Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.mft
File:                     3065BD7B3029FB9B4990D695C6176778CC637436.mft (raw, json)
Hash identifier:          0SyY7ctRcl7hqFIGE/fZol1t/qIY0qH2Fg4ErrVEleY=
Subject key identifier:   9B:89:69:3A:23:F3:D2:7E:C8:62:A3:74:A4:76:BC:14:72:AE:6C:C9
Authority key identifier: 30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36
Certificate issuer:       /CN=3065BD7B3029FB9B4990D695C6176778CC637436
Certificate serial:       0550D4D3B218452363910743584E02E8377A0BD1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.mft
Manifest number:          DA
Signing time:             Mon 17 Jul 2023 20:39:39 +0000
Manifest this update:     Mon 17 Jul 2023 20:34:39 +0000
Manifest next update:     Tue 18 Jul 2023 20:58:39 +0000
Files and hashes:         1: 3065BD7B3029FB9B4990D695C6176778CC637436.crl (hash: TIdN7WYzVWJIMmMPsHLnJ3BBowH4ookeYdBJ0lQxMIU=)
                          2: 326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa (hash: 8Zw/xxGRjROGxpixfGF1UgaFSyv1oFz9mXuNo49f6Ek=)
                          3: 326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa (hash: qKI6Iu6aod+CqmEFzdIegMwdzBERHbCDyj5VPBpjNRU=)
                          4: 326130613a363034303a333130303a3a2f34302d3430203d3e203536363535.roa (hash: x4RCGaq5MdjFrRbmbK83wtp+qnbUxko70gzS/Ff9G+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:50:d4:d3:b2:18:45:23:63:91:07:43:58:4e:02:e8:37:7a:0b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065BD7B3029FB9B4990D695C6176778CC637436
        Validity
            Not Before: Jul 17 20:34:39 2023 GMT
            Not After : Jul 18 20:58:39 2023 GMT
        Subject: CN=9B89693A23F3D27EC862A374A476BC1472AE6CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:d4:6b:e7:52:97:05:7d:51:d5:ac:90:cc:
                    e2:8f:e6:6b:0e:37:29:71:a6:04:9a:a3:64:96:f7:
                    cf:37:1a:a4:e5:9e:01:4c:2a:a8:68:ad:97:b5:14:
                    c6:3b:a7:22:0e:3f:83:1d:78:6a:f8:82:7d:20:a8:
                    37:37:5c:59:5d:7c:f8:1e:39:0a:33:d9:c5:19:b5:
                    d4:e1:e9:9d:b9:b3:6b:1c:41:c2:bd:58:c3:8d:12:
                    43:80:45:db:ec:e3:2e:cd:c0:b7:65:b3:cb:a5:86:
                    4c:81:72:ca:89:6f:4a:f5:92:e0:39:de:ce:4a:40:
                    a1:76:02:6f:94:f1:7c:88:fe:71:c6:70:51:a0:f7:
                    2a:a7:0c:cd:19:dd:3b:da:16:e3:b8:7d:c1:38:a4:
                    81:ed:11:2d:5d:1f:3e:e8:a6:0f:f1:ab:33:18:a2:
                    cc:1b:3c:cb:65:b7:3d:60:0b:28:be:d8:12:ee:54:
                    d3:d4:54:5e:77:43:a6:f3:a1:55:ca:2c:e3:ac:49:
                    7c:4c:fb:a8:19:37:f2:2b:a7:3e:08:3f:3e:aa:a5:
                    f3:32:ac:56:46:3a:7e:35:64:5e:e7:b0:37:35:8d:
                    96:06:1a:96:c5:cc:e5:df:b4:aa:15:3f:8a:cd:4c:
                    e2:50:2e:43:93:fc:cd:a3:a7:02:d8:79:83:a3:20:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:69:3A:23:F3:D2:7E:C8:62:A3:74:A4:76:BC:14:72:AE:6C:C9
            X509v3 Authority Key Identifier:
                keyid:30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:05:65:05:9e:67:d8:27:98:06:f2:7c:cf:48:a2:a1:ba:ea:
         ca:b7:f0:18:47:8f:8b:dd:f8:04:3d:ea:04:d5:f2:e8:8c:d4:
         c3:44:7d:6c:9a:77:56:bc:f2:fd:20:15:39:f3:81:c1:65:7d:
         e1:d2:9d:92:c8:7f:19:c3:e1:6d:0b:40:f7:33:3c:a6:e8:d0:
         1b:59:6a:89:98:1a:93:54:97:85:f3:cb:c4:70:2b:e8:f7:72:
         f4:bf:89:c9:ae:83:ad:47:b5:fc:b0:28:fb:33:02:84:64:66:
         46:a6:58:fa:a0:95:f6:e2:0a:b9:f3:c1:ee:43:35:94:d3:34:
         34:70:08:19:d5:7d:87:96:33:99:76:be:e0:3a:30:ee:f8:a3:
         20:94:fd:99:81:3d:7b:4e:64:5c:f6:66:1d:08:48:9a:26:cd:
         6b:f3:3d:81:0e:6e:9c:5f:df:9b:35:ad:3d:61:72:db:40:f4:
         37:cb:2c:f8:b4:ee:da:d6:9f:b2:7a:be:e2:ed:77:2b:ce:b2:
         6f:82:33:89:b5:dd:76:74:44:cc:f7:4a:75:a5:27:0d:2a:5a:
         b1:d6:92:66:a4:6b:33:4a:e3:b4:6f:a2:fb:8a:d9:dd:fe:46:
         8f:77:24:77:0b:1e:e8:13:f2:e7:d6:fd:00:7b:3b:c0:cd:ea:
         1f:4e:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----