Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/0893BFF9F6ED42D9058987140AA711C3B125A981.mft
File:                     0893BFF9F6ED42D9058987140AA711C3B125A981.mft (raw, json)
Hash identifier:          isz4ggNTM5wUW3HymvfBRsbhslvCCEii2FfXLuykiuU=
Subject key identifier:   14:F8:71:56:E4:CB:20:EC:CA:FF:EE:5D:86:70:74:7E:A1:34:56:4D
Authority key identifier: 08:93:BF:F9:F6:ED:42:D9:05:89:87:14:0A:A7:11:C3:B1:25:A9:81
Certificate issuer:       /CN=0893bff9f6ed42d9058987140aa711c3b125a981
Certificate serial:       4D18C62E408F71C29987BDA76C9EF63D855284D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJO_-fbtQtkFiYcUCqcRw7ElqYE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/0893BFF9F6ED42D9058987140AA711C3B125A981.mft
Manifest number:          E0
Signing time:             Mon 20 Nov 2023 05:15:03 +0000
Manifest this update:     Mon 20 Nov 2023 05:10:03 +0000
Manifest next update:     Tue 21 Nov 2023 05:51:03 +0000
Files and hashes:         1: 326131313a343238303a3a2f32392d3438203d3e20323130383833.roa (hash: qeQbePB/jygUl9m3dKOZDTORjhzHewLMx8TF3Q7BtsM=)
                          2: 3138352e3134372e35352e302f32342d3234203d3e20323132333834.roa (hash: igxnFuW8Vwsfv+rwQKVPiB+i/0AtOwFOvS+OUBVFbvY=)
                          3: 0893BFF9F6ED42D9058987140AA711C3B125A981.crl (hash: rsoKUukEuduKatT1vCE40LaV0zNMee5HmRde2wayB00=)
                          4: 326131313a343238303a3a2f32392d3239203d3e20323130383833.roa (hash: h4KbDD17qq0H6ubQkKBNpg8tLhiAt1+/Igw+UDKaXls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:18:c6:2e:40:8f:71:c2:99:87:bd:a7:6c:9e:f6:3d:85:52:84:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0893bff9f6ed42d9058987140aa711c3b125a981
        Validity
            Not Before: Nov 20 05:10:03 2023 GMT
            Not After : Nov 21 05:51:03 2023 GMT
        Subject: CN=14F87156E4CB20ECCAFFEE5D8670747EA134564D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:16:c5:34:99:e8:b4:ef:88:15:fc:01:f0:
                    d8:4f:d0:a5:f5:7c:ca:d9:32:1d:28:eb:cf:01:6e:
                    1b:dc:dc:ff:2b:60:10:cc:cb:95:9a:3f:c6:d1:17:
                    82:54:02:f3:fb:ea:c9:c7:aa:ca:41:fc:e7:d9:ed:
                    77:a2:dc:73:3c:19:5b:3b:10:24:dc:7d:0e:c6:d5:
                    6d:ae:b9:d9:10:25:d2:0c:13:4b:22:bc:aa:d3:16:
                    5d:17:9d:29:63:35:f1:a2:b7:cb:1f:cd:15:98:d8:
                    20:72:a4:51:43:ac:f9:fd:b7:75:fe:e6:0c:aa:38:
                    b1:8b:b1:93:6b:83:83:44:56:62:02:ff:13:fe:52:
                    79:4b:7d:40:13:53:68:84:61:6c:a0:c6:73:98:c8:
                    c1:8f:df:1e:4a:1d:04:ea:ed:08:92:8c:64:0d:78:
                    87:6a:3b:84:5d:d9:e6:f9:6f:5e:3b:03:55:4b:05:
                    1f:50:f4:59:5a:eb:15:11:16:9c:aa:e6:e7:38:04:
                    0f:5b:3a:dc:9c:4d:a9:78:d5:7e:e8:b6:07:bd:26:
                    42:09:c3:4b:91:70:68:ca:77:fb:c6:9d:87:75:51:
                    a4:41:28:f0:67:0e:eb:89:22:c0:67:66:1e:3c:89:
                    dd:d0:d6:fc:82:af:fc:d4:81:90:7c:5f:f2:1c:c2:
                    3a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F8:71:56:E4:CB:20:EC:CA:FF:EE:5D:86:70:74:7E:A1:34:56:4D
            X509v3 Authority Key Identifier:
                keyid:08:93:BF:F9:F6:ED:42:D9:05:89:87:14:0A:A7:11:C3:B1:25:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/0893BFF9F6ED42D9058987140AA711C3B125A981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJO_-fbtQtkFiYcUCqcRw7ElqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/0893BFF9F6ED42D9058987140AA711C3B125A981.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:33:e1:e8:64:46:7b:c3:99:d3:30:9a:8a:c5:2d:2a:4b:26:
         a0:78:70:c6:0f:c2:38:51:29:cb:12:23:7f:23:f3:3e:8d:4e:
         b0:41:3d:2e:6c:eb:8e:ef:4d:de:41:17:21:14:f3:57:3d:0a:
         1a:80:da:5f:7a:3c:65:92:78:80:87:96:ec:ae:dd:e6:28:a9:
         fe:37:44:54:0c:7b:0b:49:0e:cf:c3:79:1e:cf:d1:e3:cd:4b:
         3c:84:6a:bf:13:18:07:27:01:6c:3e:81:97:b5:f7:0c:57:8c:
         56:70:91:b9:d7:83:06:0a:30:58:0c:32:11:9a:12:e9:40:87:
         eb:aa:66:1c:fb:84:ef:53:da:df:f2:8a:94:90:10:68:a0:97:
         e5:a1:3d:0c:d3:ff:f5:6b:87:17:d9:d4:7f:41:df:96:c7:3a:
         f1:de:05:34:70:cb:dc:aa:32:da:2c:ba:32:3d:16:29:9d:f1:
         5a:49:08:ff:f5:52:86:df:b5:27:52:2d:4a:09:82:ac:ac:c6:
         de:17:f1:71:8f:8f:12:69:f1:f6:3d:19:3a:78:c4:b6:2f:2f:
         18:9f:a8:78:c5:15:bc:b7:38:ea:92:55:0a:7c:f9:1b:b8:42:
         5b:35:5d:1c:58:6f:dd:59:76:43:69:0f:ba:ca:57:a7:8f:d0:
         d8:c6:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----