Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e8b174-952e-473a-82e9-a99c5e39c6dd/1/iaeMirKajLSGSCadYkNBKZjRh44.mft
File:                     iaeMirKajLSGSCadYkNBKZjRh44.mft (raw, json)
Hash identifier:          PSXmT74hexHLjXeQqwiWbgdaPVKQ7l5pfnoYUNs1XLY=
Subject key identifier:   E0:34:FF:B0:71:6F:2A:14:A9:74:41:36:1C:0E:45:B5:B3:0C:87:74
Authority key identifier: 89:A7:8C:8A:B2:9A:8C:B4:86:48:26:9D:62:43:41:29:98:D1:87:8E
Certificate issuer:       /CN=89a78c8ab29a8cb48648269d6243412998d1878e
Certificate serial:       019192A37D50F272707AE2A41ABC3EAB4097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iaeMirKajLSGSCadYkNBKZjRh44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e8b174-952e-473a-82e9-a99c5e39c6dd/1/iaeMirKajLSGSCadYkNBKZjRh44.mft
Manifest number:          0FF3
Signing time:             Tue 27 Aug 2024 07:01:13 +0000
Manifest this update:     Tue 27 Aug 2024 07:01:13 +0000
Manifest next update:     Wed 28 Aug 2024 07:01:13 +0000
Files and hashes:         1: iaeMirKajLSGSCadYkNBKZjRh44.crl (hash: mdUqnaTgImfNK/SozvKOAxJXcuFz5dnr82wP35uiRCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:92:a3:7d:50:f2:72:70:7a:e2:a4:1a:bc:3e:ab:40:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a78c8ab29a8cb48648269d6243412998d1878e
        Validity
            Not Before: Aug 27 07:01:13 2024 GMT
            Not After : Aug 28 07:01:13 2024 GMT
        Subject: CN=e034ffb0716f2a14a97441361c0e45b5b30c8774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:ab:64:ca:c2:05:02:60:6a:08:6d:b1:00:
                    96:1f:b0:1c:17:df:7c:1c:bf:2d:31:e6:a7:d6:2c:
                    40:99:86:8d:fc:59:a6:09:18:a3:6e:a0:e1:05:7f:
                    83:f5:b6:0e:23:df:c3:97:10:ed:35:3d:f1:6b:b7:
                    de:ea:c3:b7:8b:b3:f3:72:93:b2:66:9d:27:99:27:
                    57:e2:93:1e:16:5e:fc:6f:e5:41:a8:1a:8e:e5:55:
                    a0:08:b9:ba:0d:1b:3b:68:7e:65:e7:95:0b:19:9b:
                    fd:c8:88:13:2f:1c:f9:35:53:05:d1:34:c4:c8:12:
                    c8:36:0d:62:7f:85:75:2f:ac:52:1e:22:bb:11:23:
                    fc:4e:f5:ce:83:54:0b:f2:4b:2d:cf:87:b5:f9:e3:
                    c9:47:66:96:12:8a:1b:15:67:53:0b:0a:a0:c2:f4:
                    c4:69:35:ff:18:e2:84:42:43:ba:86:05:dd:f8:03:
                    c2:2f:9d:cf:0c:6a:f3:67:34:84:ef:5e:b6:2f:af:
                    d1:f5:d2:59:0e:fe:2c:63:a2:dd:ef:0d:f9:9e:42:
                    56:56:f3:0f:d6:16:87:46:56:2b:1e:39:c5:a3:40:
                    01:29:55:ed:95:41:4d:35:b2:22:69:f7:3b:5c:77:
                    61:78:e3:ed:c1:18:4f:49:3f:57:fb:89:6c:2d:14:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:FF:B0:71:6F:2A:14:A9:74:41:36:1C:0E:45:B5:B3:0C:87:74
            X509v3 Authority Key Identifier:
                keyid:89:A7:8C:8A:B2:9A:8C:B4:86:48:26:9D:62:43:41:29:98:D1:87:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaeMirKajLSGSCadYkNBKZjRh44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e8b174-952e-473a-82e9-a99c5e39c6dd/1/iaeMirKajLSGSCadYkNBKZjRh44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e8b174-952e-473a-82e9-a99c5e39c6dd/1/iaeMirKajLSGSCadYkNBKZjRh44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2a:47:cf:f1:8d:92:7b:cf:14:76:49:22:2f:33:00:76:17:
         7a:56:cb:aa:d7:d5:b1:99:4d:5b:93:7a:f9:6e:2b:76:6d:e0:
         46:af:92:c1:78:a1:b7:8a:02:dc:1a:96:10:32:60:42:bc:32:
         60:0e:15:64:3d:69:7d:c8:19:17:46:23:56:f8:bb:fb:cb:52:
         07:be:c4:72:2c:6e:c8:89:bc:83:b2:9a:59:1b:5d:66:d0:70:
         7d:d1:cc:04:7e:6f:f3:38:24:5a:e9:02:29:b3:ae:9d:f1:e5:
         55:f0:ea:d0:ee:d8:11:c1:92:1e:f1:20:ad:1e:62:79:06:0b:
         03:19:69:48:ca:29:dd:ec:1e:92:a9:e7:06:05:52:c0:43:11:
         e3:e8:2e:93:10:d4:ae:d7:e1:d7:60:b5:34:1f:1d:70:ed:e0:
         a6:74:73:5b:f4:df:61:be:37:d3:36:8d:c9:23:b4:69:77:99:
         c9:68:56:7b:25:10:fa:a8:f7:48:b5:36:87:d7:35:3c:2f:0f:
         4c:cc:35:f7:86:ce:77:7b:12:27:2b:1b:5e:a4:e6:0f:01:b4:
         3c:e0:59:85:b3:e7:d9:4c:72:ea:04:75:ec:b6:69:11:dc:67:
         ab:19:54:62:90:b5:52:7e:3d:2e:c6:9e:f0:ba:82:7a:0f:cd:
         18:9b:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----