Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/10/0DA6A545A238763BE9CC7AEC1CBC4609E8CBF6A8.mft
File:                     0DA6A545A238763BE9CC7AEC1CBC4609E8CBF6A8.mft (raw, json)
Hash identifier:          M16iqjsqqvP7EWbnVk3tmlUUmbjLjMtLJtlAqjb9CRo=
Subject key identifier:   1A:78:89:E7:EE:A1:2C:1E:82:70:D7:6F:40:3D:50:8A:8B:AC:B3:FA
Authority key identifier: 0D:A6:A5:45:A2:38:76:3B:E9:CC:7A:EC:1C:BC:46:09:E8:CB:F6:A8
Certificate issuer:       /CN=0da6a545a238763be9cc7aec1cbc4609e8cbf6a8
Certificate serial:       36553CD00BAC8BE2A8169F37C6046F51ACFED57C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DaalRaI4djvpzHrsHLxGCejL9qg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/10/0DA6A545A238763BE9CC7AEC1CBC4609E8CBF6A8.mft
Manifest number:          02
Signing time:             Thu 28 Dec 2023 01:35:39 +0000
Manifest this update:     Thu 28 Dec 2023 01:30:39 +0000
Manifest next update:     Fri 29 Dec 2023 04:57:39 +0000
Files and hashes:         1: 0DA6A545A238763BE9CC7AEC1CBC4609E8CBF6A8.crl (hash: auJYDOYPPsE0w8GzAoLmPF4pjehGWGiuDWur2XvbJPU=)
                          2: 39332e39332e38302e302f32312d3234203d3e203230343733.roa (hash: Qln7kK6JwoKqSs+rgmBRv4MQVzzQ9FTaWMjqONlQgX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:55:3c:d0:0b:ac:8b:e2:a8:16:9f:37:c6:04:6f:51:ac:fe:d5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da6a545a238763be9cc7aec1cbc4609e8cbf6a8
        Validity
            Not Before: Dec 28 01:30:39 2023 GMT
            Not After : Dec 29 04:57:39 2023 GMT
        Subject: CN=1A7889E7EEA12C1E8270D76F403D508A8BACB3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:91:c9:3f:97:d3:ba:42:d7:9e:5e:06:8d:
                    69:4f:c0:28:cb:d7:42:ff:ce:96:11:7f:08:59:3e:
                    bf:95:00:9f:e9:33:b2:e0:9f:21:9a:58:4c:83:18:
                    73:e3:14:c0:78:de:4c:97:2a:62:07:c3:f6:38:9a:
                    c0:f2:7c:2b:a5:84:ff:6d:a8:ac:8b:b6:3a:ec:98:
                    71:d6:37:74:b4:52:f8:3a:5c:74:4c:0c:21:26:9d:
                    e3:d3:af:55:d1:44:70:da:a2:3a:69:64:92:11:fa:
                    66:5c:9a:6d:ff:20:eb:60:31:ea:56:5b:04:9e:12:
                    29:df:33:2a:cd:f7:94:96:fd:51:82:cc:27:d8:5f:
                    ee:5d:e0:cc:24:48:1a:e1:3e:a2:20:19:60:72:39:
                    95:15:38:86:5d:48:a1:13:6a:54:49:d2:93:6e:4e:
                    96:bc:8b:c1:bd:a9:f2:fc:b3:40:49:e5:43:3e:fa:
                    a5:c8:e3:1e:0b:90:3e:4c:55:5e:dc:35:b8:35:16:
                    a1:26:aa:f8:00:17:89:98:d5:ae:54:bb:ff:9a:1e:
                    09:70:db:47:a5:89:36:f5:00:8f:d9:3b:29:7e:9a:
                    13:08:42:5e:ab:ee:96:3e:8f:87:ea:1a:df:3f:1c:
                    4b:9b:59:62:43:a1:bf:8c:ec:95:c3:46:c0:77:fa:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:78:89:E7:EE:A1:2C:1E:82:70:D7:6F:40:3D:50:8A:8B:AC:B3:FA
            X509v3 Authority Key Identifier:
                keyid:0D:A6:A5:45:A2:38:76:3B:E9:CC:7A:EC:1C:BC:46:09:E8:CB:F6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/10/0DA6A545A238763BE9CC7AEC1CBC4609E8CBF6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaalRaI4djvpzHrsHLxGCejL9qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/10/0DA6A545A238763BE9CC7AEC1CBC4609E8CBF6A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:f0:de:91:4c:a9:e6:8b:d6:a6:72:10:7e:48:e9:69:f9:
         15:e8:71:88:5b:c0:97:92:ca:e3:47:af:ce:08:76:b5:58:07:
         7c:b7:41:29:fc:c7:f4:47:35:d1:e9:fe:9d:b1:69:5d:f6:67:
         fe:73:f2:34:7b:d3:8f:d6:6b:b3:c2:2c:16:c3:75:9d:ef:e3:
         3d:73:ab:bf:dc:aa:f2:d4:96:41:ee:65:25:b0:b8:9a:69:9c:
         60:08:fc:86:7c:28:c1:4f:8b:ee:13:70:bc:40:50:9b:03:f5:
         8f:e1:24:f2:3b:e4:84:de:8a:e8:c4:92:3b:08:f5:f3:a0:d1:
         94:72:c6:82:0b:7f:0e:0a:f2:a6:29:4e:92:2e:0e:11:05:d9:
         7a:78:0d:3d:32:9d:61:5d:f7:76:38:c0:be:45:b5:8e:34:5b:
         bd:a6:a3:83:43:3b:91:74:7f:22:a1:99:5a:cc:53:3b:e1:09:
         53:eb:26:ce:74:34:df:b6:f3:18:44:b9:86:7a:39:5f:67:4b:
         57:44:0c:6a:7f:ac:07:f5:a8:58:07:d9:45:b2:b2:0b:52:44:
         c4:cf:9f:da:26:eb:b0:cc:b6:e6:6b:7b:c2:5f:3d:c0:e2:34:
         aa:22:a8:c2:3e:5e:dd:cf:7e:91:86:9a:8e:77:0b:06:3d:7d:
         77:6b:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----