae9876c92/0/517EB47B21069E2ACCA5181FBA0ABFD0E9284B2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX60eyEGnirMpRgfugq_0OkoSyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8574e975-c52f-4c08-81d0-2a0ae9876c92/0/517EB47B21069E2ACCA5181FBA0ABFD0E9284B2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0b:dc:14:7d:68:7b:fd:b7:eb:cf:e5:d2:58:bc:22:e9:cc:
         ee:69:ff:aa:98:b9:6a:10:b1:3f:60:a1:96:83:02:db:8a:4a:
         a0:dd:99:ef:7e:6f:d9:4b:e0:f8:8f:b9:a8:c1:8c:f6:01:25:
         69:e1:8e:d4:2c:86:0a:d5:98:72:38:ee:05:cd:f2:df:b7:f8:
         d5:08:2b:00:57:00:4f:16:b5:15:16:12:e1:d7:88:35:2d:e2:
         d1:a1:d8:9e:91:42:d8:5d:d7:5e:10:dc:07:1a:bd:be:a4:25:
         61:a7:c2:d7:35:a6:27:bf:70:7a:7a:f1:80:90:9c:d9:16:ed:
         2a:d7:88:f4:c1:8c:b3:4c:3a:13:86:5f:47:3d:06:1b:3c:a7:
         3a:78:5f:5a:76:32:d3:cf:cc:b5:b3:f5:bd:2a:3a:26:42:91:
         ae:65:94:a6:4d:7b:fe:54:9d:a5:af:ec:35:9c:bd:90:46:1b:
         21:ae:76:b5:7b:40:85:4c:8e:2d:27:3c:76:b7:c3:65:94:05:
         f2:bd:c7:61:cd:1a:25:ea:08:6a:39:27:b1:06:e1:e3:91:02:
         90:97:fe:0c:2f:c6:4b:57:63:1a:73:df:79:f2:17:a8:3f:71:
         3f:51:d5:68:22:fa:7e:43:9d:93:e9:c3:d6:af:72:07:65:b2:
         c7:5a:40:51
-----BEGIN CERTIFICATE-----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