Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/78cec4-4d13-4e9d-b6b9-4afce0c9ab7a/1/75DTc_o8iHdhomnS3Ox7jyyxfto.mft
File:                     75DTc_o8iHdhomnS3Ox7jyyxfto.mft (raw, json)
Hash identifier:          fQ0l+hq/pJ3eASpf/FEhxo7+DhhDyXuj+1I43J7IDS8=
Subject key identifier:   B3:AE:06:B4:96:3B:E1:73:69:A0:60:38:BF:6D:A1:28:96:7B:C9:19
Authority key identifier: EF:90:D3:73:FA:3C:88:77:61:A2:69:D2:DC:EC:7B:8F:2C:B1:7E:DA
Certificate issuer:       /CN=ef90d373fa3c887761a269d2dcec7b8f2cb17eda
Certificate serial:       0182E742FF0A797E3615610BE63E65D61355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75DTc_o8iHdhomnS3Ox7jyyxfto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/78cec4-4d13-4e9d-b6b9-4afce0c9ab7a/1/75DTc_o8iHdhomnS3Ox7jyyxfto.mft
Manifest number:          0A8A
Signing time:             Mon 29 Aug 2022 01:41:43 +0000
Manifest this update:     Mon 29 Aug 2022 01:41:43 +0000
Manifest next update:     Tue 30 Aug 2022 01:41:43 +0000
Files and hashes:         1: 1ydrJItQYqaCePK0v5WmC2iFgrc.roa (hash: rZm0BXHFwE7QC0TIRPBftB/YI+zBCeCjrTZN2Jx+KsM=)
                          2: 75DTc_o8iHdhomnS3Ox7jyyxfto.crl (hash: Fol5I9WW2ae4mykvKCPosfLGrwwVqJd49ftMXYc2K78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e7:42:ff:0a:79:7e:36:15:61:0b:e6:3e:65:d6:13:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef90d373fa3c887761a269d2dcec7b8f2cb17eda
        Validity
            Not Before: Aug 29 01:41:43 2022 GMT
            Not After : Aug 30 01:41:43 2022 GMT
        Subject: CN=b3ae06b4963be17369a06038bf6da128967bc919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7e:ac:9a:89:79:4c:2a:2f:fb:50:5c:2f:58:
                    a1:7f:fe:5c:0d:96:c2:44:00:86:96:e7:cf:07:5e:
                    2f:04:27:1f:b2:54:7c:25:ea:31:cd:fd:d3:e9:4c:
                    f2:a9:36:81:e4:20:f0:54:62:7e:17:1b:40:ae:8d:
                    e0:6a:91:4f:c9:12:79:a7:a6:56:a8:42:b6:ad:00:
                    fd:11:0f:b4:51:a8:45:5f:41:eb:39:17:b6:ce:c3:
                    0d:6b:6e:de:fc:68:ca:3a:45:43:f3:ea:b7:47:04:
                    20:7e:e9:11:a3:aa:3d:3c:1d:9d:71:8b:46:2a:a0:
                    db:84:2c:47:7d:b3:97:7c:01:ba:f0:c8:8d:e3:bc:
                    41:5d:52:d6:77:be:ea:a8:b3:8d:09:3c:c3:0f:23:
                    f2:08:b1:7a:b5:e2:f8:9f:5d:70:93:ea:30:f9:8c:
                    0b:85:7c:6a:79:bf:45:98:c6:23:6a:5b:17:38:1f:
                    36:52:a4:71:bd:ef:4b:d2:a4:58:64:0c:c3:16:df:
                    3f:45:5c:76:5a:87:e3:87:6a:7f:69:a2:c8:4b:7f:
                    f1:4f:31:59:f6:44:35:60:8f:d3:a9:2f:76:c1:f5:
                    ad:b1:46:27:c9:ea:65:d0:af:0e:6b:fc:71:2a:b7:
                    60:54:b1:4f:38:2b:48:b6:07:b7:23:35:0f:e5:de:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AE:06:B4:96:3B:E1:73:69:A0:60:38:BF:6D:A1:28:96:7B:C9:19
            X509v3 Authority Key Identifier:
                keyid:EF:90:D3:73:FA:3C:88:77:61:A2:69:D2:DC:EC:7B:8F:2C:B1:7E:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75DTc_o8iHdhomnS3Ox7jyyxfto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/78cec4-4d13-4e9d-b6b9-4afce0c9ab7a/1/75DTc_o8iHdhomnS3Ox7jyyxfto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/78cec4-4d13-4e9d-b6b9-4afce0c9ab7a/1/75DTc_o8iHdhomnS3Ox7jyyxfto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8b:68:e0:d4:03:e1:49:3a:58:e6:3d:48:2f:bd:ef:4c:f0:
         20:41:de:45:d4:33:53:0d:60:a0:6d:86:70:98:20:1a:2b:74:
         1e:39:8c:00:b4:ac:bf:7c:a6:ac:8c:2d:80:29:73:b2:f0:de:
         cd:01:28:15:05:cd:17:37:db:73:40:86:99:11:0b:20:32:a1:
         b4:ed:6b:aa:1f:ee:c0:f0:5f:d0:14:1e:4f:60:4e:3a:8e:4c:
         c1:4d:a0:43:a2:68:ea:42:c1:46:6e:f9:5d:76:02:72:59:a5:
         47:42:bc:30:b6:ec:28:4a:40:81:ef:69:7f:db:df:51:78:d9:
         11:91:a3:75:8b:9b:d2:50:ce:04:a6:27:7c:69:02:15:39:59:
         13:e9:06:59:23:89:9f:57:08:c4:7a:09:8d:0b:51:3e:49:c7:
         5e:19:ea:21:4e:5a:77:4a:49:50:ab:40:b8:13:34:32:ff:20:
         d9:3d:c6:11:aa:5f:88:19:ec:34:28:95:97:1c:8e:18:a1:84:
         ac:cc:80:58:d4:74:b2:52:b0:e3:10:b8:15:5f:0f:56:ae:70:
         16:15:08:97:57:ca:fb:54:75:b0:95:1f:26:e0:7e:17:8c:86:
         00:04:19:f0:83:3e:65:73:12:8c:82:22:80:0c:32:72:af:93:
         aa:60:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----