Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/042809-c5e8-45a1-9daf-e23d2446de2b/1/cxYQ81GTaft9M9MpKg7-j-aLmtk.mft
File:                     cxYQ81GTaft9M9MpKg7-j-aLmtk.mft (raw, json)
Hash identifier:          wYKuZ/fPPWPmUAtZNXj0XXHG2STLhPRUKDrU1+HpEjA=
Subject key identifier:   E1:43:F0:F8:E6:C7:98:E1:DA:2B:6F:6F:FD:44:E5:F3:B2:54:39:23
Authority key identifier: 73:16:10:F3:51:93:69:FB:7D:33:D3:29:2A:0E:FE:8F:E6:8B:9A:D9
Certificate issuer:       /CN=731610f3519369fb7d33d3292a0efe8fe68b9ad9
Certificate serial:       09358012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxYQ81GTaft9M9MpKg7-j-aLmtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/042809-c5e8-45a1-9daf-e23d2446de2b/1/cxYQ81GTaft9M9MpKg7-j-aLmtk.mft
Manifest number:          0953
Signing time:             Sun 15 May 2022 05:50:58 +0000
Manifest this update:     Sun 15 May 2022 05:50:58 +0000
Manifest next update:     Mon 16 May 2022 05:50:58 +0000
Files and hashes:         1: RQ19regy5D325qOkmV_MFgncW7M.roa (hash: hWnfMwqWroVCO49y9XCz/xTV5jMViPbor+6tRRW5cPY=)
                          2: cxYQ81GTaft9M9MpKg7-j-aLmtk.crl (hash: ZvSPO9mCkWB2wirY1XOl8hitrvkwAWYQqjDzqM4Dpmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154501138 (0x9358012)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731610f3519369fb7d33d3292a0efe8fe68b9ad9
        Validity
            Not Before: May 15 05:50:58 2022 GMT
            Not After : May 16 05:50:58 2022 GMT
        Subject: CN=e143f0f8e6c798e1da2b6f6ffd44e5f3b2543923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:10:14:34:b1:07:79:2d:9b:ba:bf:44:85:
                    c9:f3:58:ef:d4:6e:3d:a0:ea:95:72:58:2b:3f:ee:
                    47:a3:bd:ce:8b:c2:0e:2d:a0:6c:bc:2f:04:0f:72:
                    8d:17:26:a7:66:fa:00:a8:ca:c5:a2:55:ea:80:53:
                    68:c8:1a:9c:e3:43:4e:56:14:6a:2a:e5:38:29:ff:
                    c8:2a:e3:7d:c1:41:54:76:71:f0:83:77:4d:e8:c3:
                    8f:98:6c:38:67:6c:a2:b4:9f:f2:ec:ec:3a:54:94:
                    61:7e:1b:ea:5c:18:d3:a1:76:12:52:40:65:88:f5:
                    9b:01:55:f1:70:62:76:36:f7:1b:91:18:80:22:04:
                    94:e0:22:7d:76:94:b6:31:b7:a2:83:bb:e2:36:9f:
                    f2:20:ee:16:5b:94:6e:7e:9f:d3:0c:79:0d:4c:b9:
                    c2:c6:c0:e1:8e:cf:1b:17:c2:58:d4:e3:c5:3f:ec:
                    a4:e5:4c:3c:30:03:aa:2a:3d:bf:fe:21:0e:c5:22:
                    f2:d5:17:4d:64:61:3f:ca:2a:30:49:dd:98:8b:e4:
                    01:b9:f1:58:0c:4e:cf:16:84:cd:27:7e:9c:4e:74:
                    0b:9c:9c:e5:5a:50:01:46:07:dc:fb:80:5f:87:e0:
                    a7:48:1d:7b:69:b1:2e:6e:ce:63:9d:37:f7:7f:e7:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:43:F0:F8:E6:C7:98:E1:DA:2B:6F:6F:FD:44:E5:F3:B2:54:39:23
            X509v3 Authority Key Identifier:
                keyid:73:16:10:F3:51:93:69:FB:7D:33:D3:29:2A:0E:FE:8F:E6:8B:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxYQ81GTaft9M9MpKg7-j-aLmtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/042809-c5e8-45a1-9daf-e23d2446de2b/1/cxYQ81GTaft9M9MpKg7-j-aLmtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/042809-c5e8-45a1-9daf-e23d2446de2b/1/cxYQ81GTaft9M9MpKg7-j-aLmtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:03:99:56:7f:55:b5:da:59:7f:03:52:91:61:86:cb:e9:
         8a:1e:2c:9a:29:eb:00:80:e7:ab:97:17:86:c1:f4:99:f1:28:
         be:bd:a2:4c:36:83:6d:31:09:43:98:5a:12:b9:28:29:e1:ea:
         40:3c:c4:a1:3c:cd:ea:8a:11:50:17:ba:41:52:2d:b2:0d:3e:
         2f:ef:68:ff:8c:c2:5d:67:75:ed:13:90:81:5e:08:5e:31:e7:
         ac:a6:04:8b:0a:54:c4:d5:4a:ab:a0:8c:f6:cc:d9:67:47:6c:
         4c:53:a4:da:89:fb:a3:f8:02:d6:e6:ff:36:d6:e5:85:1b:ad:
         3b:00:dd:f9:4a:ec:33:06:ae:a4:30:bc:8c:5a:a1:bc:79:b6:
         bc:21:a7:a5:0c:44:81:48:cb:0a:5d:25:1f:c5:6a:4f:b0:00:
         e4:1b:71:79:c8:dd:ea:8b:cb:84:05:ab:c1:fa:1e:81:9e:9d:
         45:4e:08:ab:6e:89:6f:08:67:d1:ae:37:5b:7d:26:ab:7f:62:
         74:93:27:c8:47:ba:6a:12:05:b2:fc:2a:69:f1:97:77:a5:06:
         fa:30:03:f7:db:18:d0:e8:ea:9f:d2:a3:ee:88:3c:87:bb:42:
         2e:a5:fa:5b:11:24:12:a2:7b:8b:92:bc:22:db:cf:e7:7f:82:
         08:9e:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----