Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/491559-84b8-45b9-be83-35189d44df80/1/52KY78lQrypGHNjce-5QBrqi_Yw.mft
File:                     52KY78lQrypGHNjce-5QBrqi_Yw.mft (raw, json)
Hash identifier:          xz0Z6WCBtsWG9wwkvvPgizCvIA/CwnN/0DL9JA9U6Do=
Subject key identifier:   64:4E:B8:11:EC:94:42:C9:25:DC:F2:74:8E:88:CA:6D:AD:61:BE:20
Authority key identifier: E7:62:98:EF:C9:50:AF:2A:46:1C:D8:DC:7B:EE:50:06:BA:A2:FD:8C
Certificate issuer:       /CN=e76298efc950af2a461cd8dc7bee5006baa2fd8c
Certificate serial:       018417BF780BF8453C2324678EDF412E6E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52KY78lQrypGHNjce-5QBrqi_Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/491559-84b8-45b9-be83-35189d44df80/1/52KY78lQrypGHNjce-5QBrqi_Yw.mft
Manifest number:          0319
Signing time:             Thu 27 Oct 2022 04:42:14 +0000
Manifest this update:     Thu 27 Oct 2022 04:42:14 +0000
Manifest next update:     Fri 28 Oct 2022 04:42:14 +0000
Files and hashes:         1: 52KY78lQrypGHNjce-5QBrqi_Yw.crl (hash: yHWooW7UbyD8XcxKmjaprP9mbqfsWrxqY1/z3Dk2Jus=)
                          2: CFE4z1MJ29GumKJH7_T2IYDN7As.roa (hash: QckSYK6sgTcED4XMqEbXEflFGES3bKpYOBn37W6O6vc=)
                          3: XdPJjJlvrFdhKJY0CJ7wlnaSchU.roa (hash: wN3nRguA7lW/f2I2ALfQXsIM1oqk0hdNPMeEkCEeV6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:17:bf:78:0b:f8:45:3c:23:24:67:8e:df:41:2e:6e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76298efc950af2a461cd8dc7bee5006baa2fd8c
        Validity
            Not Before: Oct 27 04:42:14 2022 GMT
            Not After : Oct 28 04:42:14 2022 GMT
        Subject: CN=644eb811ec9442c925dcf2748e88ca6dad61be20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:65:e7:32:e8:2d:20:a1:31:37:eb:15:a0:
                    d2:b5:c2:7f:7b:49:39:09:b5:4d:a3:d7:64:bb:ec:
                    5d:c5:39:ff:b0:f4:a2:76:63:2e:6a:44:b7:d2:11:
                    5b:05:16:c0:12:4e:e9:30:fd:1b:93:38:b0:66:8c:
                    12:c3:2e:44:bb:ce:ee:98:89:ce:f1:d2:bd:5e:43:
                    1d:4b:78:76:76:d6:ed:8e:5b:e4:21:ab:da:e6:3f:
                    30:14:f2:eb:e2:d1:16:aa:ce:93:04:cf:c8:76:c0:
                    f4:2d:1c:d4:17:cf:30:88:a4:6e:be:da:1c:6a:b3:
                    13:b9:c9:f2:7e:9e:18:d4:13:89:67:cb:d2:09:d3:
                    ae:18:e1:85:cf:7e:ec:88:1c:dd:57:ed:0d:bb:8f:
                    e5:e3:9c:57:28:1c:89:ce:c6:2f:cd:85:4e:ec:73:
                    06:b4:32:d7:07:65:02:40:9e:29:dc:15:ac:bc:e4:
                    91:ca:38:c8:a2:84:03:4d:67:97:ef:8e:22:60:90:
                    d6:aa:43:d0:49:60:ee:0b:cb:ee:ff:c4:fd:d5:dd:
                    91:f3:12:72:ee:33:44:45:ca:5b:9d:cc:0a:b2:01:
                    e2:74:ea:73:52:76:a8:80:72:8a:b9:ad:d8:c2:f2:
                    4a:54:e1:e5:80:68:48:00:c8:72:21:21:6b:2d:f5:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:B8:11:EC:94:42:C9:25:DC:F2:74:8E:88:CA:6D:AD:61:BE:20
            X509v3 Authority Key Identifier:
                keyid:E7:62:98:EF:C9:50:AF:2A:46:1C:D8:DC:7B:EE:50:06:BA:A2:FD:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52KY78lQrypGHNjce-5QBrqi_Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/491559-84b8-45b9-be83-35189d44df80/1/52KY78lQrypGHNjce-5QBrqi_Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/491559-84b8-45b9-be83-35189d44df80/1/52KY78lQrypGHNjce-5QBrqi_Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:95:19:5f:be:c0:82:e0:73:0a:80:05:c3:54:1d:78:62:
         64:c5:26:74:4c:2a:9e:9e:de:56:09:79:38:69:7b:43:58:41:
         99:ea:3c:bd:65:bf:69:87:51:c7:d0:ca:2d:b2:3d:13:e9:39:
         b1:42:6f:35:7f:47:9f:06:2e:66:02:f9:4c:85:89:b3:35:c5:
         28:95:9d:38:23:55:41:86:23:aa:81:24:86:5d:e1:e8:2f:a9:
         b0:04:04:a7:2d:c7:f3:d7:b8:6f:3f:b9:32:2b:7d:3f:cb:a9:
         5c:3f:94:b7:a4:64:a2:ac:07:26:cd:16:ae:25:06:f1:ca:76:
         e7:ea:f4:c5:47:49:47:b9:aa:5d:a5:0d:e8:32:f9:54:9a:7a:
         27:6c:6a:6c:4e:ed:c7:94:85:c1:eb:2d:fc:48:ca:84:0e:86:
         98:ad:d8:06:03:c0:a6:ea:84:a3:48:48:3a:14:b3:15:0c:7c:
         a7:c0:fc:7f:13:98:91:5f:b0:94:71:51:0e:c6:72:cd:c6:03:
         6a:47:7c:57:97:99:fe:a5:23:39:76:a4:89:97:7f:2d:75:04:
         da:10:d6:eb:54:9e:f8:1c:5c:ea:ce:f7:5f:09:71:27:15:e9:
         00:58:a9:38:df:21:08:1d:99:06:67:6d:6d:9b:a9:5c:f5:5a:
         b3:5b:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----