Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.mft
File:                     0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.mft (raw, json)
Hash identifier:          OFqARVBhX2z9H9mjmOnBCsJWYl4c+zjxBtjXX+agKLY=
Subject key identifier:   7A:74:C2:7B:67:6E:6E:30:0B:AE:67:7C:6D:3E:3F:D4:6A:7D:E1:09
Authority key identifier: 0C:EF:F9:DA:8E:CB:F0:D3:D6:A0:7B:0C:24:3F:43:7D:46:6D:DF:39
Certificate issuer:       /CN=0ceff9da8ecbf0d3d6a07b0c243f437d466ddf39
Certificate serial:       499EC8C086CC4EA446B9BF15452282C9E4C1E5DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DO_52o7L8NPWoHsMJD9DfUZt3zk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.mft
Manifest number:          05
Signing time:             Sat 22 Apr 2023 02:34:50 +0000
Manifest this update:     Sat 22 Apr 2023 02:29:50 +0000
Manifest next update:     Sun 23 Apr 2023 05:18:50 +0000
Files and hashes:         1: 0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.crl (hash: uq5LrgDi/zPR3IN8nDxLOiQqv4Dc1sftZXpqotP+Z7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9e:c8:c0:86:cc:4e:a4:46:b9:bf:15:45:22:82:c9:e4:c1:e5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ceff9da8ecbf0d3d6a07b0c243f437d466ddf39
        Validity
            Not Before: Apr 22 02:29:50 2023 GMT
            Not After : Apr 23 05:18:50 2023 GMT
        Subject: CN=7A74C27B676E6E300BAE677C6D3E3FD46A7DE109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:8a:37:6b:a3:28:db:9b:a7:2b:d1:8e:3c:
                    74:03:94:9d:aa:32:c7:f8:da:4b:58:97:92:66:c6:
                    7b:bc:93:70:c5:42:22:cd:ee:c0:84:fd:ca:75:0a:
                    5b:34:3c:ef:89:45:b0:a3:22:bc:b6:d6:47:26:e3:
                    3c:1f:c6:56:06:a9:39:11:e9:25:2f:55:1f:bc:3c:
                    46:4f:74:69:f1:a2:a4:fc:97:e6:3d:fb:f0:a4:ba:
                    38:63:10:fd:37:f1:cb:14:84:58:da:17:54:fc:17:
                    4d:99:26:f9:33:76:49:52:82:a4:4e:e4:b7:6f:c8:
                    d9:81:a6:88:1f:ee:0f:36:55:fd:2d:f1:13:2e:4d:
                    ea:d2:60:88:60:55:8a:f9:06:b6:b0:43:99:d6:a6:
                    9e:0b:00:0a:c0:9f:68:76:b1:08:2b:0a:ff:80:f6:
                    de:c5:b1:ff:6e:4b:49:97:3e:1e:ae:9b:0a:e7:06:
                    29:95:c2:7a:a8:cd:7b:c2:fe:83:e1:6f:12:0c:c2:
                    29:f1:1d:11:85:5b:a0:bc:af:8c:bf:4c:68:62:5a:
                    de:5b:ab:40:f7:f7:4d:7a:e9:bd:15:3b:57:96:b5:
                    76:5c:bf:52:8a:54:3b:59:1b:03:34:e3:2f:2d:fc:
                    f3:d7:a5:3e:d6:a9:3f:bb:88:a3:af:5f:2b:a6:a5:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:C2:7B:67:6E:6E:30:0B:AE:67:7C:6D:3E:3F:D4:6A:7D:E1:09
            X509v3 Authority Key Identifier:
                keyid:0C:EF:F9:DA:8E:CB:F0:D3:D6:A0:7B:0C:24:3F:43:7D:46:6D:DF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO_52o7L8NPWoHsMJD9DfUZt3zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a0:3d:f8:be:9d:d0:5e:87:90:fd:45:b3:46:4f:10:5e:8a:
         d1:96:e0:11:d9:e4:25:ff:5f:cd:88:32:be:37:f3:e6:aa:1e:
         38:13:2f:38:a3:ef:a9:99:bc:8c:0d:51:90:83:53:a1:c5:e0:
         ba:13:3f:11:a2:a2:fe:01:7e:1a:03:89:94:77:b3:aa:87:ed:
         3a:71:f2:09:1b:74:d2:68:95:2a:0f:42:a3:a7:ac:e5:a4:02:
         7b:26:0d:c9:50:1f:a1:f1:26:78:d6:09:7d:2a:ce:37:32:a1:
         f6:39:24:7f:b7:5e:c7:87:58:1a:8a:72:77:db:08:08:8c:1c:
         8b:c7:02:84:cb:37:d9:84:63:c6:81:4c:2a:9a:40:66:94:21:
         72:f7:34:5e:dd:5e:4d:d9:71:d6:ca:ff:28:34:4c:64:7a:87:
         3e:4c:c8:bb:b6:27:50:b3:75:e6:96:9a:a6:ed:fc:31:77:36:
         93:ec:14:fe:2d:cc:84:02:bc:64:74:21:04:f7:01:26:27:6f:
         1d:2e:7e:7d:a9:df:85:0e:58:58:c9:d0:37:52:bc:17:2d:18:
         b4:cd:c6:ea:70:a9:9a:a7:a2:12:d8:93:3c:47:da:77:82:6c:
         f8:24:0d:c9:7c:38:68:71:d0:32:58:b9:a0:3c:ce:d9:5b:a0:
         ca:e4:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----