Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.mft
File:                     AFB20114C4090291EC402479A620DDEAE6BAD620.mft (raw, json)
Hash identifier:          fopCohAsA6uQImjtBUxoB5ZPLBLb5JH1tJPw2kCpXpI=
Subject key identifier:   96:19:93:56:43:B2:81:68:7C:F5:BC:34:5A:5F:43:CC:FE:BA:32:3E
Authority key identifier: AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
Certificate issuer:       /CN=afb20114c4090291ec402479a620ddeae6bad620
Certificate serial:       34A5AE3EA7984DD78DF5507F8FC664B6DC831F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.mft
Manifest number:          FC
Signing time:             Mon 25 Sep 2023 05:14:16 +0000
Manifest this update:     Mon 25 Sep 2023 05:09:16 +0000
Manifest next update:     Tue 26 Sep 2023 08:28:16 +0000
Files and hashes:         1: 3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa (hash: q0egcl2tJX9WKCucFWooBB6dNwGxhL5P5gXcQIQ3Mhk=)
                          2: AFB20114C4090291EC402479A620DDEAE6BAD620.crl (hash: 9Zh1vRT9hcotXP9wqvPDSPD4k5BhLEUCRmw/hgPSrCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a5:ae:3e:a7:98:4d:d7:8d:f5:50:7f:8f:c6:64:b6:dc:83:1f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb20114c4090291ec402479a620ddeae6bad620
        Validity
            Not Before: Sep 25 05:09:16 2023 GMT
            Not After : Sep 26 08:28:16 2023 GMT
        Subject: CN=9619935643B281687CF5BC345A5F43CCFEBA323E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:fa:6f:7b:68:19:8c:8b:50:ea:e5:19:69:
                    9c:1f:21:81:f0:e3:9b:df:45:19:9c:08:3d:b3:b6:
                    d5:4b:5c:d6:45:e6:5b:b7:2f:13:84:b8:2d:80:ed:
                    0a:89:1e:77:9f:ee:15:1b:f8:64:f1:b7:99:a9:a9:
                    d3:f7:04:e2:21:46:cf:47:27:a6:bb:6b:bb:26:ec:
                    6d:c3:96:2c:94:93:60:07:ca:39:d8:f1:96:bb:46:
                    74:5b:8f:bc:fb:77:be:d5:13:36:c7:81:b9:1e:f9:
                    f1:12:9c:24:3d:8f:2c:75:19:20:05:c0:41:cc:04:
                    65:3d:3b:46:07:9f:cf:08:a4:8e:7d:86:86:ec:d1:
                    fd:86:de:de:02:fe:75:6c:69:22:68:44:4f:7d:60:
                    0d:08:72:d6:fb:40:a9:b6:24:d5:0f:e5:0d:8c:06:
                    a5:96:22:79:27:e1:9a:90:8d:5a:0a:51:9d:2d:28:
                    8d:6b:5a:12:2e:df:95:23:52:24:3b:a9:91:a3:77:
                    cb:b8:00:fa:2b:fe:3b:9b:78:f7:91:eb:44:b6:cd:
                    bd:ac:d6:97:40:e6:0a:3d:51:da:5f:84:55:2f:33:
                    60:9a:48:14:1e:ef:3b:62:36:2f:b1:a9:e2:26:50:
                    cc:57:1a:21:8a:8f:a4:27:f3:b3:02:55:3c:dd:5d:
                    ec:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:93:56:43:B2:81:68:7C:F5:BC:34:5A:5F:43:CC:FE:BA:32:3E
            X509v3 Authority Key Identifier:
                keyid:AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d2:7f:36:df:16:25:0e:55:b9:4b:0f:67:c2:27:b4:32:58:
         d9:6b:8f:5a:66:7f:91:1e:64:29:45:d0:84:b5:bc:51:3a:93:
         41:4b:a9:34:80:48:cf:d4:8c:a8:84:9a:a8:6d:38:bd:1b:7c:
         33:7b:48:89:4f:7a:f2:1b:5d:c2:60:9c:45:bf:cc:a5:c5:de:
         94:28:b6:cd:57:c9:4a:76:1a:17:da:ed:fe:68:39:a8:44:8e:
         43:a0:86:5b:ba:82:b0:a6:cb:f0:99:c2:06:de:f2:21:57:10:
         19:6b:ab:e5:90:d3:6b:a9:2a:09:09:d3:20:cd:14:a8:7a:52:
         df:61:ad:ba:2f:6f:4d:c4:22:65:f8:3c:ea:a2:89:20:54:7d:
         19:08:41:69:4c:d3:8b:12:1a:63:13:84:28:ec:75:61:b5:f5:
         0e:fd:28:21:1c:fa:00:d4:33:db:63:94:7b:25:25:7c:59:cd:
         a4:26:dc:47:96:71:41:99:85:0d:b5:0c:6b:1c:43:9e:77:af:
         43:36:5d:d3:11:72:7a:9f:f4:72:46:49:7b:7f:dc:a2:e6:bc:
         b0:fc:ce:b2:c0:ac:47:59:4c:dd:5e:d2:2c:88:8a:b7:45:61:
         45:ad:e0:0b:5c:44:ec:c8:18:ae:18:d2:2a:18:36:7a:25:8f:
         d5:25:0e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----