Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/220d7c-a691-44b8-86f8-7c36019189c4/1/SNEf5MGJhDE3enISqL3ZVmAbdZw.mft
File:                     SNEf5MGJhDE3enISqL3ZVmAbdZw.mft (raw, json)
Hash identifier:          JX4ljOfrAM02eKWlLXm+lvrZSmCiYaOEfSuPGFTdw8c=
Subject key identifier:   C2:D6:F9:77:7F:65:C9:B2:BC:EC:AC:FF:5E:D7:BA:24:CF:A1:82:6B
Authority key identifier: 48:D1:1F:E4:C1:89:84:31:37:7A:72:12:A8:BD:D9:56:60:1B:75:9C
Certificate issuer:       /CN=48d11fe4c1898431377a7212a8bdd956601b759c
Certificate serial:       187BC392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SNEf5MGJhDE3enISqL3ZVmAbdZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/220d7c-a691-44b8-86f8-7c36019189c4/1/SNEf5MGJhDE3enISqL3ZVmAbdZw.mft
Manifest number:          07F1
Signing time:             Mon 21 Feb 2022 11:16:37 +0000
Manifest this update:     Mon 21 Feb 2022 11:16:37 +0000
Manifest next update:     Tue 22 Feb 2022 11:16:37 +0000
Files and hashes:         1: SNEf5MGJhDE3enISqL3ZVmAbdZw.crl (hash: OBHji08oVQK8/Ssppk92tgZ3ju9VF2yI8HEXUM2AkEQ=)
                          2: uQI_FJ9tEjjr9hCL_XlwDw649b4.roa (hash: 1duMFwX+zKlNPJEL02cljLqkT8QMbXoKVBZ3xIew2Jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410764178 (0x187bc392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48d11fe4c1898431377a7212a8bdd956601b759c
        Validity
            Not Before: Feb 21 11:16:37 2022 GMT
            Not After : Feb 22 11:16:37 2022 GMT
        Subject: CN=c2d6f9777f65c9b2bcecacff5ed7ba24cfa1826b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:03:17:24:77:32:91:9c:fa:8a:a2:32:91:
                    2e:10:de:20:05:df:59:43:0a:ae:b9:df:fe:c4:8f:
                    81:47:94:22:d5:d3:a6:b6:7c:28:40:63:b0:31:f5:
                    4f:fe:50:f9:d2:27:d1:6e:c3:72:44:d1:82:a8:75:
                    7d:7e:5e:2e:11:ec:dd:2c:92:3f:e4:02:c0:e2:d2:
                    8e:84:eb:a9:6d:8c:ac:b8:58:5f:a9:60:c0:4e:34:
                    fb:21:c0:94:13:ae:4c:48:ed:da:95:bb:40:45:d2:
                    d6:d2:ff:c0:1e:51:d4:8e:0e:03:c2:31:8f:36:7e:
                    c3:89:19:f8:96:e6:4c:7a:ce:6c:97:61:6b:27:6a:
                    38:d3:8c:2e:ae:00:cd:c3:7d:0d:8a:79:c7:74:70:
                    2b:c1:1c:b5:db:ab:a2:15:1c:bd:80:f0:fb:9b:81:
                    cf:23:41:b6:04:40:b5:84:92:fb:ba:5a:f6:0b:ce:
                    58:96:33:3d:8c:85:92:85:7e:d0:d1:99:0d:d3:66:
                    83:aa:df:64:23:e5:80:14:e7:c1:bc:46:f4:5d:21:
                    c2:ef:ed:53:ce:4a:f2:ec:a7:92:66:77:61:e6:de:
                    b6:29:f7:7e:8e:ea:b2:c1:14:55:b1:9a:8b:c2:4c:
                    e4:bf:50:7d:0a:c7:a5:e7:9f:27:29:ea:d1:3e:9e:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D6:F9:77:7F:65:C9:B2:BC:EC:AC:FF:5E:D7:BA:24:CF:A1:82:6B
            X509v3 Authority Key Identifier:
                keyid:48:D1:1F:E4:C1:89:84:31:37:7A:72:12:A8:BD:D9:56:60:1B:75:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SNEf5MGJhDE3enISqL3ZVmAbdZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/220d7c-a691-44b8-86f8-7c36019189c4/1/SNEf5MGJhDE3enISqL3ZVmAbdZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/220d7c-a691-44b8-86f8-7c36019189c4/1/SNEf5MGJhDE3enISqL3ZVmAbdZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:25:45:74:99:33:19:2f:72:d1:71:b1:87:ed:09:e8:c9:
         e7:b5:0e:c9:c0:b1:d5:64:6b:c7:9c:9f:ab:86:84:67:c8:52:
         df:a8:0d:c6:2c:5c:94:bd:7e:89:9b:18:55:ae:fa:d5:79:b9:
         83:c5:b9:21:a7:21:b5:3d:a9:6d:71:4d:55:a2:47:7e:e3:9d:
         5e:1e:56:37:0e:68:53:59:51:31:eb:ed:57:de:70:7b:9a:a9:
         6b:bd:be:56:b1:27:7f:8c:2c:fd:f3:55:fd:2c:cc:0c:cb:d2:
         a8:01:2a:d9:3f:f4:7a:b2:b2:8c:a8:d2:2c:0e:57:1a:ba:df:
         e8:87:68:ed:61:b7:8f:7f:63:05:52:ae:18:31:c6:bd:17:7f:
         44:fa:a0:d9:58:4f:e2:eb:60:99:96:91:fd:54:c4:89:99:14:
         8d:e9:fc:3b:32:ea:7b:70:91:a2:0d:20:a6:8a:d9:39:a0:5c:
         29:da:37:0b:15:e5:fc:c1:68:ff:eb:14:9a:56:13:14:d8:5b:
         73:07:44:55:75:73:c1:a2:7d:58:ce:b0:0b:c9:ad:5c:52:0d:
         64:0a:f8:fa:13:fe:f1:2d:4b:7c:9c:a6:1c:95:42:b9:2a:a2:
         81:56:f0:c4:62:ce:2f:5e:0a:fd:73:0a:5c:f8:ca:68:e8:c6:
         61:e6:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----