Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/se5RigAr9Ktz_4kjJlDwUpiX2e4.mft
File:                     se5RigAr9Ktz_4kjJlDwUpiX2e4.mft (raw, json)
Hash identifier:          V1udnX8heIJVXX2pQlAp/RQAxIwqldeMXaM9+PB4bak=
Subject key identifier:   34:BB:FC:AE:63:A3:E4:5F:A9:8F:8F:EE:E1:85:67:20:6B:6F:E7:B8
Authority key identifier: B1:EE:51:8A:00:2B:F4:AB:73:FF:89:23:26:50:F0:52:98:97:D9:EE
Certificate issuer:       /CN=b1ee518a002bf4ab73ff89232650f0529897d9ee
Certificate serial:       018C89E4A04C06624F328D8A132B6F6541A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se5RigAr9Ktz_4kjJlDwUpiX2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/se5RigAr9Ktz_4kjJlDwUpiX2e4.mft
Manifest number:          0E5F
Signing time:             Thu 21 Dec 2023 01:01:50 +0000
Manifest this update:     Thu 21 Dec 2023 01:01:50 +0000
Manifest next update:     Fri 22 Dec 2023 01:01:50 +0000
Files and hashes:         1: JIS0Gl4Mk01HDsEQCt2zPb3QZKQ.roa (hash: iivuZWwT8XuE55NhJOyOUq8+ywK+3qPFvfQK6rXdqe0=)
                          2: se5RigAr9Ktz_4kjJlDwUpiX2e4.crl (hash: dgu5xDHgoTk/zOWL88ByzTWqni8E+FDWDzBBrxgW/3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:89:e4:a0:4c:06:62:4f:32:8d:8a:13:2b:6f:65:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee518a002bf4ab73ff89232650f0529897d9ee
        Validity
            Not Before: Dec 21 01:01:50 2023 GMT
            Not After : Dec 22 01:01:50 2023 GMT
        Subject: CN=34bbfcae63a3e45fa98f8feee18567206b6fe7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:c8:05:37:1d:fc:4d:05:b3:11:59:68:99:
                    0b:3e:cd:06:5f:4d:bb:78:9b:9a:ba:10:7d:12:8f:
                    51:04:07:a2:25:e3:ac:1e:11:2d:f0:31:a3:a2:80:
                    60:a4:e4:1c:ec:ab:e3:7f:f0:6d:7b:f0:01:0c:b6:
                    ec:ea:0e:f5:63:9a:e1:11:d0:34:4e:f9:10:83:e3:
                    9c:b2:5e:11:db:9d:3b:a4:df:c0:d0:98:ec:75:2c:
                    0b:f3:e8:e3:6c:51:20:e8:4b:98:2f:7e:f3:85:5d:
                    0a:96:5f:95:d3:75:75:74:42:1a:94:c0:35:99:9d:
                    5a:68:c2:3b:ef:e5:b9:07:3e:af:8c:55:35:63:3d:
                    02:c3:17:5e:a5:9e:89:78:cc:2e:87:e1:81:5a:40:
                    43:fe:24:ed:28:5b:ad:5d:44:a1:a1:94:e3:dd:19:
                    31:20:c7:7c:f4:fb:7c:0b:4f:1b:a1:43:1b:d1:f1:
                    34:0d:fb:8e:ec:3a:9c:e4:ed:3b:66:07:05:6e:07:
                    65:2b:1b:63:e3:47:b0:de:35:b1:7f:4e:ad:84:84:
                    36:81:49:9a:ac:b0:ce:91:8e:23:21:f1:2a:18:a8:
                    2b:d9:d8:7d:6d:86:77:86:d4:4b:0f:8f:a3:4b:07:
                    bb:45:0a:68:25:9e:3c:56:15:f4:94:49:35:7f:a1:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:FC:AE:63:A3:E4:5F:A9:8F:8F:EE:E1:85:67:20:6B:6F:E7:B8
            X509v3 Authority Key Identifier:
                keyid:B1:EE:51:8A:00:2B:F4:AB:73:FF:89:23:26:50:F0:52:98:97:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5RigAr9Ktz_4kjJlDwUpiX2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/se5RigAr9Ktz_4kjJlDwUpiX2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/se5RigAr9Ktz_4kjJlDwUpiX2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:3b:87:c6:2b:21:45:8f:1a:74:a4:6b:99:0c:a2:91:db:
         ff:1f:13:53:86:59:e5:3e:0e:de:d2:17:28:eb:cd:20:0a:27:
         bf:14:6e:3a:10:cc:90:4a:83:5a:08:45:7f:f6:3c:e1:aa:c0:
         38:24:51:f1:9d:16:01:c4:d5:ff:ba:f4:c6:bc:2f:e3:fa:c5:
         34:f8:bb:ae:6c:e8:3b:09:43:77:cf:b5:14:3c:fc:35:13:76:
         2f:2a:22:56:e0:84:5c:fb:b4:25:3c:79:c0:99:c3:28:91:a8:
         5c:20:4d:51:36:9e:4e:19:71:58:0b:40:d6:64:f3:3d:01:ee:
         cc:ae:46:00:27:d6:59:90:32:3f:e3:c5:bc:8f:79:73:df:c6:
         20:d1:7c:5c:75:72:de:a3:0c:f6:b3:61:2d:f6:c7:51:09:70:
         59:de:7b:49:31:ca:32:0f:36:38:eb:22:84:3b:9f:63:44:66:
         31:6f:77:c4:62:ef:f6:8d:a4:3b:e9:6f:f6:ee:54:90:c6:0b:
         cb:8e:a1:00:2b:10:80:02:bf:6e:14:17:26:7a:eb:3d:a5:6f:
         02:37:de:26:dc:d4:f3:e8:2b:72:97:f8:80:3e:f2:54:95:d2:
         8b:56:aa:41:41:d0:f0:a3:7e:58:24:f6:8f:78:5a:87:d2:8f:
         af:55:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----