Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/0/A5A36EBF648A65ED02044E9535368C2225FB6AB5.mft
File:                     A5A36EBF648A65ED02044E9535368C2225FB6AB5.mft (raw, json)
Hash identifier:          Ju6qEtzCgEINYPCb1JwvneN/gKkawjRvshtJLMHjF8w=
Subject key identifier:   FD:00:AE:EC:EF:85:A4:1E:89:08:22:D9:EB:91:C5:5F:FF:67:C4:1A
Authority key identifier: A5:A3:6E:BF:64:8A:65:ED:02:04:4E:95:35:36:8C:22:25:FB:6A:B5
Certificate issuer:       /CN=a5a36ebf648a65ed02044e9535368c2225fb6ab5
Certificate serial:       3003C7C8A1FEF389E463C1E4D56C6E5276867722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paNuv2SKZe0CBE6VNTaMIiX7arU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/0/A5A36EBF648A65ED02044E9535368C2225FB6AB5.mft
Manifest number:          D2
Signing time:             Sat 25 Nov 2023 01:50:14 +0000
Manifest this update:     Sat 25 Nov 2023 01:45:14 +0000
Manifest next update:     Sun 26 Nov 2023 04:02:14 +0000
Files and hashes:         1: AS47272.asa (hash: B+MLsqyraQgoWPL4BNazWoyUQkY/teluWrBZlVvLk0U=)
                          2: A5A36EBF648A65ED02044E9535368C2225FB6AB5.crl (hash: s0w/n6lgx0kNAdHhEFQeBP4BLV/eWAKK+3R5JgIyVUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:03:c7:c8:a1:fe:f3:89:e4:63:c1:e4:d5:6c:6e:52:76:86:77:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a36ebf648a65ed02044e9535368c2225fb6ab5
        Validity
            Not Before: Nov 25 01:45:14 2023 GMT
            Not After : Nov 26 04:02:14 2023 GMT
        Subject: CN=FD00AEECEF85A41E890822D9EB91C55FFF67C41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:52:88:ba:8c:f5:94:4d:cd:c4:5b:e8:cc:
                    69:27:0d:d4:d6:f9:9e:21:78:0f:7e:f2:b6:72:04:
                    bf:4e:77:53:9e:86:eb:fe:23:17:29:2d:d0:06:2c:
                    0c:d1:cb:f0:95:f0:ac:e3:fb:19:31:83:8c:04:ff:
                    3a:66:70:98:31:83:89:2f:19:c3:82:50:0c:2f:84:
                    37:7e:3a:e2:0a:d7:73:6a:60:3b:c1:7a:09:77:cd:
                    10:61:d7:55:8b:31:79:ee:56:eb:43:ae:c5:6e:86:
                    9b:82:88:ca:89:c5:ce:bc:ea:e9:91:0d:62:e5:d1:
                    46:59:d2:b7:98:79:e1:de:d4:5c:46:91:b7:22:0b:
                    4a:e5:c1:b1:e6:c8:33:90:36:0b:a5:2e:8a:fd:ea:
                    80:fe:3c:64:01:61:6a:73:08:98:f6:d1:59:d6:d1:
                    fa:48:cb:d7:08:21:4b:91:89:46:1c:f9:68:4e:32:
                    e4:47:57:bb:13:8e:84:ed:42:79:e9:40:6f:0b:2f:
                    ed:1d:66:a5:2f:77:63:9f:87:94:4d:7b:62:b3:59:
                    0c:4b:ae:87:8c:9c:02:30:5c:93:aa:54:e3:1b:cd:
                    77:d3:f3:fa:35:98:ff:9f:4d:9f:4a:a1:9a:a0:e2:
                    bf:57:d9:65:8b:0e:8a:2e:ea:c9:91:fc:a4:0f:88:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:00:AE:EC:EF:85:A4:1E:89:08:22:D9:EB:91:C5:5F:FF:67:C4:1A
            X509v3 Authority Key Identifier:
