Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.mft
File:                     F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.mft (raw, json)
Hash identifier:          I9NMaU5cyWmxMFZ4xaGj53orQgxg03MRltLqJ/MjvOY=
Subject key identifier:   C5:C7:47:9A:19:4E:8E:F7:BB:73:C6:5F:0F:C5:78:1A:30:48:69:B7
Authority key identifier: F0:2B:16:BB:14:AF:DB:CC:A3:3E:BD:10:66:D4:F4:7F:56:C2:34:D8
Certificate issuer:       /CN=f02b16bb14afdbcca33ebd1066d4f47f56c234d8
Certificate serial:       58265746B1B852B5F9E40484625587DE39A4876F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8CsWuxSv28yjPr0QZtT0f1bCNNg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.mft
Manifest number:          0446
Signing time:             Fri 20 Oct 2023 02:01:58 +0000
Manifest this update:     Fri 20 Oct 2023 01:56:58 +0000
Manifest next update:     Sat 21 Oct 2023 02:03:58 +0000
Files and hashes:         1: 36322e332e32352e302f32342d3234203d3e20323031333431.roa (hash: Xg3ezVkYWrSo6SUsusu+cxuDk5xk5faTFDzJ3bEnS4k=)
                          2: F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.crl (hash: Kv1fQ/TNgpyvx5i8OPM7ulIeufHdrjQiJnTSB24RhUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:26:57:46:b1:b8:52:b5:f9:e4:04:84:62:55:87:de:39:a4:87:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02b16bb14afdbcca33ebd1066d4f47f56c234d8
        Validity
            Not Before: Oct 20 01:56:58 2023 GMT
            Not After : Oct 21 02:03:58 2023 GMT
        Subject: CN=C5C7479A194E8EF7BB73C65F0FC5781A304869B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:4b:52:c0:a4:ec:7b:43:59:98:59:51:14:
                    11:60:90:71:b0:49:8d:0b:04:29:dd:e7:42:92:2d:
                    55:d5:d1:a0:24:dd:eb:7b:6b:29:4e:5b:51:cf:0e:
                    9b:85:83:89:c2:b3:b8:39:1d:b3:e6:c4:d7:cb:f5:
                    6c:7e:f9:4f:aa:58:45:c2:b6:08:13:c9:21:7b:1b:
                    aa:20:f7:55:2c:24:f6:ff:ad:06:60:d2:b1:f9:c1:
                    9f:f6:45:4a:90:9f:39:88:a8:2b:d0:6d:cb:fc:39:
                    85:a6:d3:e6:13:15:4a:f9:81:ce:cf:40:c1:e8:2f:
                    bd:bc:62:20:ff:d7:22:8c:5c:44:d0:ab:0a:3a:d9:
                    35:8a:50:5e:6d:73:8a:fe:14:ed:c5:cf:08:ae:97:
                    9d:35:38:26:62:ed:46:02:2d:85:05:37:1f:28:ec:
                    5d:5d:bd:8f:91:6e:4d:88:59:c0:db:b7:47:f8:de:
                    38:ea:8b:23:93:b3:d7:b7:1b:d0:c8:50:ad:6b:65:
                    d3:7b:d1:3a:11:eb:e8:00:94:59:a4:23:77:29:4d:
                    fc:74:c4:dd:88:5f:0e:b8:09:ba:ae:a8:26:7a:6f:
                    c6:87:8b:15:5d:85:4b:03:6b:7d:de:20:95:ab:ca:
                    0b:97:e1:88:82:93:3f:75:08:4c:50:53:ef:20:8f:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C7:47:9A:19:4E:8E:F7:BB:73:C6:5F:0F:C5:78:1A:30:48:69:B7
            X509v3 Authority Key Identifier:
                keyid:F0:2B:16:BB:14:AF:DB:CC:A3:3E:BD:10:66:D4:F4:7F:56:C2:34:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CsWuxSv28yjPr0QZtT0f1bCNNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:ab:2e:f0:6b:0c:03:e1:d3:ac:24:d9:7a:fa:e1:ba:f4:
         2e:fd:78:3b:3e:8e:1e:b0:33:2a:29:16:81:9f:b2:c4:fb:b2:
         c7:e2:b8:67:8a:46:15:09:95:d5:e6:49:4a:cf:92:45:ce:a0:
         65:27:f6:1b:2b:15:57:af:e6:77:65:c3:ed:f5:cd:b1:8e:ff:
         7e:6f:fd:79:a2:91:3c:1f:9e:51:cd:1d:95:ff:00:5b:05:67:
         78:51:88:01:ea:51:78:1a:5d:66:9a:5b:b2:b3:b4:c4:75:40:
         d0:55:22:11:14:77:0f:88:d4:75:f3:93:49:55:bc:2a:b9:d9:
         a3:17:5b:38:90:0c:52:ea:39:83:0d:cf:0f:77:7c:6d:0c:8f:
         1c:6a:f8:01:83:29:f1:0e:71:3d:9a:a4:cc:e9:aa:4b:a4:3e:
         12:0d:bf:ac:0f:94:c7:73:76:26:82:68:2e:83:c9:28:79:41:
         58:76:27:2e:09:90:f0:28:31:9c:82:df:67:1b:b1:24:e2:91:
         f9:06:a7:92:97:b6:3d:7d:86:b4:8b:63:0f:14:35:3b:07:2c:
         f5:00:ee:25:ea:17:74:27:00:07:ea:0d:f5:98:b7:14:08:60:
         f3:2f:76:3a:37:73:ef:30:e6:17:d2:0a:a4:5f:be:1c:40:dd:
         68:7a:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----