Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
File:                     5ecAZeAJ3tlYVugKBTsuntzv-4w.mft (raw, json)
Hash identifier:          MbVBoBvs/7Gc9EBvbI8kAEilxGbM9KVdeZDSxJ+7Wdg=
Subject key identifier:   D1:DB:91:51:00:C2:A2:2F:AE:04:56:72:DD:33:6C:91:53:59:41:31
Authority key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Certificate issuer:       /CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Certificate serial:       018F001A109CC2102BFDE9F3C2A4B8EE1506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
Manifest number:          08C1
Signing time:             Sun 21 Apr 2024 10:00:59 +0000
Manifest this update:     Sun 21 Apr 2024 10:00:59 +0000
Manifest next update:     Mon 22 Apr 2024 10:00:59 +0000
Files and hashes:         1: 5ecAZeAJ3tlYVugKBTsuntzv-4w.crl (hash: CUaV9Sns7R86hUjDsEZF5afwa30B3pGaYlAUslL+KUw=)
                          2: Lx_4XFDsplQfOXQQGVipgwTfSms.roa (hash: OD9c/vjTLTeMTjWpAoQEiZoFFds5ic3aO4dEsnWENEA=)
                          3: i93dNDTZUmndF-WrTwIxtqLHx3Y.roa (hash: yCUwHnvF0Emqy9YYjXnuZJx5Irogsp7OFUEG8TMqtYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:00:1a:10:9c:c2:10:2b:fd:e9:f3:c2:a4:b8:ee:15:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
        Validity
            Not Before: Apr 21 10:00:59 2024 GMT
            Not After : Apr 22 10:00:59 2024 GMT
        Subject: CN=d1db915100c2a22fae045672dd336c9153594131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:33:17:36:20:0c:b8:f1:b4:e2:3a:a7:c0:
                    67:99:62:df:a6:bc:58:b3:f0:82:46:f3:0c:60:1d:
                    c6:0b:04:e6:4d:ee:1c:20:2d:54:0e:f7:58:70:e4:
                    35:e7:b2:5f:84:99:4b:fa:fa:11:1d:5b:31:92:f5:
                    07:b1:f3:00:97:b8:57:e7:e3:b3:d4:76:c3:5b:c6:
                    73:c8:f3:3d:76:eb:5b:94:d4:7d:1e:09:4d:8c:33:
                    14:97:24:c6:52:6a:53:dd:1c:7b:3b:2f:e4:fd:cf:
                    8a:38:71:75:c1:00:75:34:13:c8:cc:42:07:cc:8e:
                    ae:d0:26:0e:19:e5:bf:c7:a1:84:70:2f:31:59:4a:
                    0a:23:df:4c:7d:18:c8:61:27:72:7f:0a:f6:f3:87:
                    a0:8e:d1:4b:b2:0c:73:8d:56:e0:8b:5f:3a:be:39:
                    43:75:88:ba:f5:41:25:52:6e:47:47:34:2c:1f:b1:
                    53:55:3b:db:e0:6e:b5:7a:33:29:97:8c:7c:8d:82:
                    04:37:28:a4:8e:19:9b:a6:83:70:5e:00:7c:75:ef:
                    d1:1b:3d:19:66:98:24:9f:f0:8d:7d:a7:19:8b:38:
                    f3:42:aa:02:56:04:2f:18:6e:cb:67:ad:d8:ab:e5:
                    9c:b3:a6:3c:29:09:48:f6:c2:fe:ca:db:8b:2c:da:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DB:91:51:00:C2:A2:2F:AE:04:56:72:DD:33:6C:91:53:59:41:31
            X509v3 Authority Key Identifier:
                keyid:E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:86:83:4b:d0:9e:8b:b6:23:ee:de:2c:e4:7a:7a:d2:74:
         e2:fb:fc:e2:62:c9:30:b1:de:da:f5:cd:a9:03:3e:4b:5c:01:
         0b:85:ce:23:04:b8:36:0b:79:0b:ae:05:fe:d7:5a:81:74:d0:
         9c:d0:3f:6b:6a:b7:b8:8e:9e:3a:db:a5:c6:d9:30:70:45:f2:
         05:6f:41:f0:f4:47:36:2a:b3:26:d9:ec:0b:67:8b:61:91:89:
         62:a8:18:4b:2d:86:66:79:2b:22:d9:43:ce:38:8e:f6:af:66:
         0c:00:bf:e5:f2:3a:a6:e8:40:32:0b:96:de:71:cf:78:18:23:
         a6:7c:16:95:1f:f0:29:6b:af:51:2c:5b:ed:65:3d:8e:cb:c5:
         51:55:c0:76:9c:26:4c:f2:e2:18:c9:16:a6:72:ac:4b:e7:7e:
         bd:b7:b8:8d:97:26:a8:d4:0f:7c:ce:0d:60:c9:27:c5:25:26:
         37:3f:76:ca:13:62:ac:18:7b:6c:5a:08:98:c0:ca:44:3d:19:
         a3:3a:93:a0:79:fb:3c:ee:84:35:91:43:1f:04:c5:98:55:be:
         6f:bd:fe:a3:36:8c:f3:84:de:19:17:c1:26:92:a4:02:cf:38:
         d5:18:50:a0:46:72:64:c5:3a:e6:56:31:eb:ac:96:e2:ad:f8:
         ec:fd:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----