Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.mft
File:                     7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.mft (raw, json)
Hash identifier:          7t1kkRzVwp31RmvWYEzaLSsLlfeb+0a/ys1J6i99NoA=
Subject key identifier:   63:29:E7:63:C1:B0:E0:04:DB:6B:8E:36:B9:03:F5:45:B4:09:70:5B
Authority key identifier: 7D:B2:24:DB:42:AC:0A:5F:6F:27:C8:E3:01:A2:35:6E:E4:8D:E3:3D
Certificate issuer:       /CN=7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D
Certificate serial:       3CDE08F241937496189FD35873B9CEC2504B5DE5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.mft
Manifest number:          05
Signing time:             Sat 22 Apr 2023 02:34:51 +0000
Manifest this update:     Sat 22 Apr 2023 02:29:51 +0000
Manifest next update:     Sun 23 Apr 2023 03:28:51 +0000
Files and hashes:         1: 7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.crl (hash: RGm77ddVxXKCNhHfxNIaLBOw+XKB96VWxcIKVZsO0NI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:de:08:f2:41:93:74:96:18:9f:d3:58:73:b9:ce:c2:50:4b:5d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D
        Validity
            Not Before: Apr 22 02:29:51 2023 GMT
            Not After : Apr 23 03:28:51 2023 GMT
        Subject: CN=6329E763C1B0E004DB6B8E36B903F545B409705B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:c4:6a:47:c1:0d:c0:dc:a7:c5:79:a8:b2:
                    25:03:8a:00:70:e4:9e:bc:ad:bb:24:22:0b:38:38:
                    99:76:19:2b:ab:21:db:e1:84:b2:f1:43:73:d5:d0:
                    48:f3:8b:66:b0:d9:fa:03:f9:d4:52:62:bb:74:fd:
                    cc:04:82:d9:04:fe:1a:c9:26:02:08:14:72:4c:ba:
                    f4:d3:66:af:63:d8:8b:ac:3a:99:2c:83:0b:e6:f9:
                    3b:c0:89:e8:11:2d:f5:43:3a:8a:6b:cb:31:6a:5e:
                    68:6a:19:a7:66:cc:80:17:76:04:98:87:1e:28:7c:
                    96:0e:d8:0d:f1:55:c2:44:6b:38:8e:0d:e1:9b:bd:
                    78:df:17:6f:d3:b8:cd:bc:9c:94:31:3a:5a:ac:06:
                    1b:71:64:cb:73:08:5c:5c:4e:1d:ac:75:12:80:88:
                    88:c2:7c:86:e0:28:20:8b:d2:eb:28:e9:33:a6:14:
                    96:4f:7b:26:88:e2:52:77:3b:be:57:36:a8:46:47:
                    33:83:9e:a0:63:1b:14:b0:a5:d7:54:89:33:ea:2c:
                    16:21:b0:e0:ca:a4:87:ab:c2:a4:23:8d:60:55:fb:
                    79:90:f1:ed:ff:00:ee:c0:0f:c3:f1:8d:22:c9:5c:
                    31:05:a0:1c:50:f2:5b:3a:2c:97:b6:cd:4d:7d:52:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:29:E7:63:C1:B0:E0:04:DB:6B:8E:36:B9:03:F5:45:B4:09:70:5B
            X509v3 Authority Key Identifier:
                keyid:7D:B2:24:DB:42:AC:0A:5F:6F:27:C8:E3:01:A2:35:6E:E4:8D:E3:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:38:4b:52:bd:ad:3b:c3:7b:59:bf:e7:35:6b:c1:b7:2c:
         aa:85:e9:c0:23:e5:0d:e6:21:06:01:f7:de:b5:7e:63:d0:27:
         8f:68:3a:d5:b1:1f:d1:6b:c7:03:ca:4b:81:95:f7:72:d1:ff:
         d1:ea:cf:2e:f9:05:40:b1:c2:90:bf:d8:a6:4d:50:41:95:ab:
         83:b1:1c:32:53:8a:85:b1:29:41:4d:d5:21:c4:70:07:57:4b:
         03:a4:21:2a:b5:74:a6:20:fa:59:14:d9:95:b8:af:36:a4:b5:
         06:d6:ee:2c:70:52:2d:fe:3d:84:c1:28:e0:d0:7f:d7:08:8b:
         65:a2:0b:2c:a3:bb:68:72:52:32:dc:45:32:84:85:87:c9:46:
         c6:00:d9:90:ca:58:c1:a3:97:a8:9e:b8:ee:7d:e3:e1:e7:22:
         3e:97:c5:db:5c:89:a4:69:0b:2d:77:ea:f9:2b:0c:64:11:c0:
         8b:a8:05:51:2b:8e:79:8f:18:f1:3a:42:a4:a0:f2:8c:d6:3c:
         ef:d8:6a:a3:8a:1f:20:45:22:39:37:e4:5b:ba:43:46:f5:3e:
         ae:35:a7:04:f5:d9:30:a0:83:8a:42:4a:52:16:79:cc:25:cd:
         dd:ed:70:4d:cd:2c:74:f7:76:ad:19:0d:8b:8e:cc:64:7d:62:
         a1:30:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----