Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.mft
File:                     0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.mft (raw, json)
Hash identifier:          tWYeEfDKEstRdXgGcMGfclMyI/0wyydgeXraTkAgF4Y=
Subject key identifier:   4E:0D:0F:AD:95:BB:38:82:72:8B:F3:6C:36:2A:43:0F:4A:10:0B:4D
Authority key identifier: 0D:5F:4F:D1:26:7E:75:11:6C:FB:BF:22:BD:52:EF:BD:A9:7F:B9:C4
Certificate issuer:       /CN=0d5f4fd1267e75116cfbbf22bd52efbda97fb9c4
Certificate serial:       7D23DAF463AE05F9CE04ED202F9223D6F66BAEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DV9P0SZ-dRFs-78ivVLvval_ucQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.mft
Manifest number:          5B
Signing time:             Tue 06 Dec 2022 10:00:21 +0000
Manifest this update:     Tue 06 Dec 2022 09:55:21 +0000
Manifest next update:     Wed 07 Dec 2022 10:15:21 +0000
Files and hashes:         1: 3134362e31392e39372e302f32342d3234203d3e203531303838.roa (hash: oIs0/do7a7kPzE4RZDaD7cJ1tY0wXGd1DvVlud1YKNY=)
                          2: 326131333a3830303a3a2f32392d3239203d3e203531303838.roa (hash: Q9Q0Mu9oUVn+1N/ZfBxNc79Zp3AH6m2rIO4IxHYU3/c=)
                          3: 0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.crl (hash: Yc0PztR443120lh/CFshBauBwype22jEAeJ4PFkXpQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:23:da:f4:63:ae:05:f9:ce:04:ed:20:2f:92:23:d6:f6:6b:ae:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5f4fd1267e75116cfbbf22bd52efbda97fb9c4
        Validity
            Not Before: Dec  6 09:55:21 2022 GMT
            Not After : Dec  7 10:15:21 2022 GMT
        Subject: CN=4E0D0FAD95BB3882728BF36C362A430F4A100B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:af:db:50:12:4a:6f:a5:e4:70:3b:94:1e:
                    e7:15:d6:f3:b9:63:ea:80:6f:3e:a9:d7:de:f5:25:
                    d0:1b:ca:9d:f3:8d:70:d1:6e:fe:24:d3:15:a1:4c:
                    17:64:ef:3f:57:2f:d5:00:70:8d:08:27:18:55:24:
                    4e:fa:3c:1e:49:18:c6:4d:88:5c:f1:40:a7:d0:42:
                    be:f7:7b:e6:4f:92:c3:3c:01:00:d2:fd:71:5d:55:
                    11:20:b8:64:47:20:70:5f:e9:21:8d:fc:39:c7:23:
                    63:48:5b:00:63:80:94:b2:7e:7a:da:a2:4f:6c:b1:
                    d8:da:7f:f6:31:ee:1e:13:5f:c7:0a:72:42:01:9e:
                    4b:99:44:7d:a7:78:53:a0:4e:b9:02:af:2a:1a:1f:
                    ee:14:b0:a2:93:37:48:11:cb:51:3a:43:54:f3:a8:
                    d8:df:7f:19:f3:73:79:1f:9b:a4:26:de:0d:ca:b5:
                    2d:2d:ab:27:47:2d:ff:a9:f2:0b:f0:25:82:eb:34:
                    0f:68:81:ef:22:7b:ce:bf:53:6b:4d:73:66:c5:23:
                    c1:12:88:c0:98:39:35:57:a8:60:49:70:1d:86:93:
                    2a:5e:81:87:36:50:c0:c2:0f:a4:ff:35:b9:b1:29:
                    c8:ee:0e:fd:fd:86:de:ae:00:02:32:48:b1:d6:7a:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:0F:AD:95:BB:38:82:72:8B:F3:6C:36:2A:43:0F:4A:10:0B:4D
            X509v3 Authority Key Identifier:
                keyid:0D:5F:4F:D1:26:7E:75:11:6C:FB:BF:22:BD:52:EF:BD:A9:7F:B9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DV9P0SZ-dRFs-78ivVLvval_ucQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4f:db:f4:08:6a:2d:b7:46:4d:fa:42:9e:50:c3:28:c6:5a:
         4d:57:10:60:be:f8:57:01:d1:b0:19:f3:af:4b:5a:a1:69:6c:
         62:6c:e5:58:34:15:0e:4e:27:8f:5b:d2:0a:9f:0f:43:f2:51:
         0b:23:ff:65:20:ae:e8:aa:8d:41:b4:cd:ff:f5:5c:ea:99:b9:
         e7:07:d5:d7:7d:ec:e8:f0:72:ae:b6:d7:4e:e9:0a:5d:2d:9b:
         e8:2c:e8:6e:24:37:11:4f:7e:1c:5c:5d:07:67:d1:67:fa:5d:
         29:13:be:0a:1f:6c:6f:59:6b:ee:79:94:e3:91:64:84:b8:22:
         ca:5c:f0:3b:23:f9:58:cb:e7:16:b4:04:9c:31:9d:85:d1:48:
         e8:3a:0d:93:ae:83:7a:3a:b3:97:cc:8a:56:7f:b1:78:1c:d3:
         fa:02:ae:86:e1:62:e4:f7:d8:c9:c8:71:f2:44:b8:97:7b:9a:
         92:92:62:63:0d:6b:c3:b8:13:59:fb:4d:d7:d6:f6:d1:16:e0:
         04:28:46:18:79:d2:e7:8c:63:97:af:0e:6c:52:df:fb:1e:4b:
         64:3e:a1:db:f6:9d:10:49:7c:98:61:97:80:ad:21:9f:70:a2:
         65:7e:16:b2:2f:a6:18:c1:95:d4:41:06:a7:72:44:b4:67:83:
         55:bf:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----