Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b4da85-c363-4245-9244-38aa98431bef/1/YP8z0k1DUETiNUBxhKQP-7QuVw0.mft
File:                     YP8z0k1DUETiNUBxhKQP-7QuVw0.mft (raw, json)
Hash identifier:          gPC7yL1RHGSJQo/zx7Of/iS8yqHByJEpYcrgXAqWULs=
Subject key identifier:   98:66:59:6C:24:C4:17:AD:22:30:8B:13:60:92:31:0B:A8:CE:B7:B9
Authority key identifier: 60:FF:33:D2:4D:43:50:44:E2:35:40:71:84:A4:0F:FB:B4:2E:57:0D
Certificate issuer:       /CN=60ff33d24d435044e235407184a40ffbb42e570d
Certificate serial:       0A014703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YP8z0k1DUETiNUBxhKQP-7QuVw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/b4da85-c363-4245-9244-38aa98431bef/1/YP8z0k1DUETiNUBxhKQP-7QuVw0.mft
Manifest number:          0822
Signing time:             Thu 10 Mar 2022 09:12:48 +0000
Manifest this update:     Thu 10 Mar 2022 09:12:48 +0000
Manifest next update:     Fri 11 Mar 2022 09:12:48 +0000
Files and hashes:         1: FMrH6ay96uLhGP2EE6DRQg3UABU.roa (hash: 8HkCg2uI+kNjnHfBhtBXGPe5n5rfdhGTD69oYoSqvlg=)
                          2: YP8z0k1DUETiNUBxhKQP-7QuVw0.crl (hash: +hW0YiD5lJXkQccO4y0I7gM8Jrohbh0U9xsFR7xdf2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167855875 (0xa014703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ff33d24d435044e235407184a40ffbb42e570d
        Validity
            Not Before: Mar 10 09:12:48 2022 GMT
            Not After : Mar 11 09:12:48 2022 GMT
        Subject: CN=9866596c24c417ad22308b136092310ba8ceb7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4f:90:00:90:52:99:31:68:66:a1:93:b6:28:
                    2e:55:ea:55:6d:9c:63:eb:d2:e4:fd:2c:cd:75:60:
                    2e:39:3f:e1:f1:5d:2e:f4:02:11:37:11:6a:18:5f:
                    c1:79:15:df:49:89:84:95:e9:cf:ce:09:97:5f:09:
                    46:c1:68:0a:31:ba:c8:59:5e:2d:1a:0a:67:32:02:
                    1d:13:e7:88:3f:a6:ff:13:f6:61:67:c2:45:59:62:
                    01:97:77:b7:70:b7:a1:ae:a2:6e:83:b5:56:0f:26:
                    38:5e:57:0a:90:dd:49:37:be:61:9e:86:0a:fe:5e:
                    2e:28:74:df:a2:26:e6:de:37:db:08:8f:46:45:2e:
                    be:f5:e5:6c:16:87:fe:58:6f:81:01:c6:08:29:a0:
                    a4:b8:06:d4:66:ae:94:c8:fd:20:75:47:34:22:b1:
                    0e:c2:6c:0a:37:82:9a:44:78:25:f6:94:f9:19:9a:
                    7d:10:05:d3:76:83:38:21:07:93:ca:a2:04:c1:eb:
                    57:9c:b6:c3:9e:6c:91:73:27:b4:3e:15:ca:d1:64:
                    92:3d:e2:28:4f:85:ea:c0:e1:dd:c5:57:8d:9d:96:
                    d4:a5:d7:b0:56:02:33:a6:21:53:49:5f:b7:ca:84:
                    f1:bc:e9:56:86:6b:7d:30:d1:53:b1:15:85:e4:b3:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:66:59:6C:24:C4:17:AD:22:30:8B:13:60:92:31:0B:A8:CE:B7:B9
            X509v3 Authority Key Identifier:
                keyid:60:FF:33:D2:4D:43:50:44:E2:35:40:71:84:A4:0F:FB:B4:2E:57:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP8z0k1DUETiNUBxhKQP-7QuVw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b4da85-c363-4245-9244-38aa98431bef/1/YP8z0k1DUETiNUBxhKQP-7QuVw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b4da85-c363-4245-9244-38aa98431bef/1/YP8z0k1DUETiNUBxhKQP-7QuVw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:a4:f6:19:e6:be:76:78:38:23:77:11:04:98:7c:24:64:
         d8:96:ec:38:11:84:f9:d9:0e:3d:b7:0d:5b:05:b9:4b:3c:e0:
         60:74:50:48:57:ff:45:3e:9a:e5:e7:35:a6:02:3b:15:5f:7b:
         9c:65:d1:9d:c1:f3:3e:b3:8a:e8:5e:e2:d9:5f:50:ab:f6:6b:
         85:53:ff:db:60:58:aa:1d:a8:3b:f8:a4:a8:8c:6a:f5:88:f1:
         8e:7c:0d:6c:eb:c1:20:94:fd:2c:90:71:b9:f7:cd:6c:c8:50:
         ee:c1:d8:b6:0a:63:6f:cd:db:84:23:78:5d:72:63:07:5d:94:
         16:08:72:32:ce:9b:d7:d9:d7:78:ea:b7:55:a1:53:df:18:77:
         25:10:7e:b4:fb:33:dd:52:ae:12:07:c0:c3:b0:36:96:0b:25:
         99:62:0b:7d:98:4a:68:05:cc:dd:86:90:86:f9:ba:1a:05:e0:
         a8:57:12:5e:67:0e:b3:8f:44:5d:4b:de:99:41:1b:c1:2f:14:
         57:0b:12:ab:b6:f5:df:63:b4:42:23:e1:78:d1:24:c7:e9:92:
         91:59:7e:7c:44:47:f5:39:e3:06:2b:c2:6a:e7:2c:64:5a:a5:
         a6:31:26:40:3f:68:05:1d:0b:72:16:52:aa:77:ca:36:98:34:
         99:8b:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----