Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/764743587826154478CCA22375D0F58A357DB1F0.mft
File:                     764743587826154478CCA22375D0F58A357DB1F0.mft (raw, json)
Hash identifier:          8L+yzFi79vrIExRammv1qhSOtcc9uyjiJ9Arpjhuz8s=
Subject key identifier:   D6:E0:AE:A7:F4:F7:44:7F:8B:5E:D1:49:CB:C8:41:3A:79:E9:CA:3F
Authority key identifier: 76:47:43:58:78:26:15:44:78:CC:A2:23:75:D0:F5:8A:35:7D:B1:F0
Certificate issuer:       /CN=764743587826154478cca22375d0f58a357db1f0
Certificate serial:       53C9A87934263655B78EA3412E8F26E44DF4AF7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkdDWHgmFUR4zKIjddD1ijV9sfA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/764743587826154478CCA22375D0F58A357DB1F0.mft
Manifest number:          5D
Signing time:             Thu 01 Feb 2024 08:45:12 +0000
Manifest this update:     Thu 01 Feb 2024 08:40:12 +0000
Manifest next update:     Fri 02 Feb 2024 12:10:12 +0000
Files and hashes:         1: 3231322e32332e3230372e302f32342d3234203d3e203630383538.roa (hash: VT6dlO2bW6/96oSvkst6/qfveHnKJzQ6HzgY4rBCPeI=)
                          2: 764743587826154478CCA22375D0F58A357DB1F0.crl (hash: 9EfyYzahM0Kr6k0Q6cllcW0z4yO5q+JZiH56Q8lLY9A=)
                          3: 326131343a346238303a3a2f32392d3438203d3e203539393933.roa (hash: pqhKOI7dEI1NyWzxypFMinuyD4TC98yI2oT5iaYsY1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c9:a8:79:34:26:36:55:b7:8e:a3:41:2e:8f:26:e4:4d:f4:af:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764743587826154478cca22375d0f58a357db1f0
        Validity
            Not Before: Feb  1 08:40:12 2024 GMT
            Not After : Feb  2 12:10:12 2024 GMT
        Subject: CN=D6E0AEA7F4F7447F8B5ED149CBC8413A79E9CA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:de:cb:cc:86:a3:5f:6a:65:6d:09:30:6a:f4:
                    9a:77:ba:41:aa:fe:a6:72:34:ec:05:64:8e:b8:6c:
                    ed:90:c5:cf:b0:77:86:33:4b:33:53:a3:f4:8d:f3:
                    64:42:bd:e3:b0:14:30:58:c3:5c:bb:f4:5b:1f:9d:
                    62:d7:95:51:12:71:02:04:c1:c7:c6:2a:9a:e5:57:
                    66:19:3d:c4:86:4b:47:af:c5:0f:68:86:c9:b5:b3:
                    a5:d3:2b:b0:9b:d9:a5:4c:3c:64:a1:cd:84:38:02:
                    f0:6c:55:e7:ed:ad:c2:b8:23:21:9a:65:0b:53:be:
                    b5:42:80:ea:6e:dd:a9:12:fa:78:29:68:9e:00:2a:
                    20:ba:1c:2e:57:d3:70:e6:7d:f4:39:83:23:ea:c1:
                    b4:52:f2:43:e0:60:71:11:df:f3:39:75:df:fb:1c:
                    25:c4:f3:7d:61:62:86:f1:fd:3c:88:f0:2e:a9:7f:
                    f4:8b:7a:fb:b1:ac:dc:61:1b:02:55:aa:df:c8:c9:
                    7f:5d:55:d1:0a:8b:4a:2b:a1:c7:88:dd:e8:87:73:
                    1a:44:fd:54:d9:6e:55:d1:52:24:f1:f3:0b:1f:02:
                    b0:c4:d8:34:90:0f:22:1f:1e:e3:bc:79:a7:09:cc:
                    87:b8:1a:2f:ae:04:4b:d2:14:c2:58:5b:a6:11:8b:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E0:AE:A7:F4:F7:44:7F:8B:5E:D1:49:CB:C8:41:3A:79:E9:CA:3F
            X509v3 Authority Key Identifier:
                keyid:76:47:43:58:78:26:15:44:78:CC:A2:23:75:D0:F5:8A:35:7D:B1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/764743587826154478CCA22375D0F58A357DB1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkdDWHgmFUR4zKIjddD1ijV9sfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/764743587826154478CCA22375D0F58A357DB1F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:90:4d:f0:7c:c6:20:01:72:7b:cf:ba:fa:8b:c2:56:88:6c:
         ec:e5:57:ac:97:96:d8:db:f0:2a:11:a0:9d:5c:3c:8d:50:cb:
         46:6e:73:94:4f:58:b3:5f:51:b1:bf:1d:49:de:f5:fb:bc:4c:
         51:e4:53:2b:e3:d1:58:e4:67:18:03:ab:b2:95:18:1f:2e:8d:
         e6:88:e5:1f:b3:92:89:b5:fb:39:f0:55:28:67:2f:b6:a3:5e:
         b5:2b:0d:30:9c:5e:30:70:8e:33:80:81:15:4c:29:2f:80:09:
         a8:28:98:b5:83:9f:89:84:3e:cf:a2:4c:b2:6a:f1:3e:a8:dd:
         9a:79:12:4e:d6:44:e4:95:e6:79:4b:6b:d6:31:3d:a8:ac:46:
         0c:aa:8a:f0:ae:c1:dd:02:ba:0c:1f:c3:af:6a:34:4b:ad:10:
         ef:28:8b:44:19:96:c1:82:db:87:3c:91:fe:6e:7a:ff:16:59:
         eb:9d:11:e1:9b:70:21:1b:81:e0:0f:1b:89:30:44:6c:bc:48:
         a7:c9:ef:32:f2:1f:4f:4e:a2:87:c6:50:52:cd:b9:dc:4f:8b:
         1b:c5:05:71:95:39:2d:26:b7:62:45:75:64:49:2b:50:13:b2:
         06:cc:11:3b:74:8c:83:b6:89:7d:a2:71:27:22:fc:e0:ba:45:
         a4:1c:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----