                keyid:A5:A3:6E:BF:64:8A:65:ED:02:04:4E:95:35:36:8C:22:25:FB:6A:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/0/A5A36EBF648A65ED02044E9535368C2225FB6AB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paNuv2SKZe0CBE6VNTaMIiX7arU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/0/A5A36EBF648A65ED02044E9535368C2225FB6AB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:03:d1:2a:7d:a1:64:dd:e2:dd:3b:cf:8b:4e:af:0c:ed:b9:
         99:d4:6d:8f:de:85:63:ae:7f:97:18:bd:38:5f:a2:02:27:56:
         b7:45:f6:a3:2c:d8:84:d5:1f:5f:59:22:de:b3:ea:da:0e:d4:
         62:f2:e8:c9:ba:f8:bf:e2:57:fe:2d:c2:06:85:4b:d6:b2:5c:
         99:64:02:f2:d1:9c:01:00:ee:58:8c:b0:7f:6e:78:9e:45:27:
         4c:80:7b:ca:34:c8:45:47:b6:a3:ae:b4:bf:0e:dd:a5:e5:a6:
         0f:94:cf:e0:73:0a:2d:d2:cf:c9:1c:a3:cc:cd:f7:e1:ca:fe:
         ce:d5:b8:2d:7d:9f:93:01:6b:9b:03:d6:e4:42:3e:fd:3c:88:
         4f:79:9e:04:59:3a:ab:cf:a3:5d:3c:61:03:94:bd:28:4c:41:
         3c:a3:dc:0d:74:f9:80:80:c7:46:1d:50:a4:7c:3d:0b:5a:6c:
         40:b5:fd:cd:6b:48:2f:d7:11:72:4c:e6:f6:b8:49:a1:fb:c1:
         be:8e:01:89:7e:0c:db:6a:06:aa:f6:a4:6a:2e:45:e3:45:6d:
         97:bf:87:19:08:17:81:13:5b:3b:8c:b8:b1:70:01:a9:d0:40:
         31:50:af:56:09:dd:34:b8:2b:e8:9a:11:ef:b1:cd:3a:f7:b9:
         c7:78:15:ee
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMAPHyKH+84nkY8Hk1WxuUnaGdyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTVhMzZlYmY2NDhhNjVlZDAyMDQ0ZTk1MzUzNjhjMjIy
NWZiNmFiNTAeFw0yMzExMjUwMTQ1MTRaFw0yMzExMjYwNDAyMTRaMDMxMTAvBgNV
BAMTKEZEMDBBRUVDRUY4NUE0MUU4OTA4MjJEOUVCOTFDNTVGRkY2N0M0MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5FKIuoz1lE3NxFvozGknDdTW
+Z4heA9+8rZyBL9Od1Oehuv+IxcpLdAGLAzRy/CV8Kzj+xkxg4wE/zpmcJgxg4kv
GcOCUAwvhDd+OuIK13NqYDvBegl3zRBh11WLMXnuVutDrsVuhpuCiMqJxc686umR
DWLl0UZZ0reYeeHe1FxGkbciC0rlwbHmyDOQNgulLor96oD+PGQBYWpzCJj20VnW
0fpIy9cIIUuRiUYc+WhOMuRHV7sTjoTtQnnpQG8LL+0dZqUvd2Ofh5RNe2KzWQxL
roeMnAIwXJOqVOMbzXfT8/o1mP+fTZ9KoZqg4r9X2WWLDoou6smR/KQPiGkdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/QCu7O+FpB6JCCLZ65HFX/9nxBowHwYDVR0j
BBgwFoAUpaNuv2SKZe0CBE6VNTaMIiX7arUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzAvQTVBMzZFQkY2NDhBNjVFRDAyMDQ0RTk1MzUzNjhDMjIyNUZCNkFCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BhTnV2MlNLWmUwQ0JFNlZOVGFNSWlY
N2FyVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYzkwZjRmNi1m
MmM0LTQ4ODItOTFjZi05YjhmMGIzOGQ3ZGEvMC9BNUEzNkVCRjY0OEE2NUVEMDIw
NDRFOTUzNTM2OEMyMjI1RkI2QUI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagPRKn2hZN3i3TvPi06v
DO25mdRtj96FY65/lxi9OF+iAidWt0X2oyzYhNUfX1ki3rPq2g7UYvLoybr4v+JX
/i3CBoVL1rJcmWQC8tGcAQDuWIywf254nkUnTIB7yjTIRUe2o660vw7dpeWmD5TP
4HMKLdLPyRyjzM334cr+ztW4LX2fkwFrmwPW5EI+/TyIT3meBFk6q8+jXTxhA5S9
KExBPKPcDXT5gIDHRh1QpHw9C1psQLX9zWtIL9cRckzm9rhJofvBvo4BiX4M22oG
qvakai5F40Vtl7+HGQgXgRNbO4y4sXABqdBAMVCvVgndNLgr6JoR77HNOve5x3gV
7g==
-----END CERTIFICATE-----