Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b5d639bc-9931-445b-89d9-bcb1a617358a/0/CD662521CE71EC604BB8F9D3DC04223F412C560A.mft
File:                     CD662521CE71EC604BB8F9D3DC04223F412C560A.mft (raw, json)
Hash identifier:          OFJI1m7dq9RLt12IYAuYR4sClqHuTh0N48Suh9Q5KPs=
Subject key identifier:   07:FE:5D:E6:3C:BE:40:46:5D:7C:11:28:5C:9F:88:F5:DC:22:6A:49
Authority key identifier: CD:66:25:21:CE:71:EC:60:4B:B8:F9:D3:DC:04:22:3F:41:2C:56:0A
Certificate issuer:       /CN=cd662521ce71ec604bb8f9d3dc04223f412c560a
Certificate serial:       23D518ABED35F1385BAA290D2B4E1AFA55DB6D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWYlIc5x7GBLuPnT3AQiP0EsVgo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b5d639bc-9931-445b-89d9-bcb1a617358a/0/CD662521CE71EC604BB8F9D3DC04223F412C560A.mft
Manifest number:          FA
Signing time:             Mon 25 Sep 2023 03:33:56 +0000
Manifest this update:     Mon 25 Sep 2023 03:28:56 +0000
Manifest next update:     Tue 26 Sep 2023 04:14:56 +0000
Files and hashes:         1: 3231332e352e3132382e302f32342d3234203d3e20323130363937.roa (hash: +M3P7A8PEjs3SxFx2cerZ2kgMk09sBSrxgvz+/++6Xw=)
                          2: CD662521CE71EC604BB8F9D3DC04223F412C560A.crl (hash: 6iFVxOs40pVLkkRhr3qb7QmG+aZtKOidDrOU0eofkx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d5:18:ab:ed:35:f1:38:5b:aa:29:0d:2b:4e:1a:fa:55:db:6d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd662521ce71ec604bb8f9d3dc04223f412c560a
        Validity
            Not Before: Sep 25 03:28:56 2023 GMT
            Not After : Sep 26 04:14:56 2023 GMT
        Subject: CN=07FE5DE63CBE40465D7C11285C9F88F5DC226A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:db:e7:a7:40:b4:23:c3:19:d7:63:aa:17:
                    f8:12:65:34:66:61:c3:2f:61:46:01:38:23:5c:2c:
                    0e:cd:c6:dd:86:64:9b:d3:13:c5:fa:e4:72:97:9a:
                    ba:20:7b:4c:ae:4b:2d:73:e4:04:09:86:6c:0a:ff:
                    42:cf:fc:27:65:78:86:62:e2:60:79:57:22:8f:87:
                    a6:0c:e8:97:1c:0c:7a:07:07:bb:fb:4e:99:b6:c5:
                    cd:8e:ab:84:60:d1:d2:57:d2:9a:61:ee:1c:b2:d6:
                    db:53:89:35:60:dd:c1:33:14:e9:0b:d2:d7:95:83:
                    0e:ce:94:dc:c2:83:60:41:2f:55:68:15:cf:d1:ad:
                    08:8b:fc:22:f5:92:9e:c3:a8:fb:15:97:07:22:fd:
                    ac:e7:f2:f9:ff:2c:a3:73:71:dc:79:0e:2b:12:38:
                    88:b2:76:4e:a3:a6:b4:95:a9:49:85:6a:42:92:b6:
                    67:4d:01:91:eb:11:b4:95:ad:a5:a6:13:8b:2f:46:
                    29:b2:e1:92:39:45:df:3b:f6:c8:d7:a9:2e:0e:4e:
                    8e:ac:f7:1a:85:fa:8c:e4:5c:a3:1f:d8:be:02:92:
                    05:fb:d2:c3:cf:6b:6f:c2:92:21:a5:36:ab:5b:91:
                    5f:d3:06:31:ba:68:19:85:ca:d6:b4:ef:ae:62:26:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:5D:E6:3C:BE:40:46:5D:7C:11:28:5C:9F:88:F5:DC:22:6A:49
            X509v3 Authority Key Identifier:
                keyid:CD:66:25:21:CE:71:EC:60:4B:B8:F9:D3:DC:04:22:3F:41:2C:56:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b5d639bc-9931-445b-89d9-bcb1a617358a/0/CD662521CE71EC604BB8F9D3DC04223F412C560A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWYlIc5x7GBLuPnT3AQiP0EsVgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b5d639bc-9931-445b-89d9-bcb1a617358a/0/CD662521CE71EC604BB8F9D3DC04223F412C560A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:da:f4:e5:f2:2e:84:1a:6c:1f:1e:b8:55:39:59:e8:1d:ee:
         d8:75:2d:ad:d9:7b:be:fb:77:18:30:d9:8e:a1:ab:be:8f:a8:
         ab:67:78:f9:4c:6a:d4:d3:5c:4b:f1:23:3e:70:dc:76:08:65:
         8a:46:37:a9:c9:46:b6:6b:5a:eb:01:a7:64:0e:ff:e6:2e:8a:
         30:d7:6a:7f:ea:4c:c3:18:58:63:e1:a2:e2:14:d3:e8:af:8e:
         b1:09:db:e4:e8:e2:c6:74:33:c3:35:89:d7:56:aa:24:ae:18:
         66:20:aa:26:11:0a:de:3f:f8:f3:75:7c:d7:02:7a:e1:b0:f7:
         34:f0:09:70:a9:8d:0c:77:0c:b4:ee:d1:cd:c4:ea:d5:4d:49:
         cf:0c:0e:0c:05:84:eb:5d:f6:52:07:da:56:41:e2:f8:45:18:
         95:cf:18:97:6a:f1:fc:9b:54:83:37:b0:46:7d:9d:ae:4b:f7:
         2e:3d:e8:e2:32:53:d1:03:12:f2:a7:f2:64:78:2a:2c:d9:77:
         38:7e:0a:d8:1f:0f:90:3a:97:12:90:c5:73:b1:88:27:a6:61:
         65:45:06:55:ab:e3:3f:be:85:f6:b5:fb:66:b2:78:cd:c2:0b:
         a3:78:5a:7f:50:2e:08:82:c5:a3:38:c1:43:0e:ab:9d:64:dd:
         43:66:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----