Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.mft
File:                     40925AF8017EBCF7C34D1A62658CC465308245C0.mft (raw, json)
Hash identifier:          O9zsN9RBPn793pDQN9Jh4IGPZ09YAfAczFalVE/3Gwo=
Subject key identifier:   97:60:2A:E9:F4:A9:EF:A8:F1:4A:89:7F:EC:F3:A9:D3:C0:E0:5E:C4
Authority key identifier: 40:92:5A:F8:01:7E:BC:F7:C3:4D:1A:62:65:8C:C4:65:30:82:45:C0
Certificate issuer:       /CN=40925af8017ebcf7c34d1a62658cc465308245c0
Certificate serial:       67291AE99772DAB2E9262FF647B0038B8FAEE410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJJa-AF-vPfDTRpiZYzEZTCCRcA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.mft
Manifest number:          0527
Signing time:             Wed 20 Dec 2023 19:18:43 +0000
Manifest this update:     Wed 20 Dec 2023 19:13:43 +0000
Manifest next update:     Thu 21 Dec 2023 23:05:43 +0000
Files and hashes:         1: 40925AF8017EBCF7C34D1A62658CC465308245C0.crl (hash: d40RATDEQ3LWNue0lYOC+3S+J2dY4jhbSTLF9/SHB8M=)
                          2: 38302e37312e3134382e302f32342d3234203d3e20323031333431.roa (hash: MyYhDCClqOEVfO2vmjRhAsiP6s592VYzOcyJsCiwYE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:29:1a:e9:97:72:da:b2:e9:26:2f:f6:47:b0:03:8b:8f:ae:e4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40925af8017ebcf7c34d1a62658cc465308245c0
        Validity
            Not Before: Dec 20 19:13:43 2023 GMT
            Not After : Dec 21 23:05:43 2023 GMT
        Subject: CN=97602AE9F4A9EFA8F14A897FECF3A9D3C0E05EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:ab:7b:99:d6:c5:1d:18:5f:4c:53:07:d7:
                    31:6e:da:dc:08:df:82:59:90:de:3e:ce:0f:a7:2d:
                    b6:b1:6c:7a:08:26:2d:42:eb:94:a1:3c:1e:39:64:
                    52:42:f9:0b:32:bb:27:21:c6:51:e2:8b:a9:3f:86:
                    33:d5:f6:7d:ff:ca:7d:97:ad:62:b9:4c:de:3d:72:
                    b8:ef:98:9f:1f:1f:77:e2:02:49:16:8f:a9:cf:2c:
                    61:e3:5b:6e:e1:bf:7c:8f:cd:a0:6e:85:ef:91:b7:
                    e6:f7:75:f3:fe:aa:eb:3b:19:2c:1e:5b:88:d1:1a:
                    ce:32:3e:cc:82:62:f5:9c:5c:52:84:bb:71:58:dc:
                    a3:77:d5:06:83:da:2d:2c:09:97:8e:e2:5d:29:49:
                    ef:ac:d4:6e:f5:bd:ac:6a:58:df:c3:e0:bb:2e:97:
                    8b:8e:61:68:48:e6:1b:93:fd:55:b9:ff:57:0c:34:
                    e3:f3:01:42:56:11:9e:eb:62:0c:53:5f:ea:9f:ba:
                    3a:8f:c8:db:30:b2:f0:4a:91:c5:11:d7:b0:c0:89:
                    e4:bc:74:6a:7b:37:73:b8:3f:b3:d3:e9:b8:68:ab:
                    5c:4a:22:2c:dd:e9:53:7c:50:9a:ef:13:c9:09:53:
                    98:e0:76:81:ce:0b:21:ed:69:a3:41:6e:ba:7c:c5:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:2A:E9:F4:A9:EF:A8:F1:4A:89:7F:EC:F3:A9:D3:C0:E0:5E:C4
            X509v3 Authority Key Identifier:
                keyid:40:92:5A:F8:01:7E:BC:F7:C3:4D:1A:62:65:8C:C4:65:30:82:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJJa-AF-vPfDTRpiZYzEZTCCRcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:38:86:58:6a:4e:25:75:5e:b6:f4:50:54:44:6c:f0:51:
         e0:cb:c3:c7:70:8a:49:b3:79:3a:b0:a4:6a:28:f3:6d:41:17:
         e3:55:61:5c:43:99:39:c4:5e:e0:99:9b:6c:33:08:31:d5:df:
         86:e2:5a:8d:d5:49:56:e0:f0:f7:3f:75:2e:f7:6f:bb:3c:c9:
         60:97:d8:83:8f:f7:98:58:3e:4f:3d:86:75:3e:99:37:24:c0:
         0e:90:bf:60:44:51:6e:a8:b1:f7:9f:2f:86:73:c7:42:03:e6:
         28:f9:64:dd:f4:4d:d4:0c:b9:4d:18:47:0a:36:46:ad:9b:51:
         50:63:1e:37:2f:f1:5f:51:6c:be:4d:7f:1d:7d:c5:eb:55:80:
         36:cc:36:ae:22:c6:e0:68:c0:14:8b:3c:81:40:31:f1:64:33:
         13:11:66:83:da:2d:98:ce:8e:04:fe:bc:7f:d6:23:96:75:ea:
         6d:21:c6:d7:b7:24:2a:76:6c:27:ce:1f:e8:8c:e7:98:c7:15:
         10:e9:56:0e:af:89:a9:84:7b:e1:16:7c:58:71:fa:47:5d:d2:
         c0:ec:7d:5c:89:55:33:18:d5:f3:76:e5:4b:06:df:59:28:a9:
         70:da:47:da:ea:ca:8b:45:a4:9c:84:e1:d6:80:db:6e:56:1b:
         9f:95:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----