Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.mft
File:                     5esnPgRD5X_8ooYLDCBhPw5CfGI.mft (raw, json)
Hash identifier:          cNrIv61jaRjVEWLDeuuzFl+B5pNjFqio2henn6L5sy8=
Subject key identifier:   47:15:E2:B8:9A:7C:55:66:9C:21:67:14:C9:34:BD:E2:11:A9:42:C9
Authority key identifier: E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62
Certificate issuer:       /CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
Certificate serial:       018967EB858211FBCB7875D56FFA14424EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.mft
Manifest number:          0631
Signing time:             Tue 18 Jul 2023 07:33:55 +0000
Manifest this update:     Tue 18 Jul 2023 07:33:55 +0000
Manifest next update:     Wed 19 Jul 2023 07:33:55 +0000
Files and hashes:         1: 5esnPgRD5X_8ooYLDCBhPw5CfGI.crl (hash: mJKcUsnfaMKSUgywDTyuwmN6tKQ0hLMNVVKJ2vPw2qU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:67:eb:85:82:11:fb:cb:78:75:d5:6f:fa:14:42:4e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
        Validity
            Not Before: Jul 18 07:33:55 2023 GMT
            Not After : Jul 19 07:33:55 2023 GMT
        Subject: CN=4715e2b89a7c55669c216714c934bde211a942c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:95:75:67:ca:2f:7a:64:db:9a:9b:f7:5f:
                    4b:6c:dd:03:45:ce:98:2c:8e:24:13:1f:02:bd:f5:
                    ce:a9:74:6e:1d:ea:7a:e5:f6:25:bd:f1:90:55:93:
                    28:97:2e:58:f7:aa:75:f8:c5:d0:f7:6d:ed:2e:83:
                    fd:97:75:ce:f0:e1:74:e2:2c:db:92:42:5a:3b:9c:
                    b8:01:63:a2:47:f5:9e:4a:96:1e:64:1e:07:c7:60:
                    80:39:16:a3:91:eb:10:22:a5:fb:67:56:0a:63:c9:
                    50:42:6d:58:44:dd:bc:2a:67:a8:fe:65:03:c3:7a:
                    a4:12:0f:4a:df:40:a0:e3:96:90:6f:be:5d:a1:59:
                    48:e3:a1:51:de:22:c1:36:00:6d:eb:69:d1:7a:82:
                    93:6d:16:b7:9b:a2:3d:6d:13:63:52:6d:de:f5:eb:
                    a3:8b:3e:83:d9:49:62:4c:62:4a:19:95:0b:ff:d9:
                    b9:5c:a1:e9:e7:ee:9c:62:f2:2f:f5:50:5a:00:05:
                    08:7f:7f:bd:7d:d6:2e:e8:15:b5:3f:90:45:b2:38:
                    cd:86:d9:f9:e8:59:84:bd:ba:e4:22:91:8e:76:2f:
                    dd:c4:0e:89:26:09:a1:c3:d4:9a:12:7a:3e:98:eb:
                    bb:57:24:00:5f:7b:76:62:1a:43:56:96:6a:15:03:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:15:E2:B8:9A:7C:55:66:9C:21:67:14:C9:34:BD:E2:11:A9:42:C9
            X509v3 Authority Key Identifier:
                keyid:E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e9:c7:91:89:fa:d5:0d:39:27:45:4f:6f:11:2d:33:e4:0f:
         13:f8:ec:17:b5:c8:8c:f4:df:19:51:b6:ef:51:6c:0b:3d:be:
         7d:22:88:30:67:60:27:1b:5e:77:cd:0e:7a:df:24:52:57:eb:
         be:c4:22:4f:e4:ee:01:e8:de:20:36:e3:d3:f2:8f:59:9a:c5:
         71:db:c9:0e:13:74:1c:3c:3a:b3:c7:a8:5d:f9:10:a1:b0:95:
         aa:56:4b:44:86:fa:8a:ac:b1:2d:78:5a:f0:35:6e:4c:a7:da:
         27:7b:16:b1:f9:9d:31:ac:e1:96:10:71:c5:fc:c0:f4:a0:de:
         7a:aa:e3:ad:da:f6:60:8a:86:5e:3f:d8:07:2e:f2:4b:98:0b:
         b4:1b:b2:bb:06:2b:e2:ff:2b:63:b2:a6:66:48:8f:b6:76:f0:
         6d:ea:ce:5e:18:69:31:a2:c5:42:03:d5:5c:3d:2c:76:59:c9:
         cf:be:d2:7a:91:44:d6:00:62:83:84:0a:b2:1d:55:5a:2d:16:
         e0:dc:1f:62:3c:27:fe:61:57:3e:76:67:17:26:d1:2f:cf:cf:
         37:26:c6:c1:d1:34:69:23:9d:1c:4d:8a:3b:55:52:c9:ab:84:
         ff:29:da:2a:5a:cf:8d:06:e1:2a:0d:d6:7a:1c:d1:c1:36:cb:
         02:6b:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----