Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1fa7c2-fc52-4ab7-aa55-da9c79cbedf7/1/seK12tbsNKBDI31IVHfsK_NKE4g.mft
File:                     seK12tbsNKBDI31IVHfsK_NKE4g.mft (raw, json)
Hash identifier:          yYc/IiR6+EJHnAW7zr1eWG0YCAopNThe7hBqzYGD59Q=
Subject key identifier:   3B:C6:10:C4:64:94:47:2C:26:2C:CA:FE:9D:15:03:66:11:69:37:01
Authority key identifier: B1:E2:B5:DA:D6:EC:34:A0:43:23:7D:48:54:77:EC:2B:F3:4A:13:88
Certificate issuer:       /CN=b1e2b5dad6ec34a043237d485477ec2bf34a1388
Certificate serial:       0186D93BC5525F87F5E034C0197C2B9716A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/seK12tbsNKBDI31IVHfsK_NKE4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1fa7c2-fc52-4ab7-aa55-da9c79cbedf7/1/seK12tbsNKBDI31IVHfsK_NKE4g.mft
Manifest number:          07
Signing time:             Mon 13 Mar 2023 04:30:18 +0000
Manifest this update:     Mon 13 Mar 2023 04:30:18 +0000
Manifest next update:     Tue 14 Mar 2023 04:30:18 +0000
Files and hashes:         1: seK12tbsNKBDI31IVHfsK_NKE4g.crl (hash: 8iTsaJdtA03HNc5+d9+gLrV+s3uvHO4bmC0BYZtcgV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:d9:3b:c5:52:5f:87:f5:e0:34:c0:19:7c:2b:97:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e2b5dad6ec34a043237d485477ec2bf34a1388
        Validity
            Not Before: Mar 13 04:30:18 2023 GMT
            Not After : Mar 14 04:30:18 2023 GMT
        Subject: CN=3bc610c46494472c262ccafe9d15036611693701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:6c:5c:27:98:60:38:64:09:1d:ff:bb:14:
                    d6:57:03:54:7d:ca:67:3d:af:18:42:b8:ce:78:94:
                    4d:d2:19:73:d3:bd:80:f7:80:58:db:67:eb:bd:53:
                    83:13:9e:0f:6b:94:bb:9e:db:d4:eb:d9:8d:8f:ca:
                    44:f4:a3:08:9f:2f:90:14:8c:a8:78:ea:31:ab:ab:
                    eb:46:a9:ad:54:4e:20:b6:82:48:aa:36:38:17:0f:
                    ad:35:c5:ad:f0:07:bd:75:13:d6:cb:0a:38:ea:db:
                    da:de:c3:bc:be:59:cd:65:db:53:1c:6c:c4:59:6f:
                    06:79:85:fe:67:78:28:76:de:71:e7:f3:83:dc:7b:
                    f2:f5:96:28:00:0f:9f:8a:ff:fc:99:83:65:f0:72:
                    df:df:d7:ea:36:ff:76:cd:be:93:85:da:6d:7e:69:
                    4f:c2:70:bb:08:cc:b3:3b:1a:25:2a:21:3e:01:11:
                    43:67:0f:70:ac:5a:45:1f:6c:1f:50:df:d3:38:05:
                    b6:d0:97:47:01:cf:5d:f7:26:4b:03:85:33:92:6f:
                    a9:cb:b1:6a:07:18:28:f1:46:7d:09:e9:28:90:86:
                    69:a0:b8:df:db:ee:27:a5:49:ec:2d:d4:4b:44:82:
                    3a:89:74:e0:a9:49:96:c6:a6:0f:37:9a:ba:c8:0f:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C6:10:C4:64:94:47:2C:26:2C:CA:FE:9D:15:03:66:11:69:37:01
            X509v3 Authority Key Identifier:
                keyid:B1:E2:B5:DA:D6:EC:34:A0:43:23:7D:48:54:77:EC:2B:F3:4A:13:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seK12tbsNKBDI31IVHfsK_NKE4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1fa7c2-fc52-4ab7-aa55-da9c79cbedf7/1/seK12tbsNKBDI31IVHfsK_NKE4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1fa7c2-fc52-4ab7-aa55-da9c79cbedf7/1/seK12tbsNKBDI31IVHfsK_NKE4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:ec:fd:50:6e:1d:4d:9e:6a:de:ba:6d:d8:a6:a8:08:fc:
         5c:19:2e:7d:e8:6e:9e:32:e2:57:d1:02:20:a4:31:ff:93:49:
         25:0c:5f:01:62:12:17:3e:97:0b:0a:ff:6b:7d:b3:81:d2:9c:
         4c:fc:f3:3f:05:ef:e3:bc:7e:e9:79:24:5d:a1:07:fb:07:2c:
         6c:e1:df:63:48:11:4d:4b:ae:48:fd:17:be:7e:81:20:6b:13:
         ae:d6:49:97:d7:e4:90:fb:0f:2e:d7:28:f5:24:f3:3d:a1:f7:
         a2:8f:b5:4c:1c:a5:63:91:a3:fe:18:03:17:89:c9:29:59:de:
         48:9f:86:6c:25:a3:5d:51:4c:22:5d:bd:7a:2f:ab:30:eb:97:
         21:1a:b2:89:8a:20:a8:00:7c:4d:13:fc:2e:85:17:87:4d:99:
         7c:11:a0:9f:a2:df:67:70:c0:90:b1:84:0b:43:f2:14:b7:df:
         f1:fc:a0:11:c6:3f:4a:79:78:28:ff:0a:f2:df:d9:71:7b:58:
         4f:c5:b6:77:34:b2:f3:25:c8:7a:33:d9:4a:01:59:35:aa:00:
         d7:dc:d4:82:b6:a3:4b:fe:c7:11:bf:a8:51:e4:30:d8:67:58:
         16:d8:5f:3d:12:3d:9d:18:4e:1f:e5:90:8d:b7:fa:c2:f7:67:
         3f:89:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----