Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/EcuWBNwvGuWeF4kvW76-EC9iqzM.mft
File:                     EcuWBNwvGuWeF4kvW76-EC9iqzM.mft (raw, json)
Hash identifier:          J9jpJBRx+bawujm+sl561RU+jr2qRxwcBF+PipWW8UQ=
Subject key identifier:   3C:98:8A:D9:D3:AC:4F:22:1C:D6:59:71:22:04:A6:D2:FF:A9:0B:DF
Authority key identifier: 11:CB:96:04:DC:2F:1A:E5:9E:17:89:2F:5B:BE:BE:10:2F:62:AB:33
Certificate issuer:       /CN=11cb9604dc2f1ae59e17892f5bbebe102f62ab33
Certificate serial:       01852E3FCC40C57E4172247525B9784D4F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EcuWBNwvGuWeF4kvW76-EC9iqzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/EcuWBNwvGuWeF4kvW76-EC9iqzM.mft
Manifest number:          0BD6
Signing time:             Tue 20 Dec 2022 06:36:50 +0000
Manifest this update:     Tue 20 Dec 2022 06:36:50 +0000
Manifest next update:     Wed 21 Dec 2022 06:36:50 +0000
Files and hashes:         1: EcuWBNwvGuWeF4kvW76-EC9iqzM.crl (hash: u72FrcwQ1HdGMCsRDAOHjYLf0xohxYkyHMqQ3d9mhMc=)
                          2: _hFCgzgloTANq_zt9ETGMPpE8LU.roa (hash: CAp6pL61n54wsr/CV5bpPtZqjzvQNRADehTUcSmOkKw=)
                          3: bDv6MUl0mI5JjH1DxZ6kckOg118.roa (hash: jIwNLgksiPuLVdJaLaLgdhg+M+WhmBCykg4WXyUpAcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2e:3f:cc:40:c5:7e:41:72:24:75:25:b9:78:4d:4f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11cb9604dc2f1ae59e17892f5bbebe102f62ab33
        Validity
            Not Before: Dec 20 06:36:50 2022 GMT
            Not After : Dec 21 06:36:50 2022 GMT
        Subject: CN=3c988ad9d3ac4f221cd659712204a6d2ffa90bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:a9:c6:91:4c:84:9a:7f:1b:82:4d:c4:f0:
                    c5:66:ca:3b:a1:ff:33:9c:7f:cd:be:e0:73:7a:c3:
                    b3:8c:22:6c:40:8a:f3:77:d9:e2:64:26:4d:4c:ed:
                    47:7e:88:5a:30:bf:cd:92:a0:94:71:75:95:99:a4:
                    30:e2:4a:30:71:8e:8f:5b:8b:09:84:7b:f2:3d:57:
                    fd:cf:1e:09:d5:dc:b0:da:12:d6:52:09:49:c1:59:
                    bd:89:2a:ee:12:a3:2e:1c:ea:2c:a1:79:f1:3e:1b:
                    8c:75:ee:ad:84:1d:45:c5:3d:65:7a:90:7a:8b:e2:
                    dd:0e:47:56:28:aa:07:ba:fb:43:ba:b3:8d:d6:fa:
                    61:2b:fa:34:6e:17:c9:42:48:aa:98:a8:bb:87:94:
                    e5:6a:c8:dc:a1:14:fb:73:c6:d5:75:6a:15:7d:be:
                    42:2a:85:12:cf:63:f0:45:c1:cb:1f:8b:42:39:6a:
                    56:17:b6:33:29:58:a6:86:e0:66:1c:ff:d6:83:ca:
                    04:3d:84:8f:b4:7b:46:73:60:e7:7f:07:88:da:10:
                    7f:a9:ff:c4:1e:3c:bb:db:d2:d6:f9:b5:96:18:7c:
                    f0:35:fa:12:c2:65:1e:1c:35:37:81:63:fb:98:df:
                    6c:28:f9:12:b4:36:37:00:61:50:51:5a:a3:b2:08:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:8A:D9:D3:AC:4F:22:1C:D6:59:71:22:04:A6:D2:FF:A9:0B:DF
            X509v3 Authority Key Identifier:
                keyid:11:CB:96:04:DC:2F:1A:E5:9E:17:89:2F:5B:BE:BE:10:2F:62:AB:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EcuWBNwvGuWeF4kvW76-EC9iqzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/EcuWBNwvGuWeF4kvW76-EC9iqzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/EcuWBNwvGuWeF4kvW76-EC9iqzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:53:82:b4:9e:03:b5:7e:92:7e:25:df:f4:44:98:c3:ba:ea:
         86:20:79:a7:0c:37:a6:d3:be:a2:eb:6e:18:0c:2d:76:97:fb:
         2e:37:15:c1:63:59:5b:5a:a3:44:b5:a5:b3:f0:49:3f:87:fe:
         f7:9b:07:2f:f5:93:a1:ab:58:72:51:09:68:d5:e3:28:4c:60:
         f9:68:2c:cd:3c:dd:a0:f1:51:61:47:1a:30:40:d4:ee:15:5b:
         46:2d:19:16:1a:03:06:54:56:7a:21:c8:85:79:60:37:b9:e5:
         a0:c8:4a:c3:1f:7e:bf:8a:bf:d8:ea:cf:ae:0e:18:ab:09:db:
         1f:66:81:d8:53:73:19:f9:7f:2f:53:d3:30:bd:69:01:21:26:
         50:7b:79:5c:a5:21:01:1a:b2:9b:9a:58:88:e7:96:52:5a:9f:
         52:ef:46:f5:ab:02:f8:4b:4e:2c:7a:09:86:bd:51:1d:e6:de:
         51:b6:b4:86:4c:be:d5:92:34:81:3b:2b:18:93:dc:53:d4:4a:
         d6:c7:bd:c9:4e:c2:1a:fd:64:a3:4c:46:53:bd:14:ab:02:fe:
         e0:41:50:1b:c3:ba:34:ef:cc:87:09:01:93:e2:48:8d:37:37:
         2a:49:2f:96:db:3d:06:88:a6:35:1a:c6:38:5e:6f:e0:02:a2:
         cb:5e:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----