Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/97a25f-815e-4607-a5dd-36edf2c195dc/1/U4H7YcEgRmBHa9JpVKLoxVuiwsI.mft
File:                     U4H7YcEgRmBHa9JpVKLoxVuiwsI.mft (raw, json)
Hash identifier:          NwjEguFZY37ccFF/P9DPzQO1BhSCQhVMypNmQFsSPpA=
Subject key identifier:   9F:1E:56:E2:8B:CC:7C:6E:D2:62:A8:01:F7:1F:72:68:4B:B1:FA:CD
Authority key identifier: 53:81:FB:61:C1:20:46:60:47:6B:D2:69:54:A2:E8:C5:5B:A2:C2:C2
Certificate issuer:       /CN=5381fb61c1204660476bd26954a2e8c55ba2c2c2
Certificate serial:       079122E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4H7YcEgRmBHa9JpVKLoxVuiwsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/97a25f-815e-4607-a5dd-36edf2c195dc/1/U4H7YcEgRmBHa9JpVKLoxVuiwsI.mft
Manifest number:          08DE
Signing time:             Wed 06 Apr 2022 03:12:28 +0000
Manifest this update:     Wed 06 Apr 2022 03:12:28 +0000
Manifest next update:     Thu 07 Apr 2022 03:12:28 +0000
Files and hashes:         1: 13iX3qXVSAKJIi8XPxlYLojk49g.roa (hash: R9jwF/OXCBdYLVj9zVTxXZYAevy1gu3NWex+0EGM6UU=)
                          2: U4H7YcEgRmBHa9JpVKLoxVuiwsI.crl (hash: gNPUj/WSwEQNX/pVuhefHC8aRJCnz7GexQudJRpS1F8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126952166 (0x79122e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5381fb61c1204660476bd26954a2e8c55ba2c2c2
        Validity
            Not Before: Apr  6 03:12:28 2022 GMT
            Not After : Apr  7 03:12:28 2022 GMT
        Subject: CN=9f1e56e28bcc7c6ed262a801f71f72684bb1facd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:0a:a0:7d:fd:90:70:66:7a:d1:3f:9b:bd:
                    17:de:c7:bf:e1:1d:fa:e3:de:ef:2d:6d:87:8b:36:
                    0a:cc:fa:98:03:12:f7:2a:bd:a8:a0:31:b4:56:80:
                    a5:c2:00:24:ef:75:0f:2e:32:bc:cd:10:e6:69:7e:
                    25:5a:f4:fa:93:ec:2b:fd:f5:e7:45:cc:32:cf:d5:
                    46:3d:89:45:7a:fd:31:ee:c1:59:d7:45:25:de:27:
                    5d:36:b2:67:fe:17:1b:18:f0:e2:0b:ff:58:9f:7d:
                    75:5a:e7:1a:40:25:ce:13:04:26:3c:a5:22:b6:15:
                    80:ac:ca:fb:a6:4a:0b:a2:36:af:9e:29:c5:eb:3c:
                    81:c1:5c:0f:c2:8b:2c:77:0f:ed:26:42:5c:24:25:
                    f4:9c:3d:86:2d:97:ec:97:cd:0b:09:47:a2:47:47:
                    66:a8:e7:a0:f4:a1:ac:e4:f5:3a:29:92:a3:0d:29:
                    3b:b9:c0:c7:a1:3e:7c:c8:b1:8e:c0:bb:1c:0c:a6:
                    cf:16:5a:65:20:f8:03:97:d9:24:80:cc:f5:24:73:
                    9e:89:93:fd:88:34:36:29:12:21:94:24:f7:24:01:
                    92:e7:2d:77:97:32:4f:1e:9b:98:63:6d:5e:81:ad:
                    d5:81:c2:db:14:c3:5d:d6:e6:db:37:cd:ee:a7:9d:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:56:E2:8B:CC:7C:6E:D2:62:A8:01:F7:1F:72:68:4B:B1:FA:CD
            X509v3 Authority Key Identifier:
                keyid:53:81:FB:61:C1:20:46:60:47:6B:D2:69:54:A2:E8:C5:5B:A2:C2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4H7YcEgRmBHa9JpVKLoxVuiwsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/97a25f-815e-4607-a5dd-36edf2c195dc/1/U4H7YcEgRmBHa9JpVKLoxVuiwsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/97a25f-815e-4607-a5dd-36edf2c195dc/1/U4H7YcEgRmBHa9JpVKLoxVuiwsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:82:90:e8:ea:84:07:cf:be:9f:fa:57:f4:28:4a:cf:ee:
         c4:07:b6:0e:ab:91:ad:b9:1e:7b:22:31:0b:26:55:ee:6a:54:
         da:8d:84:0c:83:fc:f3:e3:07:ff:07:e2:b5:7c:3d:42:be:7e:
         af:c4:c6:c8:72:d6:44:59:b4:b6:9d:7d:d0:14:18:41:66:a6:
         19:78:15:d5:50:ea:f1:aa:28:d0:35:62:80:5b:84:fd:50:bd:
         b4:2c:0f:3a:f6:95:25:b8:3e:5f:96:c9:88:78:aa:24:ee:66:
         ac:07:1f:d6:ca:9d:8b:c2:8a:7d:c1:34:6f:cf:e8:be:d6:6e:
         db:80:71:58:40:86:30:08:43:dd:78:00:95:e9:7b:e8:c5:34:
         80:c5:6d:5d:ab:ee:ff:7a:78:b8:33:36:45:c4:6a:83:35:d1:
         3a:c8:c1:fa:6e:48:ca:b5:13:9f:44:8f:a5:7c:a1:7c:e5:0e:
         b0:3d:95:8b:a9:6f:f0:d6:c3:ec:d5:40:0d:3e:07:ae:76:8d:
         cf:21:49:25:50:c9:31:a8:80:d0:d9:e5:b3:46:8d:d9:35:01:
         69:39:8d:e5:19:fc:d4:ae:6d:1f:7e:4a:0e:d0:5a:fa:e1:df:
         62:99:28:ac:19:8a:50:64:a9:22:40:3e:39:1c:36:ce:a0:77:
         92:b6:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----