Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/6722873E8965490F2DE1EDA74859AE2E78579F4A.mft
File:                     6722873E8965490F2DE1EDA74859AE2E78579F4A.mft (raw, json)
Hash identifier:          Y6anNjp6Oj3Yq7oP4eFDV3KrjFc8CD/mcpdy5WWE9Ow=
Subject key identifier:   4C:EE:F1:C9:88:EF:D3:E1:E6:22:1F:C4:E1:28:7A:23:DB:D1:90:94
Authority key identifier: 67:22:87:3E:89:65:49:0F:2D:E1:ED:A7:48:59:AE:2E:78:57:9F:4A
Certificate issuer:       /CN=6722873e8965490f2de1eda74859ae2e78579f4a
Certificate serial:       4668DF44221801E8765002745A99639A1421EAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZyKHPollSQ8t4e2nSFmuLnhXn0o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/6722873E8965490F2DE1EDA74859AE2E78579F4A.mft
Manifest number:          0518
Signing time:             Thu 14 Dec 2023 11:58:32 +0000
Manifest this update:     Thu 14 Dec 2023 11:53:32 +0000
Manifest next update:     Fri 15 Dec 2023 14:59:32 +0000
Files and hashes:         1: 6722873E8965490F2DE1EDA74859AE2E78579F4A.crl (hash: rtl9zjD7hxqRyx1WAFu6vJQu7Ns2wMt3ccsjVL+foDY=)
                          2: 36322e332e34362e302f32342d3234203d3e20323031333431.roa (hash: uvQwA3V37d+89n0amzNAINAfeulYTm71yyVRIpO4GeU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:68:df:44:22:18:01:e8:76:50:02:74:5a:99:63:9a:14:21:ea:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6722873e8965490f2de1eda74859ae2e78579f4a
        Validity
            Not Before: Dec 14 11:53:32 2023 GMT
            Not After : Dec 15 14:59:32 2023 GMT
        Subject: CN=4CEEF1C988EFD3E1E6221FC4E1287A23DBD19094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:03:84:ca:d8:80:58:87:fb:a8:ef:f3:f7:
                    28:e3:68:4e:6d:6e:3f:a0:d8:5d:d0:79:8d:7d:70:
                    24:bd:fd:2c:65:41:f3:b3:ec:64:97:aa:12:6c:cf:
                    8c:d4:15:48:e5:de:59:b5:df:03:77:3e:a8:dd:34:
                    35:c6:18:50:70:8e:0d:34:a7:e5:3e:02:73:ac:cd:
                    3c:6a:6e:ac:36:95:2e:b1:32:2a:cd:8b:dc:da:8b:
                    fd:b2:9b:56:3b:3d:48:57:7e:87:32:2e:ce:8b:06:
                    dc:ca:c2:9b:d6:e0:af:c3:06:c6:89:05:2d:3f:7d:
                    2f:a5:f7:38:19:1d:86:cb:06:6e:09:1f:8c:9c:6d:
                    b8:9a:19:9f:cc:aa:d1:f9:5c:53:00:5a:8a:8c:e0:
                    6b:db:2c:ef:57:71:65:d0:25:4f:ed:8b:f1:60:42:
                    ed:e8:12:36:1b:5e:27:24:93:49:9a:d9:95:bf:0c:
                    69:78:c6:4d:e7:a1:27:fc:73:04:d0:06:4c:2a:8e:
                    11:78:83:b8:19:18:fc:1b:fe:84:e1:a8:7c:36:7f:
                    b1:8c:5a:af:20:c6:91:c2:6d:59:2e:1c:3e:75:f9:
                    0c:42:1e:32:8b:21:90:33:98:be:4c:dd:03:ec:1f:
                    44:04:8d:51:6f:a9:fc:92:65:72:83:f9:5d:76:54:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EE:F1:C9:88:EF:D3:E1:E6:22:1F:C4:E1:28:7A:23:DB:D1:90:94
            X509v3 Authority Key Identifier:
                keyid:67:22:87:3E:89:65:49:0F:2D:E1:ED:A7:48:59:AE:2E:78:57:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/6722873E8965490F2DE1EDA74859AE2E78579F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZyKHPollSQ8t4e2nSFmuLnhXn0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/6722873E8965490F2DE1EDA74859AE2E78579F4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:bb:70:36:f9:74:58:d3:5e:74:0b:fb:ff:a7:8b:63:4c:
         3c:87:89:85:40:a4:62:64:e2:32:c3:20:c1:b6:cb:44:90:76:
         eb:6f:2d:ba:54:dd:cc:34:ac:77:e3:43:4d:2b:a1:d3:55:ea:
         31:0e:f0:1c:1a:4d:33:19:ca:08:08:15:ff:74:1e:fa:90:7e:
         f9:a9:41:14:41:c1:d6:3f:7d:b7:41:c7:bd:71:60:c6:01:87:
         87:d4:d9:b7:48:2d:c4:26:0e:e2:bc:a6:61:40:fe:4b:fc:3e:
         ac:df:0f:14:bb:a2:5a:f8:d7:44:f7:d0:d9:a6:2e:03:41:f8:
         01:70:cc:83:ec:4b:7f:d7:97:19:ef:b3:2b:d1:06:b7:1f:1f:
         04:c3:c2:5c:3d:64:e4:51:77:32:69:16:29:7f:0c:61:6a:42:
         e0:61:3f:6c:39:77:c3:8a:c3:49:6f:ad:5c:fd:07:d7:3f:d1:
         85:58:25:9e:24:e5:36:c7:ec:9a:cc:97:cb:46:38:15:a4:48:
         1e:3d:e3:0d:59:95:fc:f6:e7:fe:f4:cd:02:26:f6:ef:4b:08:
         7c:89:07:18:7a:8f:03:86:7d:b9:38:61:23:68:b9:01:83:c2:
         fc:82:1f:fb:74:54:8d:f0:22:2c:fb:22:dd:20:01:18:3d:71:
         c6:5b:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----