Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/785bb0-089f-40b3-aec1-12382330845c/1/1rYITL3694na0LJLbDfuP2raqu0.mft
File:                     1rYITL3694na0LJLbDfuP2raqu0.mft (raw, json)
Hash identifier:          u0FwiO2UnLpdOW0O0PYri0LKPeLOsTMcZqTgVQP0Eno=
Subject key identifier:   40:BD:58:C5:10:EF:DC:53:C9:C4:3D:0F:D9:CF:97:AA:86:BF:EF:4C
Authority key identifier: D6:B6:08:4C:BD:FA:F7:89:DA:D0:B2:4B:6C:37:EE:3F:6A:DA:AA:ED
Certificate issuer:       /CN=d6b6084cbdfaf789dad0b24b6c37ee3f6adaaaed
Certificate serial:       03771F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1rYITL3694na0LJLbDfuP2raqu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/785bb0-089f-40b3-aec1-12382330845c/1/1rYITL3694na0LJLbDfuP2raqu0.mft
Manifest number:          0496
Signing time:             Wed 30 Mar 2022 00:50:19 +0000
Manifest this update:     Wed 30 Mar 2022 00:50:19 +0000
Manifest next update:     Thu 31 Mar 2022 00:50:19 +0000
Files and hashes:         1: 1rYITL3694na0LJLbDfuP2raqu0.crl (hash: KexAHNDNkQdRvp5zhxKvMcmKwivg3zFa+2E50Cs59Yc=)
                          2: QejGmKr4RrP_fYukYo_T6iZKlBE.roa (hash: GRmg/Ar6U8+BFT77cojgTlMMykOKIR9tPgmlq6ylLsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58138458 (0x3771f5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b6084cbdfaf789dad0b24b6c37ee3f6adaaaed
        Validity
            Not Before: Mar 30 00:50:19 2022 GMT
            Not After : Mar 31 00:50:19 2022 GMT
        Subject: CN=40bd58c510efdc53c9c43d0fd9cf97aa86bfef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:90:b8:7f:76:9c:26:dc:44:e5:0f:1a:88:
                    9e:d0:f4:89:95:99:47:4a:b0:56:ee:10:b6:25:aa:
                    c3:31:30:fd:2d:90:8c:eb:37:5d:f4:8b:50:c1:0d:
                    08:87:28:49:b8:26:9f:24:a8:79:c9:2f:d9:41:98:
                    3b:ff:db:92:b0:74:04:ff:5d:e6:4c:03:0d:f4:c5:
                    c4:c7:0f:30:3f:50:70:b7:ff:f7:2b:ce:8f:89:fc:
                    c3:8c:e5:6f:40:69:73:46:18:14:46:c7:e0:33:ed:
                    91:f3:6d:1c:cb:5a:b2:bb:52:4f:aa:b4:56:9a:f2:
                    04:79:a0:41:38:24:4d:66:7e:7d:0d:3b:cd:f9:8c:
                    c4:f1:6b:99:48:54:f3:2b:88:ab:db:52:60:46:c0:
                    17:60:21:47:30:cf:70:5e:09:7f:25:3f:8d:ef:fa:
                    c4:c7:a0:81:8c:89:bf:c8:fd:bb:e3:c0:d3:9e:b9:
                    d0:21:bf:29:f9:e2:55:47:e4:89:bb:46:7d:91:ae:
                    3f:ad:24:3a:17:50:61:be:a1:39:3c:5e:6e:d4:37:
                    58:69:7c:e0:26:2e:7c:b0:dd:5c:f8:49:7c:7f:fa:
                    49:8a:eb:b5:8b:80:b2:65:db:ce:8e:43:10:8a:11:
                    1d:92:0b:04:ae:f9:0f:51:d0:fc:e8:d8:12:37:27:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BD:58:C5:10:EF:DC:53:C9:C4:3D:0F:D9:CF:97:AA:86:BF:EF:4C
            X509v3 Authority Key Identifier:
                keyid:D6:B6:08:4C:BD:FA:F7:89:DA:D0:B2:4B:6C:37:EE:3F:6A:DA:AA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rYITL3694na0LJLbDfuP2raqu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/785bb0-089f-40b3-aec1-12382330845c/1/1rYITL3694na0LJLbDfuP2raqu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/785bb0-089f-40b3-aec1-12382330845c/1/1rYITL3694na0LJLbDfuP2raqu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7c:9a:f7:e0:e5:b2:c1:1e:34:2c:b8:37:21:4b:3f:9d:72:
         0b:2d:f4:2a:84:46:09:16:80:d1:2c:05:0f:1c:c5:2f:b6:07:
         f0:25:cc:6d:b4:b2:51:2b:5d:bf:68:ec:b7:f2:51:c7:f9:e5:
         08:b2:1a:8c:82:14:46:d9:e8:73:3a:ea:cb:1e:12:43:b7:66:
         ca:ae:7f:c0:c6:49:a4:9e:52:22:0f:f2:d1:e5:55:46:76:73:
         71:2a:90:dc:8e:eb:3a:48:2f:ab:c5:03:37:9f:e1:31:fe:38:
         5f:85:75:ed:87:2b:ec:e0:4e:9b:c4:c4:c1:ff:c8:50:5f:e3:
         e5:85:1d:ab:1b:8a:13:62:d3:6c:e0:6b:97:88:bf:fc:00:c5:
         52:63:09:f0:ce:28:10:7d:31:6f:16:90:7c:f9:94:fb:06:04:
         de:6e:e5:c6:15:8b:81:c6:3d:97:f7:89:b0:c3:7d:85:48:74:
         be:35:67:d0:f0:2b:9f:fc:af:fc:e0:3b:53:c3:e7:3d:bd:28:
         39:72:ac:ae:af:51:e5:bd:8c:33:ad:e8:9b:12:f9:12:bc:7a:
         2a:a8:e6:93:10:20:08:3e:5c:21:3f:93:ce:30:f1:74:78:7d:
         72:41:ed:28:67:b6:48:b9:e3:a2:ae:35:73:2f:da:da:4b:a5:
         13:5f:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----