Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/F82AB198ECF4F9E5ED150916CB682034C93D74E8.mft
File:                     F82AB198ECF4F9E5ED150916CB682034C93D74E8.mft (raw, json)
Hash identifier:          i8snGuruRVau2m1Ee7gdAt9xrmGVtOZuPF/niFo5PQY=
Subject key identifier:   29:A9:86:DD:84:4A:D0:43:6F:81:A0:ED:51:BA:7C:FB:33:CA:3D:3C
Authority key identifier: F8:2A:B1:98:EC:F4:F9:E5:ED:15:09:16:CB:68:20:34:C9:3D:74:E8
Certificate issuer:       /CN=f82ab198ecf4f9e5ed150916cb682034c93d74e8
Certificate serial:       5CDD9723B1741D7BAB4579529058D032B68189ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CqxmOz0-eXtFQkWy2ggNMk9dOg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/F82AB198ECF4F9E5ED150916CB682034C93D74E8.mft
Manifest number:          FD
Signing time:             Mon 18 Sep 2023 12:38:59 +0000
Manifest this update:     Mon 18 Sep 2023 12:33:59 +0000
Manifest next update:     Tue 19 Sep 2023 15:53:59 +0000
Files and hashes:         1: 323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa (hash: hRxLCTyRgzBqdt8dOFrppdDUTc9b4dMMXZlT6CKax+Q=)
                          2: 3138352e312e3134382e302f32342d3234203d3e203536373338.roa (hash: XDPnL67bB6psmf7mVEW/86F/6jMaxZesMBCes7+9eNA=)
                          3: F82AB198ECF4F9E5ED150916CB682034C93D74E8.crl (hash: nHGjzGJHvgLIzOCEJBO4J/fFXxjdkE+g3I5/Wklg4Sw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dd:97:23:b1:74:1d:7b:ab:45:79:52:90:58:d0:32:b6:81:89:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82ab198ecf4f9e5ed150916cb682034c93d74e8
        Validity
            Not Before: Sep 18 12:33:59 2023 GMT
            Not After : Sep 19 15:53:59 2023 GMT
        Subject: CN=29A986DD844AD0436F81A0ED51BA7CFB33CA3D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:9e:26:e6:19:9e:9d:d1:27:f3:c5:c7:8c:
                    15:d3:c8:8e:15:cd:1c:51:89:62:6b:2c:38:33:53:
                    6d:7e:12:57:d1:52:51:dc:dc:63:25:71:88:7f:73:
                    ca:3f:0c:23:19:69:de:03:17:41:01:1e:cc:4c:8a:
                    16:9e:7a:2c:af:e6:ce:b4:cb:80:aa:22:56:08:7c:
                    63:14:cf:a5:4b:a8:9a:6a:97:7e:83:81:a0:cb:64:
                    19:21:bc:36:ae:7d:05:56:e1:fd:bc:aa:55:d0:aa:
                    73:b5:70:98:6a:3a:75:37:02:73:94:97:d9:2a:e6:
                    c9:9c:3a:f1:a9:e6:59:11:99:12:83:f3:ac:c1:bf:
                    10:9a:ad:3a:05:55:e9:4a:f0:5b:c6:2c:ef:14:a3:
                    76:4d:62:8d:f8:5a:d3:81:ed:5d:01:19:bb:a2:c8:
                    36:f8:65:bb:35:30:3e:74:57:d7:fa:92:15:eb:bd:
                    bb:df:09:13:82:a8:8c:1e:7f:c6:2d:49:b8:3c:f6:
                    7f:86:be:75:c2:b0:80:3d:d9:12:a7:c4:cb:12:5e:
                    0e:b9:d7:c2:69:0b:30:a8:58:85:4e:9f:39:ab:c4:
                    8f:19:48:09:10:06:92:9c:61:e6:73:92:a6:ad:40:
                    95:9b:31:53:a0:f3:25:58:9a:73:83:2d:ba:70:9d:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A9:86:DD:84:4A:D0:43:6F:81:A0:ED:51:BA:7C:FB:33:CA:3D:3C
            X509v3 Authority Key Identifier:
                keyid:F8:2A:B1:98:EC:F4:F9:E5:ED:15:09:16:CB:68:20:34:C9:3D:74:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/F82AB198ECF4F9E5ED150916CB682034C93D74E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CqxmOz0-eXtFQkWy2ggNMk9dOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/F82AB198ECF4F9E5ED150916CB682034C93D74E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:17:eb:6c:4d:75:09:be:bf:c3:46:28:96:1e:71:48:41:
         f0:b2:54:2a:f3:6e:d4:b7:2a:78:b9:5e:18:91:4e:07:9c:95:
         f4:60:d1:62:14:80:30:4c:b9:4d:5d:d5:8b:29:ef:0a:09:0a:
         20:c0:c5:8d:37:4b:66:08:0f:a1:f9:c0:48:65:c8:e8:f7:1d:
         a3:13:3e:71:60:a8:d5:de:84:24:a2:3d:f9:6f:6a:65:87:5d:
         de:d9:9f:c4:0c:02:6d:ed:0a:98:e3:27:7b:26:73:8a:c7:eb:
         02:7f:7d:81:41:5f:3a:f5:33:6f:e3:01:c1:bf:89:5f:63:2c:
         a8:d4:f4:5c:33:5f:06:3b:35:90:f3:85:37:f5:a5:df:58:4f:
         39:b9:f7:9b:3e:e9:5c:ac:ad:23:de:e7:d2:7b:5e:49:b3:a3:
         e9:1c:80:5f:58:26:f7:99:6e:9e:31:93:41:37:ec:9b:2c:b2:
         1b:82:3c:26:81:de:e4:da:c1:24:4c:e8:84:55:cf:1e:94:13:
         e8:74:f4:1c:02:b0:ac:ff:fb:04:f6:9e:c5:d1:b3:3b:c4:14:
         62:aa:f7:2f:a8:d2:2f:eb:1f:c1:c2:85:45:6b:fa:7d:6e:76:
         2c:1f:2c:98:19:09:f7:4d:b4:12:ae:b1:ea:18:44:1e:c9:e9:
         02:f6:66:28
-----BEGIN CERTIFICATE-----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