Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft
File:                     0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft (raw, json)
Hash identifier:          GiB3G2K/VQ9uLy7xDtreGQM57QhcC6AGUewlNO2zeWA=
Subject key identifier:   85:62:43:0B:F2:3A:4E:DA:6D:77:C8:25:F2:A5:8A:EE:A6:4D:92:15
Authority key identifier: 0C:D1:6D:92:EA:6E:26:59:AB:C9:7A:5D:AD:0B:19:96:25:CC:CD:3E
Certificate issuer:       /CN=0cd16d92ea6e2659abc97a5dad0b199625cccd3e
Certificate serial:       246C567BC0762A724B1BDA2861D1970BBF0BAD74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNFtkupuJlmryXpdrQsZliXMzT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft
Manifest number:          0366
Signing time:             Wed 27 Dec 2023 09:47:53 +0000
Manifest this update:     Wed 27 Dec 2023 09:42:53 +0000
Manifest next update:     Thu 28 Dec 2023 11:20:53 +0000
Files and hashes:         1: 3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa (hash: Xw3PjbTZBGhlTwh2XRFCjhx47OoYE3ghOpOT1CF18Vs=)
                          2: 0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.crl (hash: CMb0hnijNm3h3tae/6fn9Cw+/n6m2UlW09ZyP1TRGjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6c:56:7b:c0:76:2a:72:4b:1b:da:28:61:d1:97:0b:bf:0b:ad:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd16d92ea6e2659abc97a5dad0b199625cccd3e
        Validity
            Not Before: Dec 27 09:42:53 2023 GMT
            Not After : Dec 28 11:20:53 2023 GMT
        Subject: CN=8562430BF23A4EDA6D77C825F2A58AEEA64D9215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:8a:01:56:05:27:31:85:9f:03:b8:2f:17:
                    eb:1c:13:b6:76:29:52:36:bb:94:c1:34:0f:2e:ed:
                    fc:3b:91:fd:9e:08:d9:e9:38:5d:d3:b2:12:45:27:
                    0c:a6:e9:de:0d:cf:8c:8b:f0:9b:e8:4a:69:3e:22:
                    19:7d:48:d8:1c:2d:15:82:c5:e1:e0:9e:71:d5:55:
                    82:22:c3:3f:f1:f8:ce:02:4b:a9:ef:d6:be:c8:a4:
                    1e:43:bf:d0:5a:68:98:04:b6:88:03:63:94:85:9a:
                    bb:f1:83:cc:15:64:d4:06:1c:1f:b0:13:3b:1a:fe:
                    f4:de:c3:d6:36:8c:53:98:5a:71:27:3d:0f:99:a1:
                    6d:51:e9:3a:7c:54:b3:3b:76:66:81:f0:4c:98:ab:
                    84:42:3a:82:e5:5d:40:3e:fd:42:f6:f7:a6:4a:09:
                    6f:67:07:2f:f1:2d:58:6f:10:1e:ad:ef:60:85:56:
                    c9:9f:c4:cc:b5:be:e6:56:4e:be:cb:d4:e0:8b:91:
                    cb:2b:c2:50:88:7c:ce:4b:cc:92:d1:09:24:4c:9d:
                    bc:c7:8e:09:a7:45:2e:9c:93:7a:5b:7b:11:17:9f:
                    11:cb:6d:d3:91:e6:1b:23:3f:8c:5a:38:3b:ed:fa:
                    fe:e0:0b:bf:95:bd:63:6e:f5:92:c9:0e:4b:49:c7:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:62:43:0B:F2:3A:4E:DA:6D:77:C8:25:F2:A5:8A:EE:A6:4D:92:15
            X509v3 Authority Key Identifier:
                keyid:0C:D1:6D:92:EA:6E:26:59:AB:C9:7A:5D:AD:0B:19:96:25:CC:CD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNFtkupuJlmryXpdrQsZliXMzT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:6c:fb:cb:a0:8f:d0:7f:76:36:2e:43:3d:9a:93:ae:61:
         72:4a:c6:fb:1d:fd:93:e7:2d:24:bc:88:46:f3:01:82:c0:3f:
         cd:63:1d:1f:9c:21:b1:53:5d:82:94:12:35:c6:5d:c3:f1:56:
         73:63:ae:cd:cb:1e:f7:3c:a1:66:f5:89:9e:6f:f8:02:6b:fa:
         6c:e8:8f:7b:ce:b0:78:cb:1c:e1:0c:e4:ab:56:00:88:51:94:
         cf:cf:b5:49:4b:d6:dd:e0:29:ec:1a:ae:1d:d6:f2:c5:0b:c9:
         0b:d1:92:a3:de:de:a9:c9:8e:35:2c:e2:cb:4d:67:49:fd:9d:
         46:ac:57:64:53:c2:d6:2e:f2:e4:9a:aa:a4:aa:32:bf:da:0d:
         26:8b:c8:76:b4:e4:9d:55:06:21:4f:a6:e6:58:77:dc:a6:c9:
         c6:fc:ab:a9:39:e9:15:e3:9e:d1:f7:65:4f:a8:6e:ba:7c:89:
         43:68:eb:87:e6:af:9c:48:ed:6f:72:8f:dc:4e:00:de:74:7c:
         4b:7d:24:a0:c7:59:98:6b:9d:01:fa:be:d0:9d:1f:18:0a:b8:
         22:7f:9b:19:db:db:81:cb:36:b6:58:a2:50:b6:d1:86:aa:f4:
         ed:4e:c1:6b:f9:31:36:93:aa:2e:24:fd:e8:a5:dd:bf:c4:19:
         0f:2d:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----