Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
File:                     AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft (raw, json)
Hash identifier:          IbNxn+FQgoSSljH22NTwtfxUTjW+n3iwofuR26wkdFk=
Subject key identifier:   EE:E6:A3:6D:B1:DF:39:DA:AC:9A:CE:7A:BC:21:EC:C7:6B:3D:75:54
Authority key identifier: AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01
Certificate issuer:       /CN=aedc298d252d5647dd0d0c9e3335517df6f49801
Certificate serial:       1076399929CB1F0178D52803CD89B07544F3A9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
Manifest number:          0A88
Signing time:             Wed 20 Nov 2024 05:25:00 +0000
Manifest this update:     Wed 20 Nov 2024 05:20:00 +0000
Manifest next update:     Thu 21 Nov 2024 09:12:00 +0000
Files and hashes:         1: AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl (hash: trR6WWvuM3pzQ1EiG9nAWCk85yDy2PFx5wF6lseU014=)
                          2: 33312e32342e38352e302f32342d3234203d3e20323035363539.roa (hash: VMXyT3RWSUasYdwhisrKxteHuM6tNfJ75ub8wAAY4QI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:76:39:99:29:cb:1f:01:78:d5:28:03:cd:89:b0:75:44:f3:a9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc298d252d5647dd0d0c9e3335517df6f49801
        Validity
            Not Before: Nov 20 05:20:00 2024 GMT
            Not After : Nov 21 09:12:00 2024 GMT
        Subject: CN=EEE6A36DB1DF39DAAC9ACE7ABC21ECC76B3D7554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f6:2e:e7:e1:7a:31:31:67:f9:ae:4e:38:17:
                    29:92:a6:97:cc:bc:6b:b0:16:5d:2c:f0:c7:32:f9:
                    ab:fd:41:5e:5c:8e:16:af:2d:8b:86:f3:82:fa:31:
                    a3:17:0b:de:47:36:aa:1a:43:6c:74:d0:3d:49:5a:
                    9c:fe:30:92:18:c0:7c:01:16:0d:93:07:6f:a5:7a:
                    95:ad:bf:32:7a:f7:61:ec:3b:44:eb:fb:cf:ed:46:
                    00:3e:ee:e8:75:7e:f9:bf:3a:60:e6:ef:92:37:14:
                    ac:d2:2d:c2:fc:c0:c6:51:e0:20:d9:20:12:20:b2:
                    1f:00:ac:32:98:60:4c:7a:1a:aa:02:62:1d:fe:3c:
                    55:01:e2:31:23:9d:4f:47:4e:08:5a:cb:8d:55:d3:
                    b1:9d:95:60:05:1b:4b:d6:f7:16:ad:c8:68:56:24:
                    cd:be:80:f6:7d:30:ed:98:41:cd:58:5d:59:76:b9:
                    94:dc:e6:68:bb:ad:40:1f:50:d6:a4:f6:2b:22:e0:
                    2f:41:3c:72:47:bc:a0:f6:a1:00:91:ef:6e:6a:a1:
                    bd:99:ec:b1:24:33:38:57:a6:e7:fb:4c:d0:52:33:
                    6c:ce:59:33:ab:b7:33:b9:54:9d:5e:21:06:b7:bf:
                    38:54:55:00:06:c8:b7:c3:bc:9a:f0:42:30:94:33:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:A3:6D:B1:DF:39:DA:AC:9A:CE:7A:BC:21:EC:C7:6B:3D:75:54
            X509v3 Authority Key Identifier:
                keyid:AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:89:30:39:86:5a:23:e7:69:7d:69:93:71:e2:3a:7f:50:d2:
         76:d3:a4:3a:50:ba:60:1c:30:a9:c6:75:37:f6:6b:8b:20:b9:
         3e:4f:ba:94:b7:05:04:45:bf:9e:42:12:9f:ed:c5:0c:46:8b:
         0a:e7:a6:1e:67:d8:80:2d:52:99:44:f6:cf:81:dc:d4:17:30:
         99:13:d6:52:49:38:ab:07:af:5b:3e:4e:51:00:48:39:3c:21:
         fe:e3:a4:78:51:4b:75:f8:91:02:5a:da:ce:d3:c0:67:ca:bb:
         b5:f2:bb:7b:72:e5:18:15:f7:8b:1e:ce:a5:74:f4:66:09:89:
         b8:65:12:48:4d:6f:b1:66:c8:76:7c:78:e9:9f:ac:37:56:2e:
         84:c8:e0:54:c6:2c:90:30:3d:c7:a9:bf:06:a6:1b:d1:74:94:
         86:98:aa:fe:44:d4:5b:c8:a1:46:c3:2d:83:b4:af:89:56:27:
         9a:29:0c:05:6e:21:be:5e:09:78:4b:c0:89:56:e4:ed:1e:98:
         d0:a9:9b:e4:a1:81:fe:f5:5f:22:11:91:a5:93:1c:53:16:44:
         c1:ab:80:25:fd:bd:a5:24:aa:42:e5:d2:7b:df:3a:49:7f:e2:
         c1:a6:0f:f5:9a:ef:7d:63:6a:0b:0d:5f:22:e2:94:47:b5:51:
         1a:1b:df:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----