Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b658d69f-19e4-4ad2-a0ff-b6d2dfb1b5a8/IFKr3hnTS6A0BiidKTpuj7uPoo8.mft
File:                     IFKr3hnTS6A0BiidKTpuj7uPoo8.mft (raw, json)
Hash identifier:          5t+ElhvlP+N31ci6T6V1oi3IFyYcSI60hQDrY/3sLhM=
Subject key identifier:   16:E7:3F:11:A5:5D:D5:37:B9:47:62:B5:FF:FC:D3:82:75:6C:27:CA
Authority key identifier: 20:52:AB:DE:19:D3:4B:A0:34:06:28:9D:29:3A:6E:8F:BB:8F:A2:8F
Certificate issuer:       /CN=2052abde19d34ba03406289d293a6e8fbb8fa28f
Certificate serial:       0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IFKr3hnTS6A0BiidKTpuj7uPoo8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b658d69f-19e4-4ad2-a0ff-b6d2dfb1b5a8/IFKr3hnTS6A0BiidKTpuj7uPoo8.mft
Manifest number:          0A
Signing time:             Wed 07 Dec 2022 14:42:11 +0000
Manifest this update:     Wed 07 Dec 2022 14:42:11 +0000
Manifest next update:     Wed 07 Dec 2022 20:42:11 +0000
Files and hashes:         1: IFKr3hnTS6A0BiidKTpuj7uPoo8.crl (hash: TTSDoz6U2Pe12uN6asGNcclIXlmTKIm10eVMUng/D3k=)
                          2: dIZKk2lLov68rmgz_iQBQFbr8Uk.roa (hash: aZTLE5eqglJAYPitH4j4kxdodz6NE2M4m3DSTdTeLoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2052abde19d34ba03406289d293a6e8fbb8fa28f
        Validity
            Not Before: Dec  7 14:42:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16E73F11A55DD537B94762B5FFFCD382756C27CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:3a:3c:84:6a:b8:4a:e1:6e:97:7d:ef:1d:
                    c5:3f:53:7e:89:c5:68:17:f3:b5:0b:87:ca:c7:94:
                    30:87:02:16:78:41:19:8b:47:ed:a9:d4:05:95:17:
                    66:0b:41:1f:84:d1:4c:15:0d:ce:36:bd:15:1a:69:
                    12:cf:4f:05:cd:de:e1:3a:06:6c:ca:5f:dd:b7:8c:
                    37:a2:85:84:60:b1:3e:50:55:94:ac:18:0a:8b:c0:
                    c7:85:48:e8:06:77:77:44:30:a3:f1:9e:93:86:dc:
                    d5:37:97:4e:7b:e6:e7:9e:aa:da:2c:6d:ec:ad:9b:
                    45:c6:8c:74:11:30:bf:5e:83:05:c6:48:69:d0:ad:
                    0f:06:ec:f7:b9:9c:0e:8b:c6:dd:07:00:11:b0:1a:
                    13:e9:28:5d:a7:28:ca:91:c7:9e:6a:1c:da:1b:d1:
                    eb:8b:58:0b:f5:5a:b3:4f:b3:1f:da:c2:e4:2a:3d:
                    e8:cb:f3:aa:b4:82:7a:e6:11:1c:a4:b0:3e:9e:2b:
                    12:ce:66:c4:05:3e:a1:b5:80:76:6b:cc:6c:08:ad:
                    8b:ee:46:9b:c4:f1:10:cf:89:50:57:8e:2e:6d:7b:
                    15:6c:41:c5:92:4f:d0:37:5a:0d:db:49:f1:3d:a6:
                    d8:8c:45:57:49:33:17:58:61:6b:8f:c4:24:d6:d0:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E7:3F:11:A5:5D:D5:37:B9:47:62:B5:FF:FC:D3:82:75:6C:27:CA
            X509v3 Authority Key Identifier:
                keyid:20:52:AB:DE:19:D3:4B:A0:34:06:28:9D:29:3A:6E:8F:BB:8F:A2:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b658d69f-19e4-4ad2-a0ff-b6d2dfb1b5a8/IFKr3hnTS6A0BiidKTpuj7uPoo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFKr3hnTS6A0BiidKTpuj7uPoo8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b658d69f-19e4-4ad2-a0ff-b6d2dfb1b5a8/IFKr3hnTS6A0BiidKTpuj7uPoo8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:ca:4a:d1:83:98:51:54:95:97:a8:70:6d:14:8c:40:97:
         03:c2:27:aa:14:f8:4e:de:96:23:fd:7b:cc:35:ce:89:d1:29:
         2e:8e:0f:51:ff:0b:73:17:3b:2f:3c:de:57:ca:83:a0:12:66:
         e3:86:86:43:ec:95:ed:8f:d7:0a:ab:86:a7:a9:e9:bc:0c:49:
         1f:06:55:a9:d7:15:bf:67:e9:b2:84:5c:cb:18:f0:18:ee:53:
         e1:cc:14:09:9e:ae:f7:79:5b:f0:ee:fd:5b:ca:8c:2c:0a:05:
         3e:02:92:f4:d6:f0:4c:45:cf:59:57:e8:9a:a9:1c:30:56:ec:
         ca:b4:8e:97:7c:f6:63:23:55:34:ab:c2:00:ff:65:4b:b0:2f:
         90:ee:e9:42:02:fd:dc:49:29:9e:d4:6b:f8:87:a7:ba:8c:e8:
         b7:ba:23:bb:00:e3:b3:9a:0d:17:61:7d:26:35:db:f2:47:d1:
         f1:8a:74:5a:b3:ab:94:a1:22:09:69:db:2f:3e:b7:09:9d:46:
         e1:68:25:9a:0d:2b:76:df:3d:cc:20:f6:61:97:99:03:df:02:
         c7:d9:a4:92:6e:ba:07:22:7e:8b:2b:62:cd:6c:88:8c:05:f6:
         71:f9:dc:63:72:ff:68:c5:f0:f9:6f:35:7f:df:b6:50:e0:70:
         24:8a:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----