Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.mft
File:                     FBF2AD3783A3C96E2652481F7A77CFC5BE779213.mft (raw, json)
Hash identifier:          tKajC8NJt8LmgMVnedYhmFBE+Ni5tZQudVuf/rO7a7w=
Subject key identifier:   4D:CC:8E:DA:D4:47:BE:4C:DC:E9:5C:3E:CB:C1:EE:CD:27:C6:18:E9
Authority key identifier: FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13
Certificate issuer:       /CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
Certificate serial:       56DC2588E6B075DFE59427086E260DC4C8B05A33
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.mft
Manifest number:          0A
Signing time:             Sat 22 Apr 2023 02:32:29 +0000
Manifest this update:     Sat 22 Apr 2023 02:27:29 +0000
Manifest next update:     Sun 23 Apr 2023 04:21:29 +0000
Files and hashes:         1: FBF2AD3783A3C96E2652481F7A77CFC5BE779213.crl (hash: Wqp/NSwAsS19XTxTAzLN2SE6Bsid+paf5xOIPIUYlyE=)
                          2: 326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa (hash: 21HrR3UkyTuE4aqE+9pJdWk28MD50mYHY4NbePlK3wY=)
                          3: 326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa (hash: pfnPbpYyFEbCQrKFY6QYKwovi7p3VO74wEOYd+ryU4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:dc:25:88:e6:b0:75:df:e5:94:27:08:6e:26:0d:c4:c8:b0:5a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
        Validity
            Not Before: Apr 22 02:27:29 2023 GMT
            Not After : Apr 23 04:21:29 2023 GMT
        Subject: CN=4DCC8EDAD447BE4CDCE95C3ECBC1EECD27C618E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:4e:71:57:47:49:f5:ed:cf:26:88:c5:6e:
                    82:1a:8e:73:10:82:ee:ef:e9:01:41:dc:47:10:e5:
                    bb:b2:8f:1a:24:1e:c4:ca:38:32:34:38:c1:3e:b2:
                    7f:6a:ae:35:a0:56:38:a1:5e:c7:7c:c4:a9:32:59:
                    73:d3:53:09:b0:8f:e7:a2:eb:6f:72:79:0b:c2:91:
                    12:9d:bc:e1:98:ee:b1:45:88:5d:b6:d5:46:a3:e0:
                    b2:f0:76:79:6e:e5:0e:50:7c:23:2c:53:ff:a3:95:
                    7f:99:5f:9f:91:f2:62:b7:ae:e4:fd:aa:44:94:91:
                    ec:96:89:00:44:1d:94:ab:22:62:63:26:95:4a:31:
                    d1:4b:8f:2d:b3:fa:70:c7:2d:fa:38:67:33:86:1e:
                    0b:15:97:51:3b:b2:cc:b4:0d:1a:e8:06:65:8a:9b:
                    05:82:18:b4:23:d6:23:26:69:2a:40:33:a5:ae:f9:
                    79:74:46:1e:86:2a:48:b7:82:1f:27:ec:71:27:06:
                    c4:d2:ff:7f:2d:40:e8:47:9f:f9:9a:34:0b:e5:06:
                    0f:d7:9b:4f:3c:1d:8c:34:6d:a9:0d:11:90:47:38:
                    76:f6:9c:a8:ab:f0:7d:20:94:61:ce:90:5e:6d:58:
                    c8:96:11:5f:e0:3c:3d:41:08:f9:7a:18:ca:fb:6b:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CC:8E:DA:D4:47:BE:4C:DC:E9:5C:3E:CB:C1:EE:CD:27:C6:18:E9
