Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.mft
File:                     EistL6i89fg2IQufSSEe5tCU0NI.mft (raw, json)
Hash identifier:          9PG8BKSStYawQxESQQXChbCJIABIwEIpp2GcZi7TfAY=
Subject key identifier:   1B:3A:DA:C1:B9:0E:5D:14:3F:75:FD:54:DD:47:1C:09:AE:0D:FD:FB
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Certificate issuer:       /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial:       018570FBBFA3A25E3B17E75152B23A192B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.mft
Manifest number:          03D7
Signing time:             Mon 02 Jan 2023 05:37:04 +0000
Manifest this update:     Mon 02 Jan 2023 05:37:04 +0000
Manifest next update:     Tue 03 Jan 2023 05:37:04 +0000
Files and hashes:         1: EistL6i89fg2IQufSSEe5tCU0NI.crl (hash: N4vnu+KP33eVXLM2oAaw/Snlt4IHjMXnFJ0lIFiIghA=)
                          2: gH0Vo_gaY9FZBcCu7TddrgUZTZc.roa (hash: BQFK/uBPqD7wcNBWq+++fo9jMpvBL3NlhrNREifwuh4=)
                          3: w-n989jjTlDf5MUgKsjewMtXUDI.roa (hash: wPJ7KbnJR8p2ekXqpvAYMlqfMd5+w+edbJ261qR43f4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:bf:a3:a2:5e:3b:17:e7:51:52:b2:3a:19:2b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
        Validity
            Not Before: Jan  2 05:37:04 2023 GMT
            Not After : Jan  3 05:37:04 2023 GMT
        Subject: CN=1b3adac1b90e5d143f75fd54dd471c09ae0dfdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:80:43:27:3a:21:5b:24:20:80:e5:e3:3d:
                    60:f8:ed:83:24:76:7c:da:f3:46:10:e1:fa:5a:70:
                    95:2e:58:1b:ca:9a:27:95:d1:fd:da:c4:de:50:c9:
                    ab:e6:24:1c:16:f2:2c:40:46:02:e2:0f:ce:73:57:
                    c1:0d:d9:70:49:5f:fb:8b:52:0e:44:12:7b:4a:44:
                    57:cb:87:af:19:01:c4:f9:fc:f9:d4:a2:a6:dc:af:
                    58:9e:1b:f2:f6:d8:74:f9:d1:03:4d:8b:b4:4c:4c:
                    61:c9:ae:44:15:98:b0:1c:a2:4b:26:45:d5:fb:6a:
                    aa:0e:9e:0e:da:ff:df:1b:1f:45:c5:e5:9e:f4:f2:
                    3c:eb:94:41:8c:84:34:ba:ba:49:b2:e7:d6:02:96:
                    1a:29:e3:51:d5:f8:69:5d:6f:0e:7b:10:2d:d9:97:
                    e2:0b:3a:69:59:74:54:c7:96:24:d6:10:79:40:b5:
                    ff:15:17:08:ec:83:a3:e5:89:fe:a3:13:51:d8:3a:
                    08:78:52:76:28:89:65:3c:ea:25:2e:6e:3b:08:05:
                    e0:a8:f2:27:06:91:8f:10:b6:f4:77:ac:98:22:1a:
                    dd:08:9b:ed:ca:4e:63:63:2b:92:b5:50:f2:b6:37:
                    10:c0:5e:5d:73:2c:0e:99:f4:2a:47:e9:1b:16:88:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3A:DA:C1:B9:0E:5D:14:3F:75:FD:54:DD:47:1C:09:AE:0D:FD:FB
            X509v3 Authority Key Identifier:
                keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:db:9a:c0:f6:f8:cb:b3:b5:8b:9f:14:42:d1:e2:55:db:2f:
         5b:22:5d:42:2a:0a:ed:51:3e:09:c8:e3:5d:66:e8:77:fb:28:
         ec:71:43:e1:0f:38:80:ac:a7:3c:ab:d0:6c:7a:a6:64:d8:6a:
         79:95:d0:c4:8c:37:ff:c6:2f:67:2a:2f:fd:51:40:c7:ca:1f:
         60:31:fd:08:d9:ca:bf:5a:84:01:21:78:62:29:74:e1:c7:ec:
         ab:ca:a3:ab:9f:d4:30:c7:aa:c7:97:3e:ed:c1:1d:39:06:a8:
         b9:32:d4:7d:50:c1:33:75:12:7b:61:3a:86:a7:b8:ef:69:b6:
         17:f7:9c:9d:ba:fd:ec:91:9c:72:6b:bc:34:9c:82:0d:06:3c:
         f7:65:41:1b:12:48:f6:68:02:d5:1b:0c:f7:da:a1:36:7a:2f:
         5b:56:18:2f:3e:0d:d7:42:ee:8c:33:f3:35:56:03:aa:35:89:
         12:01:69:3a:5b:5b:50:c9:f9:f1:74:14:7a:58:c6:3e:52:78:
         c9:ed:ab:29:29:32:6e:af:53:9f:bd:17:7d:bd:84:65:87:2c:
         e7:6d:f5:63:e5:1a:0e:4e:15:ca:b4:43:09:a7:eb:83:8b:51:
         e9:1a:da:d5:d7:93:3f:dd:67:06:b5:30:07:11:f8:50:dd:d8:
         38:85:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----