Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/prhaBq_eNUU1odgrmFvieDLT35U.mft
File:                     prhaBq_eNUU1odgrmFvieDLT35U.mft (raw, json)
Hash identifier:          OSQDGIxQSfrfIIGYLApUkO34Uj/lHoy6C83Fx+P8j/o=
Subject key identifier:   E2:08:C9:8A:42:D2:2D:2E:DC:BF:B5:9C:87:B3:22:6A:A7:F4:A2:A3
Authority key identifier: A6:B8:5A:06:AF:DE:35:45:35:A1:D8:2B:98:5B:E2:78:32:D3:DF:95
Certificate issuer:       /CN=a6b85a06afde354535a1d82b985be27832d3df95
Certificate serial:       0182B5B52776D26939F6DC5D33C9E8DB0466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prhaBq_eNUU1odgrmFvieDLT35U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/prhaBq_eNUU1odgrmFvieDLT35U.mft
Manifest number:          0A6D
Signing time:             Fri 19 Aug 2022 10:45:24 +0000
Manifest this update:     Fri 19 Aug 2022 10:45:24 +0000
Manifest next update:     Sat 20 Aug 2022 10:45:24 +0000
Files and hashes:         1: Bo0sjUUJ6SeO1YNejNLFCWV6usc.roa (hash: EB5tj+ZFW3NAFusur6y5F0+I93TWvg5c3J6NJWtHAm4=)
                          2: nAq1Ro5THwyNRCt9y584PwrX0Sw.roa (hash: TdPoBcW8dtiFbhho9rVBgfLH9WyMieBysoi6B6JsLRE=)
                          3: prhaBq_eNUU1odgrmFvieDLT35U.crl (hash: +cvf8Tuc0xV9RNdNdsttsRnlDECMRUtMmzIpO92+xtw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b5:b5:27:76:d2:69:39:f6:dc:5d:33:c9:e8:db:04:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b85a06afde354535a1d82b985be27832d3df95
        Validity
            Not Before: Aug 19 10:45:24 2022 GMT
            Not After : Aug 20 10:45:24 2022 GMT
        Subject: CN=e208c98a42d22d2edcbfb59c87b3226aa7f4a2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:e9:5e:8b:20:b8:4d:cc:3f:26:95:4d:bd:
                    e9:0a:75:fb:2d:a9:a8:61:94:0c:00:d1:2b:64:f5:
                    08:1c:a0:cf:20:6f:10:cd:9e:54:7c:6c:33:b5:06:
                    e7:e6:77:21:63:18:41:fc:4a:c0:e2:9d:ab:ba:7f:
                    71:4c:f2:e2:2f:9f:74:f6:e9:66:ba:8f:2c:2e:fc:
                    4b:67:fe:fe:db:e1:62:b1:f3:29:43:6a:d5:c5:39:
                    ca:d8:64:b1:7b:d5:71:db:a1:07:81:fc:ff:32:89:
                    43:e9:3b:e6:1a:49:ce:ab:3e:af:99:82:1f:59:30:
                    16:1a:45:e3:0c:db:bb:39:5f:c8:c1:86:83:ba:50:
                    e8:6f:02:17:66:90:1e:98:64:88:40:06:d1:75:ee:
                    24:aa:26:17:3b:50:52:d9:3e:87:5a:e0:07:d8:40:
                    be:42:3c:48:06:c9:e1:7c:aa:54:11:85:0d:b5:21:
                    64:68:2e:c4:40:61:67:8b:27:83:ea:c6:51:aa:c5:
                    40:ac:b8:75:03:98:ed:35:ac:35:de:3b:5e:8c:bb:
                    4e:bc:21:b0:aa:4f:9b:45:e2:d8:9a:11:07:86:cd:
                    ad:dc:cb:d6:a4:44:d7:94:00:7a:1c:98:f8:3c:31:
                    21:7c:02:bf:90:12:43:d5:f2:12:46:2e:46:8d:85:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:08:C9:8A:42:D2:2D:2E:DC:BF:B5:9C:87:B3:22:6A:A7:F4:A2:A3
            X509v3 Authority Key Identifier:
                keyid:A6:B8:5A:06:AF:DE:35:45:35:A1:D8:2B:98:5B:E2:78:32:D3:DF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prhaBq_eNUU1odgrmFvieDLT35U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/prhaBq_eNUU1odgrmFvieDLT35U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/prhaBq_eNUU1odgrmFvieDLT35U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:79:17:ea:3e:37:b5:c2:f5:3e:a7:77:28:9e:95:0f:c7:
         ca:b5:6e:9c:71:e7:7c:d0:90:94:7e:83:a2:e7:ed:09:c0:a7:
         1f:32:41:7f:6b:89:2a:b9:94:c9:28:c1:a5:aa:b4:cc:43:44:
         0b:92:b6:ce:da:8f:5f:96:46:ea:fc:b0:2d:83:27:8e:02:41:
         5c:be:a9:59:1f:a9:37:6c:db:51:2f:87:43:d0:44:65:5a:95:
         ff:ae:76:14:e9:43:f0:df:5d:46:5c:3c:f8:7e:72:a9:ed:6e:
         7c:b7:ac:a9:ae:95:5f:57:00:7d:89:94:8e:52:bc:4d:62:2e:
         c2:27:00:55:ec:b8:40:00:15:c6:b9:13:ef:25:02:72:c0:a1:
         59:04:07:b3:31:4b:da:fb:d8:36:b5:09:93:c9:84:99:f7:5e:
         24:b5:57:fc:d5:dc:cf:a9:dc:f7:ef:f4:2b:37:17:6b:c2:69:
         a6:40:be:84:34:57:88:71:e3:96:77:fe:b4:94:7e:f0:f3:d7:
         6f:21:23:82:c0:d2:9e:26:50:fe:fe:9f:d5:6c:69:01:22:65:
         f6:a8:fd:90:89:9e:da:23:89:e6:56:a1:69:eb:47:d3:c2:c7:
         dc:28:a7:dc:d2:92:2e:58:14:83:73:39:d8:4c:75:b0:72:4e:
         b9:cd:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----