Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f82332-919e-49fa-9743-b14e63bb134d/1/JWAWAOhFDM0epe4yTMghYOKQmI8.mft
File:                     JWAWAOhFDM0epe4yTMghYOKQmI8.mft (raw, json)
Hash identifier:          k/4TVMTbeMxBcuZtleRsfKrtbrEbWG81+xXpnaaHuq8=
Subject key identifier:   07:67:3D:98:C2:29:72:F4:02:B5:EC:1F:42:A9:2F:52:09:92:B5:E6
Authority key identifier: 25:60:16:00:E8:45:0C:CD:1E:A5:EE:32:4C:C8:21:60:E2:90:98:8F
Certificate issuer:       /CN=25601600e8450ccd1ea5ee324cc82160e290988f
Certificate serial:       0183EEFA080E771471EDB691CC9F7364A1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWAWAOhFDM0epe4yTMghYOKQmI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f82332-919e-49fa-9743-b14e63bb134d/1/JWAWAOhFDM0epe4yTMghYOKQmI8.mft
Manifest number:          0B21
Signing time:             Wed 19 Oct 2022 06:41:46 +0000
Manifest this update:     Wed 19 Oct 2022 06:41:46 +0000
Manifest next update:     Thu 20 Oct 2022 06:41:46 +0000
Files and hashes:         1: JWAWAOhFDM0epe4yTMghYOKQmI8.crl (hash: ITd9NM/X9tnBSXqrFfcO0iTkE0yaar5maU+rqjChNWw=)
                          2: vdpfAT8j4a6baqT50eXxBhk0Pp8.roa (hash: 5MGu/nttWhZrCrBFWtpfWwZ+W1aPAEBCQJ0SmpLgzzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ee:fa:08:0e:77:14:71:ed:b6:91:cc:9f:73:64:a1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25601600e8450ccd1ea5ee324cc82160e290988f
        Validity
            Not Before: Oct 19 06:41:46 2022 GMT
            Not After : Oct 20 06:41:46 2022 GMT
        Subject: CN=07673d98c22972f402b5ec1f42a92f520992b5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:06:f7:3e:c1:ed:53:37:8e:7b:2a:06:df:
                    2a:92:3f:5e:4f:33:9e:d6:d0:7e:70:7d:48:a5:bf:
                    5e:8a:1d:c8:4a:29:5c:46:d5:ac:b6:6f:7d:fe:3a:
                    be:ee:75:e9:e5:ce:95:db:5e:3d:93:58:f8:67:ec:
                    5f:78:b7:16:c3:b7:ac:57:7c:fd:70:31:53:d1:fa:
                    03:c6:1f:57:2e:33:fc:3f:1e:38:5d:6f:f6:de:71:
                    18:6c:4b:aa:f9:cb:5b:7d:58:38:e5:3e:29:cf:5d:
                    20:80:5c:9d:64:4e:be:b7:1e:c7:e1:cb:b4:fa:f8:
                    5f:e8:e6:0a:fa:07:c5:9e:41:7a:fa:13:c4:e6:12:
                    70:c7:4f:f7:e1:9e:7d:22:5a:e0:c2:7a:a0:03:f7:
                    96:e3:72:d7:62:5a:5f:3b:2a:00:66:c1:92:35:5a:
                    ce:f3:b9:f6:66:b9:93:4f:4d:7e:0a:86:a2:fe:3c:
                    ed:f6:89:ca:a9:81:00:84:e0:12:b5:cd:98:a3:96:
                    c7:ae:47:23:2f:f4:bb:78:e5:44:f4:92:c5:df:91:
                    7f:e7:3c:e5:2d:85:81:7d:d8:3e:bf:f5:7f:a6:4e:
                    1c:a4:18:15:c6:fa:8a:39:07:e7:66:86:5a:55:db:
                    d0:3e:1c:7e:d7:7d:3b:83:7e:24:05:96:ee:7d:98:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:3D:98:C2:29:72:F4:02:B5:EC:1F:42:A9:2F:52:09:92:B5:E6
            X509v3 Authority Key Identifier:
                keyid:25:60:16:00:E8:45:0C:CD:1E:A5:EE:32:4C:C8:21:60:E2:90:98:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWAWAOhFDM0epe4yTMghYOKQmI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f82332-919e-49fa-9743-b14e63bb134d/1/JWAWAOhFDM0epe4yTMghYOKQmI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f82332-919e-49fa-9743-b14e63bb134d/1/JWAWAOhFDM0epe4yTMghYOKQmI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:5c:c0:85:6d:22:ec:93:08:d2:26:7a:20:89:94:23:a4:5d:
         eb:50:4f:aa:ef:eb:26:f6:e3:96:f7:fc:86:22:d2:85:cd:26:
         6b:ba:f5:7a:7f:f4:95:24:2f:e7:65:48:72:ea:4e:0b:c4:7b:
         ac:40:6a:f7:cd:39:41:f8:f3:27:c0:6b:79:3f:ee:e5:f7:e8:
         b8:bf:c6:d2:2d:4a:7c:98:a3:02:44:46:70:9c:d4:5b:c2:1d:
         24:9a:23:71:1c:3c:6c:9e:1e:71:3e:a3:0e:68:15:ff:88:53:
         48:5e:eb:75:53:40:95:fe:b2:e7:71:47:0b:27:7c:22:a3:cb:
         c8:8f:37:16:be:2f:15:55:63:4f:36:d9:1e:51:82:3c:aa:b1:
         94:49:f2:51:90:34:c6:66:8a:fe:a8:6e:b2:8e:0c:d3:20:09:
         ce:ac:f4:48:53:0c:57:b7:6c:f5:d1:53:16:d2:b1:be:ac:bb:
         93:9b:5e:a2:05:01:11:0e:79:dc:b9:76:7d:cc:ef:cb:2d:e0:
         77:d7:bf:43:81:0f:fc:f2:5f:b6:e5:e1:2b:8e:0a:0a:a1:3b:
         a3:f9:b3:1d:eb:d6:8d:02:d8:ee:3d:fd:69:91:12:6a:51:be:
         e3:b7:75:00:32:ce:d5:a4:df:a3:02:2c:00:7c:74:fa:41:ae:
         e2:d3:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----