Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.mft
File:                     FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.mft (raw, json)
Hash identifier:          aTlVxeVN7uV8IbCzuDI9y6lHSXmTbdJDXppEwyONRgA=
Subject key identifier:   6C:0B:A6:A6:D6:85:63:E9:E9:33:77:28:9D:E2:33:27:D2:84:E7:5D
Authority key identifier: FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
Certificate issuer:       /CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Certificate serial:       6A1865A80D1C560D8CE5F28744615974895FA250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.mft
Manifest number:          EC
Signing time:             Wed 20 Dec 2023 23:36:02 +0000
Manifest this update:     Wed 20 Dec 2023 23:31:02 +0000
Manifest next update:     Fri 22 Dec 2023 01:38:02 +0000
Files and hashes:         1: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: Q+0iKwhBp/O3Grimftx+AJh5Fh988rR0IKES9qvuRp4=)
                          2: FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.crl (hash: rh+7kT4b4yKVEHITAxIXBqPceQKKelj3RGPL+vXF0fQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:18:65:a8:0d:1c:56:0d:8c:e5:f2:87:44:61:59:74:89:5f:a2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
        Validity
            Not Before: Dec 20 23:31:02 2023 GMT
            Not After : Dec 22 01:38:02 2023 GMT
        Subject: CN=6C0BA6A6D68563E9E93377289DE23327D284E75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:3f:1f:4c:75:15:4f:fc:b3:82:c9:24:a5:
                    8e:92:48:77:5d:37:0d:eb:0c:5b:63:10:b7:b0:a0:
                    10:a5:a4:3f:27:56:fb:f6:26:52:97:81:2d:96:d2:
                    57:09:b6:ff:78:1f:42:76:8c:c2:12:88:9a:5f:9f:
                    2b:1e:fd:c2:9f:4a:c4:53:fe:87:7a:82:2b:46:40:
                    d5:d6:7b:1a:4f:08:35:25:7a:61:74:ff:80:54:e5:
                    a0:72:7c:a2:1c:c7:b7:fb:82:5f:f1:a7:7a:af:fd:
                    5c:f4:6c:06:4e:9f:2f:e7:e2:4e:0c:d0:bd:c4:df:
                    d3:87:2a:7e:bc:de:4d:f9:16:19:8f:33:e9:fc:9a:
                    58:f0:94:69:96:de:4b:b5:68:48:5d:66:dc:ba:5e:
                    cf:a6:40:f8:11:7e:01:e1:7b:c8:f4:cd:2a:f1:ac:
                    8e:09:ff:65:b3:c2:86:be:45:4c:36:6a:59:fe:e7:
                    d8:75:f6:be:83:f0:cc:8b:40:f5:96:61:5c:3e:07:
                    b9:ea:f0:3b:f8:7f:0f:c2:db:be:f9:c8:b3:25:fe:
                    c6:5b:21:e5:46:b5:ac:90:5a:9f:4f:db:56:6f:54:
                    cc:58:b7:e3:83:92:74:a1:f6:a6:45:02:6d:c8:8c:
                    fd:5d:b0:b3:4e:6a:1c:15:92:10:7f:29:5f:d9:60:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0B:A6:A6:D6:85:63:E9:E9:33:77:28:9D:E2:33:27:D2:84:E7:5D
            X509v3 Authority Key Identifier:
                keyid:FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0d:c6:eb:77:b9:38:be:52:1c:fe:ff:c8:30:a2:c6:6d:04:
         f6:67:ff:93:86:a4:2d:7b:d3:2c:57:53:5d:34:81:34:a1:04:
         64:80:59:7f:53:35:21:d4:95:aa:32:5e:8e:b1:05:b3:b7:c2:
         1e:c8:c6:1d:c8:5c:92:7c:be:12:a2:83:ce:22:bd:db:43:38:
         2c:09:78:98:b6:45:5d:c9:2c:5c:a6:08:c3:9b:a7:4b:73:8f:
         6f:f0:e4:17:75:60:5d:ff:a6:5b:fa:b9:58:08:bc:c9:9a:e0:
         ab:12:e4:be:eb:48:63:2a:bc:01:3b:bf:7e:6e:b9:51:50:b0:
         ac:c3:33:36:d3:f1:3c:ca:7b:5a:30:05:28:0c:88:cc:53:68:
         a2:1d:44:f5:b4:16:e3:91:73:58:0f:e9:ac:6d:d0:71:6f:54:
         5e:42:54:76:ac:0a:27:a5:1c:72:01:1f:80:68:aa:aa:06:e4:
         98:e9:a9:aa:ae:fa:1f:93:aa:81:22:a9:b5:69:06:ad:f1:c8:
         4e:1c:dd:dc:af:c8:35:ba:96:bc:17:0d:07:4e:87:08:86:f0:
         a6:60:16:d2:98:72:5d:4e:95:37:5e:4c:bf:47:ab:8c:c0:16:
         e9:a6:df:9e:44:73:22:ed:1f:e5:22:6a:69:26:59:e3:d3:64:
         f0:de:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----