Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.mft
File:                     KbiZ19-mP8iGLsI5IB6x9sCPB_Q.mft (raw, json)
Hash identifier:          YB43+w5aVMtkoVlemGzDsKAVdR/xl3l4E4Jx8giPQ7Y=
Subject key identifier:   43:67:07:01:E0:EE:BD:0C:13:10:99:B6:F5:D1:66:EC:87:36:D8:C2
Authority key identifier: 29:B8:99:D7:DF:A6:3F:C8:86:2E:C2:39:20:1E:B1:F6:C0:8F:07:F4
Certificate issuer:       /CN=29b899d7dfa63fc8862ec239201eb1f6c08f07f4
Certificate serial:       01914565FFB11E2D443C8CBA4D36B069B2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.mft
Manifest number:          08EB
Signing time:             Mon 12 Aug 2024 07:03:18 +0000
Manifest this update:     Mon 12 Aug 2024 07:03:18 +0000
Manifest next update:     Tue 13 Aug 2024 07:03:18 +0000
Files and hashes:         1: KbiZ19-mP8iGLsI5IB6x9sCPB_Q.crl (hash: jwUz1AJG2A3ZtKotQtXlsniciwzkWgLtur+8xZeD9tk=)
                          2: qk8EWpo7s7ShKgijVXt4ttNGR4I.roa (hash: 8cGK3f47iB4cKrsv92GbwEX10qTYXnb/+ZMn/gL9V/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:45:65:ff:b1:1e:2d:44:3c:8c:ba:4d:36:b0:69:b2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b899d7dfa63fc8862ec239201eb1f6c08f07f4
        Validity
            Not Before: Aug 12 07:03:18 2024 GMT
            Not After : Aug 13 07:03:18 2024 GMT
        Subject: CN=43670701e0eebd0c131099b6f5d166ec8736d8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:7f:8d:bf:11:f4:8a:0a:ee:ad:f0:11:5a:
                    d4:6a:78:e2:c7:9d:83:4a:2e:db:9d:59:0a:98:90:
                    0c:e8:83:58:25:42:c0:ca:39:98:0d:07:0b:de:04:
                    0d:6e:7a:fc:4e:d0:6f:2c:ca:00:33:15:82:e5:a3:
                    82:25:f0:35:81:73:1e:7c:22:10:ef:f0:56:20:58:
                    d2:9c:43:de:59:52:9a:d0:85:85:1b:d9:75:30:8e:
                    ed:27:e9:36:d0:a0:37:de:4f:05:ce:72:5f:51:d3:
                    9b:1d:a7:b4:2a:52:57:4c:a2:d1:09:7e:5b:9c:60:
                    2a:05:03:b8:fd:f1:e9:cd:57:5c:bf:bf:b1:13:84:
                    2e:5b:52:ee:3e:73:53:0d:5f:ea:d8:e3:e2:f5:ef:
                    62:1f:d5:5a:dc:22:b8:d7:a8:ac:b6:d7:0f:9a:61:
                    66:cc:72:e3:88:f8:76:c1:3d:d6:a9:e1:17:fc:0b:
                    0f:65:99:f4:c0:db:c5:44:78:17:5c:11:35:d0:d5:
                    ac:9a:07:e0:e2:97:3d:ce:6b:00:33:9f:a6:9b:d0:
                    48:a5:46:6b:c5:fc:99:7c:4c:04:7b:b4:b9:c5:45:
                    22:c6:36:35:23:c7:09:a2:55:c2:e1:69:aa:e6:f4:
                    29:e2:6b:79:02:3a:52:cd:bf:0a:c6:36:47:39:94:
                    d8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:67:07:01:E0:EE:BD:0C:13:10:99:B6:F5:D1:66:EC:87:36:D8:C2
            X509v3 Authority Key Identifier:
                keyid:29:B8:99:D7:DF:A6:3F:C8:86:2E:C2:39:20:1E:B1:F6:C0:8F:07:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:7a:d1:de:09:29:8b:fe:2f:31:00:1d:b2:a2:00:fc:98:1c:
         ef:9c:1c:9b:0e:a1:3b:b4:a7:44:c5:17:7c:1b:06:91:7e:18:
         86:2a:85:b4:2d:27:5a:ef:2d:3c:0d:1b:8f:0b:55:34:a6:7a:
         6f:74:99:62:9b:da:33:ec:a0:9d:70:49:d1:89:31:df:ee:0e:
         f7:7c:49:bf:0d:29:a1:de:fb:d5:23:e7:ef:31:7d:7c:7c:95:
         b4:57:25:f1:dc:8c:3b:a6:a9:b1:14:17:7c:1a:6b:67:cf:6f:
         51:62:6b:f1:11:c2:85:a2:8a:60:dd:99:f9:20:7a:e6:a1:b6:
         87:b6:57:d2:74:d6:73:1a:30:48:7b:90:ec:a9:52:7d:68:cf:
         50:76:85:d5:83:6f:f7:6e:22:f5:50:b2:70:44:1a:3f:24:4e:
         57:bb:58:a3:03:2b:75:a1:d7:9a:a9:ad:56:5a:b0:f4:11:f8:
         49:4a:a0:8f:fd:92:57:62:6a:22:82:a0:26:06:d2:c2:12:57:
         12:a1:22:47:79:9a:6a:9a:e8:02:2c:92:e3:d0:70:0d:a9:76:
         16:26:07:54:e3:58:6b:9d:7b:a0:d0:67:6f:7b:3e:d4:55:3f:
         ff:ee:87:44:5c:b4:48:8f:dc:b8:b1:61:12:f5:f2:7f:cf:2f:
         9c:0e:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----