Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/02163416627C4C0595F71F58E481D350B5188F6F.mft
File:                     02163416627C4C0595F71F58E481D350B5188F6F.mft (raw, json)
Hash identifier:          An7H3pMll9IwkVan4W44v9YfdGZch8YJZjCn/XDuAp0=
Subject key identifier:   B8:11:E5:00:DE:EE:B7:6B:C5:97:D0:D0:EB:E6:1A:3E:D1:3F:F3:ED
Authority key identifier: 02:16:34:16:62:7C:4C:05:95:F7:1F:58:E4:81:D3:50:B5:18:8F:6F
Certificate issuer:       /CN=02163416627c4c0595f71f58e481d350b5188f6f
Certificate serial:       5FA8EF9914D77D16F2FD6A070D8AE313A063F0B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhY0FmJ8TAWV9x9Y5IHTULUYj28.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/02163416627C4C0595F71F58E481D350B5188F6F.mft
Manifest number:          10
Signing time:             Wed 07 Feb 2024 09:34:21 +0000
Manifest this update:     Wed 07 Feb 2024 09:29:21 +0000
Manifest next update:     Thu 08 Feb 2024 13:01:21 +0000
Files and hashes:         1: 02163416627C4C0595F71F58E481D350B5188F6F.crl (hash: 1aJqYicIXTKSigElsRCKjd3dmtpyKt1TX0RJ9mX9a3I=)
                          2: 39332e3138362e38302e302f32302d3234203d3e2036393339.roa (hash: 4fDgHkrKLYRBSZ9vxlRyQ0ZzyFYR2jlat01OWsCwTx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a8:ef:99:14:d7:7d:16:f2:fd:6a:07:0d:8a:e3:13:a0:63:f0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02163416627c4c0595f71f58e481d350b5188f6f
        Validity
            Not Before: Feb  7 09:29:21 2024 GMT
            Not After : Feb  8 13:01:21 2024 GMT
        Subject: CN=B811E500DEEEB76BC597D0D0EBE61A3ED13FF3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:61:02:de:aa:08:be:e3:a5:2a:c8:5e:60:
                    6f:20:56:b6:29:2f:e2:68:8f:27:b8:c0:c5:6d:52:
                    36:d1:d6:46:c7:2c:58:6e:74:0c:d6:61:34:9b:f3:
                    35:8c:ea:d6:c6:92:d1:1f:2a:76:1c:d9:97:11:61:
                    e3:90:47:57:00:89:7a:95:14:61:e4:e1:19:ef:3c:
                    3f:0c:7a:73:00:78:96:20:01:b3:c4:99:b8:3e:10:
                    6e:e3:ea:bf:59:05:92:b8:c1:e6:4a:ba:9f:b4:a8:
                    e5:5a:1c:a9:55:e1:d9:8b:0d:4e:85:33:36:04:98:
                    e9:48:64:83:3c:3f:49:47:5f:d3:92:dc:cb:48:75:
                    4b:cf:13:ca:9a:3f:05:60:97:7a:7b:0d:73:d3:fb:
                    33:8a:03:c2:0f:cf:6d:a1:ef:6e:d3:3e:32:4c:c9:
                    85:d2:5b:11:63:c1:85:48:d8:31:82:19:0a:06:12:
                    99:12:f0:09:dd:de:44:8d:84:cb:2c:91:db:3a:29:
                    ea:51:49:17:0d:23:fe:00:db:31:e3:60:ea:14:01:
                    b5:7f:4d:68:36:d1:61:a0:a1:32:ff:86:c2:8d:2b:
                    7d:d3:99:4b:ab:6a:b4:33:33:bc:40:be:76:5c:85:
                    91:65:3f:47:13:95:95:3d:d0:9d:90:5d:ad:01:8e:
                    f3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:11:E5:00:DE:EE:B7:6B:C5:97:D0:D0:EB:E6:1A:3E:D1:3F:F3:ED
            X509v3 Authority Key Identifier:
                keyid:02:16:34:16:62:7C:4C:05:95:F7:1F:58:E4:81:D3:50:B5:18:8F:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/02163416627C4C0595F71F58E481D350B5188F6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhY0FmJ8TAWV9x9Y5IHTULUYj28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/02163416627C4C0595F71F58E481D350B5188F6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:35:f5:5f:88:8a:87:d6:20:27:1a:5b:20:70:93:29:5f:
         e1:8d:2d:cd:8c:a3:b6:a4:ab:20:ec:5c:12:7c:64:5d:8e:b0:
         43:38:8d:34:57:e2:b1:d4:89:54:f7:33:20:b1:2b:5a:08:19:
         e9:ca:c0:61:c2:ec:c4:a8:7b:a9:db:fc:9d:cb:a5:bd:a9:cc:
         cd:fa:18:f6:9e:38:cc:af:37:5d:4e:bc:4d:93:f2:7e:ed:2e:
         d8:c1:7d:c8:6a:80:8d:87:54:2c:78:4e:e4:31:7e:a0:87:47:
         be:bf:91:c3:81:4d:54:d4:95:b1:bd:d0:89:94:02:55:66:49:
         93:98:1c:5f:6b:e3:54:39:2a:25:bd:69:0b:6f:f7:6e:1b:a1:
         c4:76:31:22:ad:d8:c5:2f:91:6d:46:86:20:64:b0:14:8c:c8:
         8d:49:ae:cf:39:7b:6c:0d:bd:2d:59:29:5e:6a:81:78:91:63:
         21:bc:dc:55:ab:43:11:05:52:97:27:69:3d:b9:19:0d:46:c9:
         e4:2c:a3:45:c7:07:c5:f6:24:25:14:10:2f:92:7e:07:6c:8a:
         b0:84:39:fe:80:c3:fa:df:5b:c2:3b:19:bf:e2:1e:eb:b4:ea:
         da:a3:00:ee:99:55:24:78:72:2d:d7:0f:3a:74:c4:4e:ed:f0:
         8b:0b:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----