Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/494453-1d1c-415b-8953-c5e5a995d172/1/7HxBBV5XuXfFuATAmCx1xOIRGis.mft
File:                     7HxBBV5XuXfFuATAmCx1xOIRGis.mft (raw, json)
Hash identifier:          F/E/ba2ykqUw4/maDdmRBekO3zR4jwnoeOBCer3QmcQ=
Subject key identifier:   02:61:A7:13:AC:7C:6B:9E:D5:E0:84:91:54:FF:6B:AE:97:01:15:97
Authority key identifier: EC:7C:41:05:5E:57:B9:77:C5:B8:04:C0:98:2C:75:C4:E2:11:1A:2B
Certificate issuer:       /CN=ec7c41055e57b977c5b804c0982c75c4e2111a2b
Certificate serial:       0181F1B2DF4D6A545D85A0826F28C465F27D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HxBBV5XuXfFuATAmCx1xOIRGis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/494453-1d1c-415b-8953-c5e5a995d172/1/7HxBBV5XuXfFuATAmCx1xOIRGis.mft
Manifest number:          08B2
Signing time:             Tue 12 Jul 2022 09:17:20 +0000
Manifest this update:     Tue 12 Jul 2022 09:17:20 +0000
Manifest next update:     Wed 13 Jul 2022 09:17:20 +0000
Files and hashes:         1: 7HxBBV5XuXfFuATAmCx1xOIRGis.crl (hash: QLs4lQTP351bPETIjtu4xcASf0hCGcQJPGpFe+EtzDI=)
                          2: hN34RoICRQliLbmfBB_wggE1EsI.roa (hash: XLH/+xI1tzCHhDGOqdDUowdZda/YZpcR36LwH0ZbO/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f1:b2:df:4d:6a:54:5d:85:a0:82:6f:28:c4:65:f2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7c41055e57b977c5b804c0982c75c4e2111a2b
        Validity
            Not Before: Jul 12 09:17:20 2022 GMT
            Not After : Jul 13 09:17:20 2022 GMT
        Subject: CN=0261a713ac7c6b9ed5e0849154ff6bae97011597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:bd:8a:f6:a7:5d:c0:f4:d1:56:8b:23:80:
                    1b:38:87:bc:62:2a:5c:15:dd:4b:25:f8:13:a4:14:
                    86:ce:8c:da:3a:c2:b2:27:9b:13:58:9a:30:d8:b1:
                    a8:3d:c7:b7:a1:4a:3e:83:30:ff:26:db:36:e6:ad:
                    7d:94:d9:87:04:0b:a2:42:89:67:ae:d0:2c:b7:44:
                    7b:fe:9d:26:a9:de:48:0e:ad:fe:5e:2e:9a:e7:fd:
                    8a:79:3c:1d:9f:b1:04:6e:0e:e0:b3:63:a4:1d:6a:
                    75:1c:12:99:c3:38:9c:43:35:ea:24:0a:ae:28:e1:
                    b2:c6:77:b0:3a:52:31:6b:b6:c3:61:7f:4b:c5:87:
                    ac:a0:b0:10:03:e0:c9:c0:27:90:5f:ed:56:9c:d1:
                    64:1a:a3:82:c7:5e:00:9f:d7:e8:01:ae:1e:c4:7c:
                    c1:47:fb:be:e3:97:61:97:03:cb:d5:98:33:67:22:
                    3d:33:cd:84:99:ae:6d:9a:19:2c:ac:44:b2:c4:f2:
                    30:26:4d:18:96:95:9c:07:3f:16:47:4a:e4:2b:9d:
                    60:53:b7:de:f0:e5:22:91:a3:47:dc:ee:2f:01:4f:
                    26:37:37:40:4f:40:9b:b9:1c:21:6d:8d:10:87:02:
                    88:11:98:25:3b:ba:d1:c2:d7:72:60:19:d1:bf:66:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:A7:13:AC:7C:6B:9E:D5:E0:84:91:54:FF:6B:AE:97:01:15:97
            X509v3 Authority Key Identifier:
                keyid:EC:7C:41:05:5E:57:B9:77:C5:B8:04:C0:98:2C:75:C4:E2:11:1A:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HxBBV5XuXfFuATAmCx1xOIRGis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/494453-1d1c-415b-8953-c5e5a995d172/1/7HxBBV5XuXfFuATAmCx1xOIRGis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/494453-1d1c-415b-8953-c5e5a995d172/1/7HxBBV5XuXfFuATAmCx1xOIRGis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ff:36:b6:cf:17:ce:4d:fe:ea:c5:fe:43:46:84:dd:ca:24:
         72:58:77:2e:ef:9e:bd:39:90:ea:a6:8f:75:0a:5c:50:98:74:
         9a:54:b5:a1:cd:d3:ea:6e:41:e5:ce:72:35:17:30:b4:fd:28:
         7d:f7:a7:49:67:40:e8:dc:f0:59:67:19:16:4f:36:d3:d3:f6:
         a1:bf:83:a1:26:d8:74:c2:8c:0f:91:e5:09:be:7d:96:45:79:
         b5:c0:29:17:a5:5c:94:ba:7f:64:bf:61:cd:db:a1:a3:99:66:
         cb:7e:f6:3e:11:6a:ff:ef:4b:a5:b2:6d:c9:62:2f:3d:22:35:
         09:6b:03:fe:4c:3a:3a:b4:b9:7a:5f:b5:65:31:53:e3:c5:de:
         bb:77:2f:57:69:15:bc:cb:dd:ef:e1:ce:77:6f:db:6c:c6:e3:
         83:87:18:d8:bf:4a:2a:4b:a2:32:f0:3a:f6:e2:dc:f3:73:be:
         5d:00:90:77:72:f4:7c:e3:c9:c4:1d:5e:2e:5d:cc:7a:0d:32:
         04:bd:25:7c:80:e9:71:b2:3c:f1:41:f8:a1:3c:1d:d5:34:8a:
         48:3c:bd:22:dc:4b:8f:fb:fc:73:35:dc:20:4b:00:fe:32:1c:
         f4:70:c7:a2:7d:50:55:70:4d:a7:22:3e:1e:74:78:1b:28:ed:
         61:53:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----