Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3C98318A972D85246CA2902F5B3F09843DE3C85D.mft
File:                     3C98318A972D85246CA2902F5B3F09843DE3C85D.mft (raw, json)
Hash identifier:          H3SLMYD7mD1wFXVqqIZBsdpwJAW+9h8Zd7ZG30M4hdA=
Subject key identifier:   5E:8F:FF:37:17:6F:3B:75:42:BB:75:1F:A4:8F:B5:D9:4B:AC:C9:BF
Authority key identifier: 3C:98:31:8A:97:2D:85:24:6C:A2:90:2F:5B:3F:09:84:3D:E3:C8:5D
Certificate issuer:       /CN=eecf847d7a907be57f9dc75792911782fb554870788d513206
Certificate serial:       0FBD4266E4905DB3CC60E535C4EB63CA0A232BE7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a907be57f9dc75792911782fb554870788d513206.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3C98318A972D85246CA2902F5B3F09843DE3C85D.mft
Manifest number:          1B
Signing time:             Wed 21 Dec 2022 14:37:52 +0000
Manifest this update:     Wed 21 Dec 2022 14:32:52 +0000
Manifest next update:     Thu 22 Dec 2022 18:04:52 +0000
Files and hashes:         1: 3C98318A972D85246CA2902F5B3F09843DE3C85D.crl (hash: ZRBmqy7B8AjezRp9d6aoCdTcX3B7T8JIpj7/tNvd5dE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bd:42:66:e4:90:5d:b3:cc:60:e5:35:c4:eb:63:ca:0a:23:2b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a907be57f9dc75792911782fb554870788d513206
        Validity
            Not Before: Dec 21 14:32:52 2022 GMT
            Not After : Dec 22 18:04:52 2022 GMT
        Subject: CN=5E8FFF37176F3B7542BB751FA48FB5D94BACC9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:64:26:5c:ab:f4:1c:05:72:fc:4f:aa:b1:
                    a4:c0:ba:a1:a1:12:88:87:fc:4e:55:1c:bd:4c:f9:
                    e1:42:bf:4c:04:6d:4b:65:7f:d1:bc:3b:87:1e:20:
                    42:23:42:0b:e5:2a:00:d1:a4:83:de:51:fb:24:e8:
                    60:88:95:c6:f6:f9:62:26:42:a7:c4:af:12:22:cf:
                    97:eb:49:39:ba:81:dc:e2:7b:81:f2:3b:67:63:8d:
                    9a:92:05:66:73:34:4e:47:b5:4a:68:41:b4:09:e0:
                    47:f5:a1:99:78:81:93:b1:a5:6a:7e:c6:bc:98:19:
                    29:df:a3:ce:ea:00:74:3e:12:44:81:2c:fd:58:d9:
                    d5:4e:fc:0b:cc:2e:1a:ed:d7:68:5b:b5:98:64:90:
                    72:97:bd:b9:5c:6b:b3:6a:1b:26:d0:af:a9:9f:01:
                    23:91:56:0b:e4:89:dd:3a:4b:00:fc:c2:e5:71:93:
                    13:1a:18:35:e5:64:a5:e5:36:bc:54:d1:05:37:01:
                    64:9b:43:a3:f4:55:c4:a7:ca:0b:de:fc:36:eb:50:
                    c5:d7:e2:6a:f0:bf:4e:db:b9:a3:d8:74:75:68:35:
                    32:9c:8c:8f:36:41:7a:6f:c1:ed:44:28:fc:87:8e:
                    80:e8:c3:39:c2:1e:28:3f:a1:ca:ca:49:5e:fb:77:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8F:FF:37:17:6F:3B:75:42:BB:75:1F:A4:8F:B5:D9:4B:AC:C9:BF
            X509v3 Authority Key Identifier:
                keyid:3C:98:31:8A:97:2D:85:24:6C:A2:90:2F:5B:3F:09:84:3D:E3:C8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3C98318A972D85246CA2902F5B3F09843DE3C85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a907be57f9dc75792911782fb554870788d513206.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3C98318A972D85246CA2902F5B3F09843DE3C85D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b0:a9:8c:b0:71:d1:65:e2:fb:bc:e2:59:f2:5e:ca:49:de:
         9c:98:2c:46:01:51:1e:05:29:9e:54:ea:42:05:5a:0d:9d:fd:
         06:90:fb:5c:ca:ee:da:5f:7d:15:0a:c9:73:74:8f:1b:15:ce:
         02:e1:4d:86:81:ec:3f:a6:71:e1:ff:2d:62:0a:ef:9f:20:71:
         d6:73:ec:2b:96:0b:bc:d9:59:bd:a7:81:42:b0:3e:6f:ff:49:
         6d:3e:68:1a:52:84:67:9a:b9:c4:81:61:d2:cf:7c:e5:8f:2a:
         0b:03:02:22:4f:3c:d1:79:5a:f4:9a:63:08:b2:a7:a5:0b:b7:
         db:42:bf:8f:22:35:7c:54:ba:b0:30:40:28:8d:48:8f:cb:1c:
         4a:8c:4d:3b:2d:61:be:e5:ec:60:b5:9d:86:6f:3f:cb:9a:ea:
         91:1e:6c:82:1c:4a:ba:71:9f:64:e2:c1:ea:14:c9:e2:cd:1c:
         21:8b:1b:e0:3b:70:5b:f9:06:93:a3:50:b6:10:a9:21:ad:e4:
         97:1d:77:1e:ac:05:76:98:5e:aa:51:e9:c3:fb:bd:49:56:80:
         7c:e7:0e:48:8b:b0:9b:7f:63:5e:68:c5:2d:83:fd:de:1f:7d:
         62:2f:79:1e:78:12:1d:21:fd:86:a5:63:94:96:cc:17:1a:61:
         fb:83:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----