Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/053e2e-795f-434c-a623-900eace52766/1/15cqcr_Pm8EYBz_dfPtmC-hjsow.mft
File:                     15cqcr_Pm8EYBz_dfPtmC-hjsow.mft (raw, json)
Hash identifier:          p+53BX59zSrub9sR45GXOkmSJ/6BFs6ExW9UbPiR+r8=
Subject key identifier:   23:8E:C6:A0:99:99:2D:77:A3:79:03:57:A9:9D:30:91:51:80:36:B6
Authority key identifier: D7:97:2A:72:BF:CF:9B:C1:18:07:3F:DD:7C:FB:66:0B:E8:63:B2:8C
Certificate issuer:       /CN=d7972a72bfcf9bc118073fdd7cfb660be863b28c
Certificate serial:       01853F285F567665523F8FC1777FCAEC9EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15cqcr_Pm8EYBz_dfPtmC-hjsow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/053e2e-795f-434c-a623-900eace52766/1/15cqcr_Pm8EYBz_dfPtmC-hjsow.mft
Manifest number:          0581
Signing time:             Fri 23 Dec 2022 13:24:48 +0000
Manifest this update:     Fri 23 Dec 2022 13:24:48 +0000
Manifest next update:     Sat 24 Dec 2022 13:24:48 +0000
Files and hashes:         1: 15cqcr_Pm8EYBz_dfPtmC-hjsow.crl (hash: M6ikWok0bti8CfOw8jvs+UVixjGk+G5FK7I6rjP18LE=)
                          2: HgM5c1js_3jy0QpxHnuk2HeeSEU.roa (hash: N/CH3LLIBgXqb84K5nC4HDEN2UGbROR6rdBCVhoaCRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3f:28:5f:56:76:65:52:3f:8f:c1:77:7f:ca:ec:9e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7972a72bfcf9bc118073fdd7cfb660be863b28c
        Validity
            Not Before: Dec 23 13:24:48 2022 GMT
            Not After : Dec 24 13:24:48 2022 GMT
        Subject: CN=238ec6a099992d77a3790357a99d3091518036b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:50:0d:cf:e6:bc:4b:fa:8d:7d:f5:c0:52:e0:
                    ab:22:47:79:c5:17:81:71:ab:fd:51:91:15:71:d5:
                    a7:ff:32:02:59:ca:1c:7f:e2:8c:b5:24:d7:71:56:
                    03:77:ad:70:8e:f5:be:8e:22:e7:a9:59:4d:4e:23:
                    f5:21:46:95:06:05:df:f7:a2:8f:d4:96:17:bc:3e:
                    b2:55:30:1d:b5:e2:64:02:4c:ed:af:c9:1d:df:e2:
                    e5:1e:d2:61:da:0b:85:9e:2b:b8:48:55:7e:52:f2:
                    26:01:58:72:53:ea:79:14:f0:0b:12:a2:f9:41:c0:
                    15:d6:09:ea:99:f0:c0:68:de:4f:5f:aa:1e:af:e9:
                    9d:72:cb:19:91:13:37:fd:e9:ca:69:cc:53:4f:29:
                    aa:65:dd:27:95:58:72:e4:30:9e:11:c5:db:c3:77:
                    70:2b:83:65:30:6e:00:6b:0c:6a:08:3c:70:a6:36:
                    a8:73:bb:a7:df:c6:5e:23:31:35:c9:64:81:83:27:
                    54:a1:95:67:b8:f5:92:9a:c2:51:b1:28:43:29:e5:
                    15:79:66:3c:ea:28:92:52:f8:16:d6:16:28:39:05:
                    17:44:7e:95:34:d0:c7:a6:6f:0d:fc:e3:c1:3f:5c:
                    2f:ff:a9:c1:b6:b3:bf:b5:8f:10:17:0a:91:1c:32:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:C6:A0:99:99:2D:77:A3:79:03:57:A9:9D:30:91:51:80:36:B6
            X509v3 Authority Key Identifier:
                keyid:D7:97:2A:72:BF:CF:9B:C1:18:07:3F:DD:7C:FB:66:0B:E8:63:B2:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15cqcr_Pm8EYBz_dfPtmC-hjsow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/053e2e-795f-434c-a623-900eace52766/1/15cqcr_Pm8EYBz_dfPtmC-hjsow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/053e2e-795f-434c-a623-900eace52766/1/15cqcr_Pm8EYBz_dfPtmC-hjsow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:34:aa:7e:47:5d:10:44:5c:91:d1:93:fc:3d:48:3b:0c:10:
         12:36:2c:4c:55:d3:97:28:fa:33:c9:2d:90:da:44:f1:3a:14:
         a9:ed:a7:e4:60:a3:ca:ad:d2:ea:d3:d2:06:41:7d:78:e0:a2:
         84:2b:bd:0d:dc:c4:6d:3d:50:54:45:1a:f1:98:5e:95:f5:fa:
         73:94:90:40:13:7e:d0:fd:ff:15:33:99:67:66:0a:02:ad:73:
         18:f9:ae:35:9a:e8:9c:56:50:51:27:a0:de:06:be:cb:7e:a0:
         5a:83:80:a0:86:17:6f:8b:84:94:69:7a:3a:6b:9c:54:85:63:
         1e:e4:05:10:f0:b3:6e:e5:33:55:6e:dd:d4:71:86:9b:68:a3:
         7c:2a:47:25:43:66:34:94:83:e1:ea:96:42:30:fb:18:71:67:
         a5:60:a1:67:4f:2a:95:34:1a:23:50:1f:74:40:22:94:7b:5a:
         1f:66:2a:f1:f1:b8:b6:ae:d3:45:1d:40:e3:41:20:a6:c8:62:
         2e:ba:b3:55:27:35:95:05:5e:ff:e5:00:2e:37:23:f6:ac:d3:
         3d:6f:bc:c9:c9:22:27:48:7a:36:7d:5b:fc:90:5f:31:88:2c:
         81:8b:be:3b:16:c2:12:3f:63:86:ec:86:6e:c1:c7:bf:e9:6e:
         6a:78:0f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----