Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.mft
File:                     8BACF6F0608BB2CB610013D00744F2EABDFDE44B.mft (raw, json)
Hash identifier:          EDSffOmZXj8wlF8Ph8YJW6XwDqjBdKPFqwAQzluUIk4=
Subject key identifier:   7A:3C:B7:46:64:9D:5B:EC:B5:9E:EA:EA:9E:4F:1A:4C:81:D0:4F:AE
Authority key identifier: 8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
Certificate issuer:       /CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Certificate serial:       3739193373D6BF9F89D45F68149D8E0CBC67E4E0
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.mft
Manifest number:          08
Signing time:             Mon 16 Oct 2023 10:46:34 +0000
Manifest this update:     Mon 16 Oct 2023 10:41:34 +0000
Manifest next update:     Tue 17 Oct 2023 14:32:34 +0000
Files and hashes:         1: 326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (hash: miDNa469ZNVkc6HLeoE7QNcDT7S4Cdpt7Ajw6pId/6I=)
                          2: 326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (hash: 7N77kO9WjgyGt9aTpvsnvbbBIGQfvl/J89m4JIxRdPE=)
                          3: 326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (hash: dBVDPK92yyOpyFjlokg6Nqd4qpVw/csEdI1t9iiwC8s=)
                          4: 326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (hash: iph2SeeweIluoCsLWK5s8g9Pwo3s7gF1R3JxhNNpBz8=)
                          5: 8BACF6F0608BB2CB610013D00744F2EABDFDE44B.crl (hash: GwNTf8oERzP8SfgtZ8JnT9DoBFBaYWM0V842TSz6tdg=)
                          6: 326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa (hash: 6s9FOBPwoZf8xTqpbVARSNiKV4x3h8pvQaOQUMOHkyw=)
                          7: 326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (hash: 8btgsl0uKVjULpPy75NMLgHV26SruEwcD7oN7YfjM1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:39:19:33:73:d6:bf:9f:89:d4:5f:68:14:9d:8e:0c:bc:67:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
        Validity
            Not Before: Oct 16 10:41:34 2023 GMT
            Not After : Oct 17 14:32:34 2023 GMT
        Subject: CN=7A3CB746649D5BECB59EEAEA9E4F1A4C81D04FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:3b:72:bf:b7:ca:56:31:ab:8a:38:26:05:
                    a2:2c:38:92:0f:8c:6f:67:cd:4e:e6:04:8e:f3:fa:
                    dc:ba:62:94:c4:64:53:59:a7:65:bf:ba:a8:86:79:
                    d7:36:cb:9e:bc:3e:1a:01:0d:d8:43:3c:f3:b4:2d:
                    ad:e3:55:c7:8c:bf:86:13:22:94:6e:48:fc:86:8e:
                    4f:14:29:c8:a2:61:71:c9:5e:10:39:7a:1c:cf:de:
                    9b:76:ad:33:2c:c9:b5:35:13:a1:de:8d:59:c0:ec:
                    da:74:33:e2:1d:f2:d8:1c:51:d4:45:02:f4:6f:0d:
                    b0:06:79:4d:c9:59:e6:27:bb:26:c8:43:73:3b:f5:
                    35:75:0d:e4:71:cd:65:f9:b0:94:36:7b:cb:a7:ba:
                    a9:21:b0:09:37:c4:e1:89:1e:48:02:40:6b:fa:8f:
                    ff:49:ce:da:2c:f2:94:d8:04:6c:e8:03:18:4b:66:
                    e6:96:f9:f3:95:7e:db:0e:8f:3d:49:6c:7b:38:7e:
                    db:9a:ac:a4:99:92:a2:e4:5c:19:fd:72:26:89:25:
                    3b:2c:89:d4:08:86:cb:c8:df:28:61:64:8c:60:69:
                    9e:07:bc:a5:af:ad:5e:4e:c8:d1:e5:bd:be:8d:a3:
                    96:72:72:73:dc:54:1a:5b:8a:72:04:b9:e1:e9:15:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3C:B7:46:64:9D:5B:EC:B5:9E:EA:EA:9E:4F:1A:4C:81:D0:4F:AE
            X509v3 Authority Key Identifier:
                keyid:8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2d:7e:7d:f2:7e:71:9b:9e:6c:0e:f2:ae:22:fa:75:fa:01:
         d3:51:f2:f3:9f:7d:ee:43:37:ac:bf:6f:ae:25:c9:16:26:33:
         26:0b:df:b9:d1:c2:92:b6:b2:84:43:1a:fe:98:3b:fe:7c:28:
         1a:a0:a1:c7:64:33:25:3c:05:34:9f:95:27:f9:d1:a0:a5:ce:
         3d:28:73:8c:3f:29:b8:ba:0d:83:68:66:db:ae:e8:45:11:0f:
         9b:fc:d6:c0:34:92:76:37:c0:9f:10:09:2c:6c:20:45:2b:68:
         df:84:d8:54:b3:08:66:e7:14:03:a6:00:89:67:93:15:56:2e:
         41:be:67:02:5c:81:ba:79:c0:ba:95:48:b2:51:45:73:16:36:
         1c:7e:86:e1:85:df:a5:b6:51:7d:9a:56:d9:0f:f6:f4:70:60:
         0f:2a:86:a9:e7:41:b4:28:93:2c:cf:a2:bd:d7:9f:3b:38:7f:
         2c:62:e9:26:37:4a:ec:0f:c7:d0:5d:df:8b:0b:7d:c8:ca:37:
         b4:bc:7c:ed:19:b3:66:2d:b3:23:20:0a:61:68:be:9d:31:df:
         fc:c2:ad:17:3d:4d:5d:c1:12:10:b6:57:bb:50:d5:f5:13:3c:
         f6:a0:4e:74:35:2e:91:e5:c8:a3:ab:6b:52:a2:c4:45:b7:fe:
         e4:5e:b6:3d
-----BEGIN CERTIFICATE-----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