Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/95e3b848-5986-439a-97d2-6850d3490d8e/0/1801E1E4C4D171FC85B83E824C3C8E6FA24C7152.mft
File:                     1801E1E4C4D171FC85B83E824C3C8E6FA24C7152.mft (raw, json)
Hash identifier:          iBTmcrrCecTF4gHOwa+HLjtkoNCPaB2jYH9OxrTvoqA=
Subject key identifier:   DB:05:8B:B3:B0:2C:D3:A0:56:90:A7:D9:37:65:48:7A:B9:47:70:BC
Authority key identifier: 18:01:E1:E4:C4:D1:71:FC:85:B8:3E:82:4C:3C:8E:6F:A2:4C:71:52
Certificate issuer:       /CN=1801e1e4c4d171fc85b83e824c3c8e6fa24c7152
Certificate serial:       514D2B5AA3D656778CC26A49AD24302913CE2C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAHh5MTRcfyFuD6CTDyOb6JMcVI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/95e3b848-5986-439a-97d2-6850d3490d8e/0/1801E1E4C4D171FC85B83E824C3C8E6FA24C7152.mft
Manifest number:          F6
Signing time:             Thu 21 Sep 2023 21:53:04 +0000
Manifest this update:     Thu 21 Sep 2023 21:48:04 +0000
Manifest next update:     Fri 22 Sep 2023 23:21:04 +0000
Files and hashes:         1: 1801E1E4C4D171FC85B83E824C3C8E6FA24C7152.crl (hash: XsFRgG3Fk574sntdQFVkR4Uz8JwaBZodIAgGSpwWmSU=)
                          2: 38332e3133382e35302e302f32342d3234203d3e203333363936.roa (hash: JQV0UKjEqHp8B1iR03uxfAtpjS7jaZvSTyaPFfvLvCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4d:2b:5a:a3:d6:56:77:8c:c2:6a:49:ad:24:30:29:13:ce:2c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1801e1e4c4d171fc85b83e824c3c8e6fa24c7152
        Validity
            Not Before: Sep 21 21:48:04 2023 GMT
            Not After : Sep 22 23:21:04 2023 GMT
        Subject: CN=DB058BB3B02CD3A05690A7D93765487AB94770BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:f2:62:40:a4:c9:5e:60:6e:07:bf:43:b8:
                    3d:ac:29:b4:90:ae:9d:9e:18:fc:f1:6e:3a:de:e5:
                    bd:16:4e:91:bb:45:ca:33:2e:7c:34:86:2d:c6:bb:
                    d6:41:5d:63:13:c1:bd:48:2e:58:dd:ec:ac:74:25:
                    82:a3:59:f0:20:eb:b6:84:57:71:b7:62:88:07:8c:
                    8c:1c:53:45:b4:9e:b3:c4:76:ba:ee:5c:b4:63:ec:
                    65:af:15:7a:dc:aa:16:ff:5f:b3:83:39:80:20:fd:
                    f1:50:84:2b:7e:0b:85:23:9c:e3:09:27:23:be:69:
                    13:a1:33:1f:ad:09:bf:68:85:4d:07:6e:95:ab:6d:
                    5c:ac:80:7f:7f:d4:b2:97:57:79:22:8c:a1:c2:1d:
                    77:61:da:6d:98:e9:e2:a5:f1:c8:c2:f1:30:15:88:
                    2d:68:62:f2:dd:bc:84:a4:b8:ec:24:d1:a7:5e:7b:
                    2f:3a:a1:88:e2:e9:6d:7f:3b:4c:28:2d:47:5c:3d:
                    9f:fb:9b:4e:d3:2b:68:cc:c1:15:df:74:7d:b9:dc:
                    03:e5:a7:17:48:80:9f:61:55:75:45:bd:16:99:e0:
                    6b:2d:48:78:2d:c1:f0:b4:46:dc:f2:d1:80:94:f5:
                    91:c9:1a:30:b7:66:6a:9e:32:3b:50:3f:75:4f:1b:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:05:8B:B3:B0:2C:D3:A0:56:90:A7:D9:37:65:48:7A:B9:47:70:BC
            X509v3 Authority Key Identifier:
                keyid:18:01:E1:E4:C4:D1:71:FC:85:B8:3E:82:4C:3C:8E:6F:A2:4C:71:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/95e3b848-5986-439a-97d2-6850d3490d8e/0/1801E1E4C4D171FC85B83E824C3C8E6FA24C7152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAHh5MTRcfyFuD6CTDyOb6JMcVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/95e3b848-5986-439a-97d2-6850d3490d8e/0/1801E1E4C4D171FC85B83E824C3C8E6FA24C7152.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1d:be:0e:31:36:a5:9b:da:d7:82:61:74:bf:c6:fb:c1:60:
         30:a0:73:ad:e9:d0:62:18:3d:d3:8e:67:c1:b3:48:26:ce:75:
         e8:40:35:0b:44:ac:d2:96:09:ac:aa:94:9b:93:53:49:83:3e:
         63:84:da:35:7e:ef:55:0b:9b:64:d3:6d:a4:1d:78:bb:8f:da:
         99:2e:f1:62:90:af:ef:89:63:38:b9:ca:69:d7:ec:03:64:c9:
         b2:f7:dd:8e:5f:91:af:46:d0:98:74:ce:51:dc:98:e4:72:c0:
         8c:67:c4:41:fa:b0:ee:c4:ab:83:9b:a4:3c:b5:85:2b:d1:1c:
         05:a6:fb:75:a3:6c:c1:3f:0c:7e:d7:99:77:03:34:f0:cc:70:
         fb:0a:05:2f:26:c2:11:e0:0f:df:62:34:0a:e3:f4:11:96:90:
         5e:49:d5:e9:ac:85:df:0b:c3:be:e8:ed:75:9f:af:d8:7f:a4:
         95:6c:0f:56:97:10:e3:dd:13:b1:5f:f6:b5:27:77:f5:c1:cf:
         f0:f8:29:99:43:13:95:64:d1:cc:36:a0:97:93:59:9d:07:e6:
         ce:5f:1a:07:a7:c5:c2:8b:5b:68:0b:00:6f:f5:29:ec:b2:dc:
         67:bb:ea:bb:1e:7a:09:d7:52:ee:0b:ed:22:56:ec:3d:3a:80:
         cb:14:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----