Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
File:                     58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft (raw, json)
Hash identifier:          oey0Bexp+HvSpcMuKLYt7+Ua+YwGeyRLVygjO4GTgBk=
Subject key identifier:   3D:89:1D:9B:EA:57:EE:7C:45:27:8D:5D:56:57:29:8C:4A:77:96:54
Authority key identifier: 58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
Certificate issuer:       /CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
Certificate serial:       43D3D5142233414F65EBE97E4E491F277F3C48EB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
Manifest number:          D1
Signing time:             Wed 28 Aug 2024 09:32:40 +0000
Manifest this update:     Wed 28 Aug 2024 09:27:40 +0000
Manifest next update:     Thu 29 Aug 2024 11:10:40 +0000
Files and hashes:         1: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl (hash: iwIvT6uGVln3YZkthUhAhnupCo0i18z3JabDbQ8tSOg=)
                          2: 326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa (hash: CF0jWSCzZFUy1Fafe137rlHbiCFDPVBfanWNlQQSeOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d3:d5:14:22:33:41:4f:65:eb:e9:7e:4e:49:1f:27:7f:3c:48:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
        Validity
            Not Before: Aug 28 09:27:40 2024 GMT
            Not After : Aug 29 11:10:40 2024 GMT
        Subject: CN=3D891D9BEA57EE7C45278D5D5657298C4A779654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e0:f8:f3:74:8e:35:c4:33:a9:85:84:73:aa:
                    b8:c6:21:9d:54:f8:53:a5:41:55:ea:5a:97:c7:53:
                    b1:12:41:c0:73:11:e8:c5:ce:e7:b3:5c:68:e3:83:
                    51:bf:17:b5:52:a6:52:d1:b4:18:1b:f4:fe:8e:1e:
                    69:01:c1:3d:a0:b8:af:ce:e2:5f:45:c8:8c:d6:a8:
                    68:3c:1f:6c:37:14:80:7e:49:e6:7a:7c:23:3b:fc:
                    30:a7:81:ef:8b:3e:75:5f:35:0d:a0:16:fc:06:a8:
                    ae:5f:00:01:ad:f4:2a:5f:c5:6a:fe:23:3c:66:4b:
                    ea:7d:b2:93:e8:b6:9e:3d:85:d2:21:fa:ff:39:3a:
                    31:73:9f:e0:b6:d6:5e:3f:86:73:9b:11:84:2b:37:
                    9d:19:91:82:59:d0:a1:68:b1:d5:d7:91:00:e7:bd:
                    0c:24:af:15:0c:74:a1:58:e1:a9:b7:17:ff:fa:62:
                    ce:f7:bd:09:f8:c6:88:fd:55:16:84:a8:35:31:ec:
                    ba:34:26:7b:77:fb:78:d4:28:12:5f:21:bf:4f:1f:
                    27:69:cd:53:ca:02:d4:90:d7:d9:dd:16:b9:89:2c:
                    71:b2:e7:40:a5:c0:f7:a4:ad:d6:87:13:4f:0e:f6:
                    f9:cd:8b:7c:19:71:dc:93:e2:a1:54:b9:46:79:05:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:1D:9B:EA:57:EE:7C:45:27:8D:5D:56:57:29:8C:4A:77:96:54
            X509v3 Authority Key Identifier:
                keyid:58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:a5:1e:5e:d4:c7:a6:9f:35:d5:78:8f:23:32:ae:37:96:
         a1:f6:e2:2f:2b:ef:9a:7d:d2:03:5e:7d:a7:d3:00:1e:ba:ba:
         04:28:60:c7:3f:2c:1a:80:1c:d7:7a:5d:d2:17:6a:e0:47:af:
         ad:04:f7:53:fe:6c:4f:4b:55:df:17:1f:c5:19:1d:e8:db:70:
         10:0b:99:9b:1b:98:3a:dd:ff:50:80:e8:40:ad:92:99:b0:2d:
         29:d7:d3:f0:3a:79:95:95:f8:83:b4:1c:4b:6e:37:6a:be:07:
         83:e0:1c:73:3c:e8:e9:44:6e:a6:45:ad:1b:50:a2:da:e8:f0:
         98:20:ca:07:b6:c8:a1:c7:34:59:17:45:a8:e4:aa:9c:45:fc:
         5d:82:30:d9:86:f5:b5:c8:66:9c:8d:f6:6c:69:09:84:29:5f:
         50:47:3f:45:54:1e:e5:09:b8:16:48:9e:85:56:1f:96:08:05:
         a5:56:9f:1d:15:4f:20:b8:37:cd:43:b6:a2:0e:f5:e1:8b:58:
         7c:6b:26:49:14:03:12:03:01:a6:1d:22:c5:63:18:94:2d:2f:
         db:f6:f5:d0:eb:96:d7:9b:7d:3b:6c:cd:46:c1:65:db:5c:92:
         94:fe:36:f4:8f:38:b1:13:87:e7:bc:02:63:6e:dc:9e:da:5e:
         a8:a1:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----