Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/0635BC18E31F9815EC287261638FF125340C4E6F.mft
File:                     0635BC18E31F9815EC287261638FF125340C4E6F.mft (raw, json)
Hash identifier:          hsYUoM54e8kP2095qHTg3jcF1ILABpT2/jH3nlzTmYA=
Subject key identifier:   9A:0E:CC:03:6D:24:28:5F:A7:A1:F3:AE:25:05:E2:17:EA:AD:6F:E2
Authority key identifier: 06:35:BC:18:E3:1F:98:15:EC:28:72:61:63:8F:F1:25:34:0C:4E:6F
Certificate issuer:       /CN=0635bc18e31f9815ec287261638ff125340c4e6f
Certificate serial:       15D963BE691D232CBE1B93F0471215D1E244331E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjW8GOMfmBXsKHJhY4_xJTQMTm8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/0635BC18E31F9815EC287261638FF125340C4E6F.mft
Manifest number:          0161
Signing time:             Mon 11 Dec 2023 02:45:59 +0000
Manifest this update:     Mon 11 Dec 2023 02:40:59 +0000
Manifest next update:     Tue 12 Dec 2023 05:59:59 +0000
Files and hashes:         1: 36322e332e32302e302f32342d3234203d3e203631333137.roa (hash: PQwArp9LdGIKiOwEHTOfDaupCKChlD3bMyt1srlJLUI=)
                          2: 0635BC18E31F9815EC287261638FF125340C4E6F.crl (hash: 6UAFhzwQnS2cbhWYiXmdUt+zavUv6J4ASnsjxsl4feE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d9:63:be:69:1d:23:2c:be:1b:93:f0:47:12:15:d1:e2:44:33:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0635bc18e31f9815ec287261638ff125340c4e6f
        Validity
            Not Before: Dec 11 02:40:59 2023 GMT
            Not After : Dec 12 05:59:59 2023 GMT
        Subject: CN=9A0ECC036D24285FA7A1F3AE2505E217EAAD6FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:2b:b8:95:01:dd:81:67:4c:3d:8f:8c:7f:
                    e8:dc:d8:48:65:6d:71:d5:da:21:b3:b3:4f:70:ce:
                    21:0f:40:f1:4d:45:15:ac:63:9f:fc:11:a5:d9:e7:
                    4f:f1:44:5a:ba:e3:c6:e0:00:0f:44:d7:8d:ba:5d:
                    98:96:35:1d:d7:1d:68:71:74:79:e9:6b:f6:8e:6d:
                    82:ac:83:7b:f9:73:5f:91:ec:d8:b0:06:fc:85:a6:
                    5a:6f:66:79:89:06:13:f9:d3:63:73:84:0e:1f:5c:
                    b8:a3:2e:fa:5d:d7:d3:c1:e1:f6:94:e8:a5:c6:60:
                    1b:0d:a8:13:7d:20:c4:71:54:4c:05:19:da:b1:cc:
                    52:e2:65:65:47:61:d8:fd:4f:86:ed:ab:9f:86:ba:
                    c8:63:17:c9:e9:9a:b4:40:d5:0c:7c:65:7c:c9:d8:
                    30:0a:8f:f1:19:39:4b:3b:e1:a1:34:dc:b6:a4:f4:
                    9c:14:1c:81:ee:a2:4f:34:b4:d7:12:88:3e:f6:5a:
                    cb:0e:fa:f2:68:a4:3d:70:b5:77:dd:a2:78:0e:ed:
                    55:46:f6:a0:a3:01:98:44:53:ab:f3:9b:97:35:33:
                    ea:0e:c7:75:d0:fb:bd:dd:4a:1b:d1:82:d4:a1:6d:
                    8d:93:81:6a:2f:32:95:b4:a7:d1:a8:ac:e4:5a:20:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0E:CC:03:6D:24:28:5F:A7:A1:F3:AE:25:05:E2:17:EA:AD:6F:E2
            X509v3 Authority Key Identifier:
                keyid:06:35:BC:18:E3:1F:98:15:EC:28:72:61:63:8F:F1:25:34:0C:4E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/0635BC18E31F9815EC287261638FF125340C4E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjW8GOMfmBXsKHJhY4_xJTQMTm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/0635BC18E31F9815EC287261638FF125340C4E6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:43:8a:37:38:fb:2a:5d:5e:a4:43:ed:1f:66:33:df:eb:b5:
         65:82:fc:17:05:0b:35:62:99:50:e7:93:ed:67:62:df:db:ee:
         40:83:e0:56:30:16:31:33:98:02:bf:47:1e:93:ee:bf:8d:37:
         a8:1d:ae:df:6b:ea:6d:e3:8c:ab:b2:75:e7:a6:69:12:e9:d9:
         ea:b0:65:d3:47:76:ed:88:d8:0c:c6:b1:1b:37:79:b9:df:a3:
         fb:2c:a6:92:0a:e3:d5:41:18:c4:75:1f:8b:63:1b:90:11:b7:
         9f:ac:eb:fc:bb:4c:35:be:90:66:bf:76:2a:b1:02:65:b3:99:
         b1:c5:c7:4a:49:de:9b:7a:92:81:e3:78:ca:ed:94:67:00:db:
         a0:a0:be:a3:62:d5:ba:18:74:ea:0a:7d:33:0a:a8:49:92:32:
         c1:d2:6c:2c:41:eb:50:fa:98:c7:a9:ca:4d:8f:4c:54:3b:a2:
         3a:30:28:87:8f:df:57:00:f4:60:b7:65:97:b0:aa:6a:75:fc:
         4e:84:18:68:c2:11:e0:a9:3a:bd:96:f9:5f:39:d3:3f:76:38:
         38:df:da:16:33:a5:d4:63:92:11:76:59:ef:0d:9d:10:5d:46:
         af:2e:d7:50:3e:81:0c:25:3c:fe:95:b0:d9:0c:63:25:cb:06:
         8d:98:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----