Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.mft
File:                     E8658A49C9CA09E89EB53A0969F6652FED345D78.mft (raw, json)
Hash identifier:          lsV4HXvBrFj4GkGLBARhvr1HGTQsFyP5jN5/ERI7wNM=
Subject key identifier:   DB:A0:DA:E2:57:78:60:3F:B8:44:3F:0E:6B:5C:5A:37:96:70:38:D0
Authority key identifier: E8:65:8A:49:C9:CA:09:E8:9E:B5:3A:09:69:F6:65:2F:ED:34:5D:78
Certificate issuer:       /CN=e8658a49c9ca09e89eb53a0969f6652fed345d78
Certificate serial:       4B1409A871B4DBCD71BE8046CE0E97F1801F0859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GWKScnKCeietToJafZlL-00XXg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.mft
Manifest number:          02
Signing time:             Tue 23 Jul 2024 19:49:43 +0000
Manifest this update:     Tue 23 Jul 2024 19:44:43 +0000
Manifest next update:     Wed 24 Jul 2024 23:46:43 +0000
Files and hashes:         1: E8658A49C9CA09E89EB53A0969F6652FED345D78.crl (hash: fEiH2X6Qf/O4Q3b1+OXuuTThUxDP2YASVW0W0gMn/yY=)
                          2: AS209025.asa (hash: FliDH+WtqC2XL3MP38ouvYx/WqgkgO0pr3I0LhFlIig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:14:09:a8:71:b4:db:cd:71:be:80:46:ce:0e:97:f1:80:1f:08:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8658a49c9ca09e89eb53a0969f6652fed345d78
        Validity
            Not Before: Jul 23 19:44:43 2024 GMT
            Not After : Jul 24 23:46:43 2024 GMT
        Subject: CN=DBA0DAE25778603FB8443F0E6B5C5A37967038D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:4d:d0:05:33:c8:55:09:36:5a:ca:03:f7:
                    22:1d:2f:22:06:0d:85:84:1f:95:ac:6f:8c:df:68:
                    c8:b6:1a:05:71:0e:6e:ce:e0:9a:43:a7:41:7e:c5:
                    9e:0a:0b:e0:d7:aa:31:40:7e:a1:98:2b:d4:8f:7b:
                    c8:70:66:e2:01:3d:40:1b:d6:ea:18:4d:75:45:81:
                    f6:5f:88:cb:db:b4:64:a3:b9:c3:c1:fb:93:e4:47:
                    f4:fa:d9:91:79:37:56:dc:58:53:d9:9a:5a:88:30:
                    60:9c:d3:fa:b6:70:27:d6:9b:10:b0:89:89:17:0e:
                    34:85:eb:1b:86:1a:f3:be:63:20:9c:41:40:f5:31:
                    7c:3a:de:96:74:5c:f3:07:70:89:2f:d0:f8:fd:c5:
                    fb:1e:65:82:bd:4b:47:07:96:3c:36:aa:e5:38:09:
                    c0:cf:dd:c6:7f:f1:5b:1b:79:0e:02:4f:61:9f:ab:
                    fd:fe:c4:85:63:ad:27:28:10:74:f5:de:b6:1c:de:
                    e0:1e:34:84:dc:b8:58:f4:de:fa:15:7a:65:29:2e:
                    12:9e:03:c3:46:17:4f:be:6c:ef:28:f3:2f:a1:f5:
                    4d:cb:99:70:06:23:6c:67:0b:ca:0f:34:4a:c0:44:
                    60:68:34:f7:14:31:d9:62:d8:11:9c:8b:44:0f:3f:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A0:DA:E2:57:78:60:3F:B8:44:3F:0E:6B:5C:5A:37:96:70:38:D0
            X509v3 Authority Key Identifier:
                keyid:E8:65:8A:49:C9:CA:09:E8:9E:B5:3A:09:69:F6:65:2F:ED:34:5D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GWKScnKCeietToJafZlL-00XXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:86:74:e4:73:01:10:20:43:0e:f4:5a:65:77:34:02:65:
         bd:a3:46:9b:7e:17:ae:27:1b:59:61:89:4c:ad:b5:76:5e:47:
         66:98:6b:05:16:e9:0e:2a:e3:63:83:8c:bf:f2:af:aa:0b:90:
         55:74:49:cc:d1:aa:9b:23:26:07:a4:72:f4:f5:a3:3b:df:31:
         aa:29:fe:4b:22:a2:4e:01:e3:bb:4e:23:bf:1e:4e:0e:e0:a8:
         be:b3:92:7b:0d:9c:3b:66:54:cf:67:1f:a9:9b:00:53:7a:71:
         56:4a:88:d3:49:64:d2:c0:19:e1:0f:b1:c8:c0:c0:e3:2c:c2:
         da:dd:eb:9d:9d:ce:48:4b:79:b8:1a:d3:5f:7a:ef:e6:74:6e:
         ae:7d:5d:eb:bf:f4:bb:e5:15:33:0f:af:51:69:84:a4:db:f3:
         52:91:d6:d1:1a:60:d9:51:f3:d1:0b:9a:16:ee:e2:11:2a:59:
         5d:08:86:e6:a1:56:ff:e1:51:35:4d:ca:a7:c8:8a:75:e9:0a:
         03:44:49:57:c2:86:25:ef:dd:04:16:1b:6a:56:fa:2e:dc:43:
         a3:84:82:1f:d4:dd:1a:3c:85:9f:6d:db:67:4c:dd:15:de:6f:
         40:4e:08:2c:9b:40:95:71:50:f0:8f:c8:4f:28:5d:1c:6c:dd:
         7a:79:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----