Manifest

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IOUcOeBGM_Tb4dwfvswY4bnNZYY.mft
File:                     IOUcOeBGM_Tb4dwfvswY4bnNZYY.mft (raw, json)
Hash identifier:          XNX7/jRUJsZ3eOl4Fwp5ghxGc6Bhs4WgpLde0h8iZ1g=
Subject key identifier:   ED:79:67:59:2F:E0:AF:4C:2D:66:DD:DD:61:DB:9D:B4:6B:E7:8B:48
Authority key identifier: 20:E5:1C:39:E0:46:33:F4:DB:E1:DC:1F:BE:CC:18:E1:B9:CD:65:86
Certificate issuer:       /CN=20E51C39E04633F4DBE1DC1FBECC18E1B9CD6586
Certificate serial:       173B
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/IOUcOeBGM_Tb4dwfvswY4bnNZYY.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IOUcOeBGM_Tb4dwfvswY4bnNZYY.mft
Manifest number:          173B
Signing time:             Mon 03 Oct 2022 20:26:08 +0000
Manifest this update:     Mon 03 Oct 2022 20:26:08 +0000
Manifest next update:     Tue 04 Oct 2022 02:26:08 +0000
Files and hashes:         1: IOUcOeBGM_Tb4dwfvswY4bnNZYY.crl (hash: T7NrJ3FgZd0YLkDQQjNvWWECF7sU/21OgrmSbI5NWIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5947 (0x173b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E51C39E04633F4DBE1DC1FBECC18E1B9CD6586
        Validity
            Not Before: Oct  3 20:26:08 2022 GMT
            Not After : Oct  1 01:01:02 2023 GMT
        Subject: CN=ED7967592FE0AF4C2D66DDDD61DB9DB46BE78B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:20:26:b0:ae:75:7a:48:65:62:71:df:79:
                    39:31:34:02:c9:2a:28:89:5a:56:0f:2d:d4:fb:7f:
                    55:44:43:eb:73:94:73:15:ca:15:ee:f7:de:5d:4c:
                    84:b2:64:af:d5:77:7d:f4:62:99:77:c7:90:29:6c:
                    70:d0:46:1b:9f:e3:bb:59:8f:cd:7a:ce:4d:da:25:
                    2a:47:a4:e8:63:62:09:aa:63:d1:ea:cf:5d:d2:6b:
                    77:8b:14:0c:a9:ee:f7:88:c9:e2:8f:e1:94:eb:ee:
                    fa:a7:33:cb:b9:2d:e4:c3:a3:64:96:91:8c:c4:46:
                    ef:12:be:64:92:28:47:80:f6:db:0b:68:0b:07:91:
                    17:75:af:5d:a2:d4:58:f4:8b:10:cc:49:07:d1:bc:
                    c1:51:86:14:0b:5b:4d:68:9a:d7:c0:ef:62:92:56:
                    e0:b4:da:61:1a:85:0e:7a:d7:0d:f7:01:23:08:6a:
                    b4:ae:44:f4:1f:ca:13:8e:d5:d0:cb:81:21:14:04:
                    f1:0b:c5:8b:ea:d7:f5:13:5f:13:01:aa:95:72:85:
                    fe:e0:4f:05:dc:60:f9:e6:5f:de:c1:5b:3b:dd:fe:
                    83:c9:c9:0c:b8:13:1e:07:d2:39:42:dc:b3:2b:d6:
                    42:b4:9a:8f:83:c5:eb:09:c2:15:52:1a:06:d6:da:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:67:59:2F:E0:AF:4C:2D:66:DD:DD:61:DB:9D:B4:6B:E7:8B:48
            X509v3 Authority Key Identifier:
                keyid:20:E5:1C:39:E0:46:33:F4:DB:E1:DC:1F:BE:CC:18:E1:B9:CD:65:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IOUcOeBGM_Tb4dwfvswY4bnNZYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/IOUcOeBGM_Tb4dwfvswY4bnNZYY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IOUcOeBGM_Tb4dwfvswY4bnNZYY.mft
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:71:80:90:b9:74:13:ee:e9:2b:5b:e9:9d:41:85:dc:65:
         ce:81:29:b0:dc:a2:be:31:ef:3c:72:85:75:21:a4:a0:59:2b:
         5e:5e:67:03:d5:10:03:0a:79:52:4b:72:56:27:cd:e0:f3:8b:
         61:02:81:3d:a0:c7:b8:ae:dc:e3:97:97:61:19:ad:70:92:21:
         9f:4f:0f:87:38:60:1e:4b:dd:7b:f2:77:40:57:85:33:e0:08:
         61:cd:c2:62:b6:b2:57:e6:ca:c9:55:96:42:fa:43:2b:7b:98:
         8d:1b:41:8d:ae:ee:f3:e1:45:e0:71:43:54:7e:52:ec:e4:e0:
         34:ae:48:5c:a4:96:df:ef:2d:93:2f:53:93:b8:c6:79:50:dd:
         b3:12:f2:d3:99:d7:ef:b2:fd:f6:75:af:1d:64:68:e4:11:d0:
         54:a9:33:4a:58:f1:2b:d4:41:f1:66:8e:3f:a5:28:50:46:cd:
         82:d5:79:8d:07:75:c1:74:1f:2f:7a:6f:c8:2f:ac:4b:01:8b:
         d0:8f:60:95:d1:46:09:72:d2:8d:7c:16:d9:37:17:04:5b:73:
         5d:29:4c:5c:75:8c:48:b5:76:4a:ba:4f:9e:87:e0:78:6c:81:
         1d:fc:09:68:09:2e:aa:eb:ce:1a:44:a4:d3:4d:86:a1:70:6e:
         6e:a0:ef:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----