Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/CAB05CD7FE658BBA47F3F17724F8318158CB9103.mft
File:                     CAB05CD7FE658BBA47F3F17724F8318158CB9103.mft (raw, json)
Hash identifier:          irp264zoYLKzcNk6f6I1DTqCHjr+sIT1qD/i0tYDfLE=
Subject key identifier:   D8:46:18:5A:E9:2D:54:C5:35:10:D7:E1:37:A5:90:07:00:08:12:18
Authority key identifier: CA:B0:5C:D7:FE:65:8B:BA:47:F3:F1:77:24:F8:31:81:58:CB:91:03
Certificate issuer:       /CN=cab05cd7fe658bba47f3f17724f8318158cb9103
Certificate serial:       607099804BE8AD34FD76E458DB173232194A688A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yrBc1_5li7pH8_F3JPgxgVjLkQM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/CAB05CD7FE658BBA47F3F17724F8318158CB9103.mft
Manifest number:          05
Signing time:             Wed 05 Apr 2023 06:27:32 +0000
Manifest this update:     Wed 05 Apr 2023 06:22:32 +0000
Manifest next update:     Thu 06 Apr 2023 06:56:32 +0000
Files and hashes:         1: 34352e39332e3138342e302f32332d3234203d3e2033333230.roa (hash: hRrO6pWbskHlq0YlfK1+k+fwncCNjKbTFtbUKIcFp3Y=)
                          2: CAB05CD7FE658BBA47F3F17724F8318158CB9103.crl (hash: VfpR9IzF8o6+MqDg+1CHAl8m4YT+Q8JK6qMzfQoQ6Os=)
                          3: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: H2ZRFG9ha5MgHzEUYyIxZ+zRbIMTYZW8KqupMGm0Uts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:70:99:80:4b:e8:ad:34:fd:76:e4:58:db:17:32:32:19:4a:68:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab05cd7fe658bba47f3f17724f8318158cb9103
        Validity
            Not Before: Apr  5 06:22:32 2023 GMT
            Not After : Apr  6 06:56:32 2023 GMT
        Subject: CN=D846185AE92D54C53510D7E137A5900700081218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:6f:48:67:90:52:71:59:88:59:e1:67:26:
                    56:32:60:cc:b5:43:3d:37:13:c3:40:eb:56:93:b0:
                    cd:eb:86:74:17:85:97:ec:51:4b:25:09:f6:5a:e0:
                    fc:07:a1:6c:33:ee:e3:b0:0f:f7:d7:a3:49:98:80:
                    08:e0:c4:2d:d4:1c:92:aa:1d:ed:a2:cb:ae:fb:b2:
                    72:78:48:32:ff:6f:98:d4:f0:94:64:96:29:d0:a2:
                    b0:a0:b0:ad:e3:c4:91:a2:2b:d4:33:2e:0a:89:21:
                    ab:60:2b:c1:7e:a2:3c:6e:80:fc:d7:b3:12:cf:83:
                    ea:a2:c7:7c:6d:ed:04:52:3a:62:c4:f4:f6:77:e6:
                    56:5f:e6:80:f5:44:33:b5:e8:aa:69:42:7a:97:74:
                    95:ac:44:79:9f:06:ef:b6:25:8a:c3:00:7d:1c:bf:
                    6e:4c:9c:1d:08:48:15:6a:2b:3e:ab:1d:2d:08:e8:
                    72:a2:68:88:50:ce:1a:1e:16:fe:54:53:e9:47:0c:
                    88:31:e0:43:1b:fe:02:3e:f4:46:77:25:31:b8:2e:
                    3c:26:cd:e0:ea:21:1b:38:7f:5a:0f:6d:35:57:27:
                    b5:24:52:3c:34:e2:35:bd:66:a8:5f:f9:74:d5:44:
                    c0:39:a2:bf:72:5f:a3:d5:39:91:1d:18:72:52:45:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:46:18:5A:E9:2D:54:C5:35:10:D7:E1:37:A5:90:07:00:08:12:18
            X509v3 Authority Key Identifier:
                keyid:CA:B0:5C:D7:FE:65:8B:BA:47:F3:F1:77:24:F8:31:81:58:CB:91:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/CAB05CD7FE658BBA47F3F17724F8318158CB9103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrBc1_5li7pH8_F3JPgxgVjLkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/CAB05CD7FE658BBA47F3F17724F8318158CB9103.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:98:84:f2:3d:d2:bc:36:81:24:18:f4:fa:29:91:64:8b:82:
         1f:e8:59:3c:f7:37:ff:cf:5a:fb:ce:55:75:c9:51:79:eb:0c:
         18:a1:d0:0c:17:13:a6:84:eb:c9:09:65:e5:47:cc:2a:32:3a:
         17:29:ae:0c:bc:23:04:4c:38:f5:15:d9:a6:b8:17:51:be:72:
         92:27:e2:37:77:d1:c5:35:38:18:81:b6:f1:e7:50:f7:53:f4:
         5c:b0:70:0f:7f:ee:a7:99:61:8b:59:0d:4f:dc:17:9b:ec:ea:
         c6:99:00:56:8c:8d:26:79:36:31:7c:37:f6:6e:fc:2e:aa:53:
         58:37:2a:76:65:bc:dd:df:eb:0b:b4:84:e6:16:0a:7c:74:12:
         57:4a:5b:a0:2e:c0:e4:06:63:ca:b8:12:9d:37:8a:a1:e4:61:
         8c:ce:b9:4d:33:a7:a0:3b:f3:6a:eb:55:18:10:2a:9a:01:65:
         82:9a:80:04:0f:5c:05:69:81:86:1f:69:3a:91:6e:f0:ea:5f:
         ce:23:89:86:2a:59:fc:db:e5:ad:a5:99:4f:90:76:e3:19:6a:
         27:02:77:bd:a3:82:94:7a:a3:9e:a8:a1:8e:57:1b:67:1f:02:
         47:a4:c3:0a:4c:c3:7a:6e:d6:6a:61:44:53:2a:75:5f:92:d4:
         09:80:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----