            X509v3 Authority Key Identifier:
                keyid:FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:22:b0:88:65:07:b2:81:fb:13:d6:65:95:e3:45:01:67:
         4e:9f:17:89:00:e6:8c:98:2a:df:82:a2:41:e9:47:94:1c:72:
         50:40:24:c5:9f:dc:f6:60:83:cb:14:3d:57:da:67:05:c6:16:
         58:5b:97:86:77:0e:00:88:97:ad:5f:c0:5c:49:fc:06:c2:24:
         fd:5f:8f:72:a5:81:ef:cc:88:5c:49:c0:2b:07:59:ab:73:3d:
         36:79:72:cc:30:1a:14:a2:12:fe:23:1e:66:bc:9f:70:76:68:
         7c:14:bd:a4:20:53:19:76:ee:8a:84:d2:ec:54:6f:1d:95:fb:
         bd:2c:53:ef:6a:6b:65:12:94:9e:dc:40:fb:e4:61:bc:c2:d3:
         cc:19:d7:cb:e4:89:29:ee:3e:ee:ef:82:fc:b5:14:73:85:ec:
         ae:d9:b1:af:a3:59:e7:0a:62:8e:b5:76:45:4f:e6:51:77:a2:
         13:99:22:c6:a1:1c:7b:c7:30:76:da:95:cf:47:00:80:55:f7:
         30:2a:74:a0:22:7c:2e:d0:4a:60:78:91:eb:c4:e4:a9:b3:d4:
         63:7d:06:9e:54:3c:64:f8:7a:df:bb:aa:92:f2:30:c0:63:a8:
         5d:3d:1a:8c:84:de:9d:1e:e9:87:b3:d0:55:57:b9:5b:0c:c6:
         94:cd:69:45
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUVtwliOawdd/llCcIbiYNxMiwWjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGMkFEMzc4M0EzQzk2RTI2NTI0ODFGN0E3N0NGQzVC
RTc3OTIxMzAeFw0yMzA0MjIwMjI3MjlaFw0yMzA0MjMwNDIxMjlaMDMxMTAvBgNV
BAMTKDREQ0M4RURBRDQ0N0JFNENEQ0U5NUMzRUNCQzFFRUNEMjdDNjE4RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOY05xV0dJ9e3PJojFboIajnMQ
gu7v6QFB3EcQ5buyjxokHsTKODI0OME+sn9qrjWgVjihXsd8xKkyWXPTUwmwj+ei
629yeQvCkRKdvOGY7rFFiF221Uaj4LLwdnlu5Q5QfCMsU/+jlX+ZX5+R8mK3ruT9
qkSUkeyWiQBEHZSrImJjJpVKMdFLjy2z+nDHLfo4ZzOGHgsVl1E7ssy0DRroBmWK
mwWCGLQj1iMmaSpAM6Wu+Xl0Rh6GKki3gh8n7HEnBsTS/38tQOhHn/maNAvlBg/X
m088HYw0bakNEZBHOHb2nKir8H0glGHOkF5tWMiWEV/gPD1BCPl6GMr7azXHAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUTcyO2tRHvkzc6Vw+y8HuzSfGGOkwHwYDVR0j
BBgwFoAU+/KtN4OjyW4mUkgfenfPxb53khMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTIyM2JkYTUtMWY5NC00MzE5LWI0NDgtODNkYjcxODYx
Njk1LzEvRkJGMkFEMzc4M0EzQzk2RTI2NTI0ODFGN0E3N0NGQzVCRTc3OTIxMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NGZjNDc1Mi1mODFhLTQ3
YjYtOGYwZC1mZjc0YzhiMGIwYTQvMC9GQkYyQUQzNzgzQTNDOTZFMjY1MjQ4MUY3
QTc3Q0ZDNUJFNzc5MjEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2UyMjNiZGE1LTFmOTQtNDMxOS1iNDQ4LTgzZGI3MTg2MTY5NS8xL0ZCRjJBRDM3
ODNBM0M5NkUyNjUyNDgxRjdBNzdDRkM1QkU3NzkyMTMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIzCKw
iGUHsoH7E9ZlleNFAWdOnxeJAOaMmCrfgqJB6UeUHHJQQCTFn9z2YIPLFD1X2mcF
xhZYW5eGdw4AiJetX8BcSfwGwiT9X49ypYHvzIhcScArB1mrcz02eXLMMBoUohL+
Ix5mvJ9wdmh8FL2kIFMZdu6KhNLsVG8dlfu9LFPvamtlEpSe3ED75GG8wtPMGdfL
5Ikp7j7u74L8tRRzheyu2bGvo1nnCmKOtXZFT+ZRd6ITmSLGoRx7xzB22pXPRwCA
VfcwKnSgInwu0EpgeJHrxOSps9RjfQaeVDxk+Hrfu6qS8jDAY6hdPRqMhN6dHumH
s9BVV7lbDMaUzWlF
-----END CERTIFICATE-----