Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.mft
File:                     4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.mft (raw, json)
Hash identifier:          2COxchHxlbO91DIuSKxClUFOsgc4Tr2/YenpD23/wr4=
Subject key identifier:   F6:2D:12:D7:84:28:81:BB:A7:30:7F:9F:00:26:A3:A0:A9:F4:D8:13
Authority key identifier: 4D:02:65:1A:F9:8C:39:BD:42:8D:1E:F3:9B:CE:B5:DB:CD:BE:DF:DC
Certificate issuer:       /CN=4d02651af98c39bd428d1ef39bceb5dbcdbedfdc
Certificate serial:       7EF12F665DEE50B6B53824DFDDC7AFB33FD6B596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQJlGvmMOb1CjR7zm861282-39w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.mft
Manifest number:          16
Signing time:             Sun 07 Jul 2024 17:57:05 +0000
Manifest this update:     Sun 07 Jul 2024 17:52:05 +0000
Manifest next update:     Mon 08 Jul 2024 20:06:05 +0000
Files and hashes:         1: 4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.crl (hash: yKoL7egDYMXKfMxoDB10rEoYnwLJxlHxhwztCmnYS1Y=)
                          2: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (hash: P50sMDAaAkFKQUxfwK7LzAX4Md5Xi/jA8attwiQRt8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f1:2f:66:5d:ee:50:b6:b5:38:24:df:dd:c7:af:b3:3f:d6:b5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d02651af98c39bd428d1ef39bceb5dbcdbedfdc
        Validity
            Not Before: Jul  7 17:52:05 2024 GMT
            Not After : Jul  8 20:06:05 2024 GMT
        Subject: CN=F62D12D7842881BBA7307F9F0026A3A0A9F4D813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:9f:93:67:d5:3b:50:99:20:40:24:46:e6:
                    53:79:4e:4c:a3:c4:2c:3f:9b:97:cd:2e:c5:a9:5f:
                    d7:80:2d:b4:ed:6b:71:9a:9b:f6:31:bc:a7:99:9d:
                    a9:3c:b1:81:b4:5c:27:2f:b2:58:3e:1f:c2:f5:c0:
                    89:3c:23:25:19:29:18:51:52:bd:f3:1b:21:9c:af:
                    2d:dd:ca:61:9b:58:b5:57:5c:2b:c1:d5:b7:64:24:
                    5f:df:2a:d9:aa:c3:36:1d:73:36:59:96:b1:92:bf:
                    07:19:ca:2c:b1:c6:f4:ab:14:43:a8:fd:71:3b:53:
                    e2:d3:97:72:bd:ff:1b:ae:6f:35:3f:fe:0f:46:4b:
                    e5:50:f1:03:7a:30:82:7a:5c:50:a7:04:18:08:1b:
                    77:b5:7f:64:cb:20:a1:4e:a9:f0:b6:17:0a:75:dd:
                    a4:19:fa:11:b7:a0:9a:27:ff:3f:ac:d1:97:58:db:
                    2b:84:69:ca:c2:20:e7:1e:40:89:00:9a:1c:a0:4d:
                    3d:8f:50:36:1e:1c:ba:f7:6e:33:0e:19:5c:fb:52:
                    38:f1:ed:5f:67:17:b2:07:f5:f1:45:87:73:24:3c:
                    30:a7:94:48:41:16:6d:72:ad:6f:d8:23:bc:ad:af:
                    b6:42:88:5a:5d:15:f5:85:56:ed:af:3d:a5:71:b6:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2D:12:D7:84:28:81:BB:A7:30:7F:9F:00:26:A3:A0:A9:F4:D8:13
            X509v3 Authority Key Identifier:
                keyid:4D:02:65:1A:F9:8C:39:BD:42:8D:1E:F3:9B:CE:B5:DB:CD:BE:DF:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQJlGvmMOb1CjR7zm861282-39w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:81:ea:9e:bd:d7:14:c9:13:50:a9:62:d2:a7:70:6b:a4:
         26:6f:7f:1c:35:df:b4:69:e2:cd:4f:c3:4c:9f:3c:94:46:cf:
         20:78:c9:cd:27:ad:f5:42:e9:7d:cc:47:3c:cc:7b:c0:6e:50:
         ff:ea:d5:b6:b7:0b:ce:a6:7f:62:49:f2:cd:5a:c4:99:86:25:
         bd:cc:a0:59:13:6e:ef:4a:21:6e:51:b5:3d:45:3d:d6:3c:5a:
         68:14:24:a9:bc:a3:45:f6:50:4c:ec:b9:c4:39:1f:4f:6f:00:
         6b:54:d2:f1:83:84:c5:02:94:b7:9d:1c:6b:8b:56:d0:c9:b2:
         dc:76:45:e3:d5:71:d8:53:b8:f4:0e:5b:89:02:43:b9:71:42:
         68:29:aa:2f:ad:8a:98:56:ee:bb:72:71:b9:fb:fb:3c:d5:d3:
         ac:7e:e1:26:15:66:a3:1e:f9:9a:9c:a2:91:4b:4a:74:c2:f2:
         da:c6:93:f2:e8:96:78:c0:11:66:86:02:7b:77:77:ae:90:73:
         d6:a3:9c:75:b3:42:ff:d9:56:53:c3:f3:d2:6b:81:c0:3d:c5:
         73:de:ef:12:d1:02:c2:bf:a3:72:f3:51:96:d8:bc:aa:c5:65:
         3d:ac:d2:0b:50:3d:45:d4:8b:e6:4b:c5:1b:37:68:0b:b8:5e:
         fe:67:99:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----