Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/uTSkh7ojPga9LT-VdVn5beOj4f4.mft
File:                     uTSkh7ojPga9LT-VdVn5beOj4f4.mft (raw, json)
Hash identifier:          LWt926rlVgeLIHb3qPf23/JJXY6L2NsLi3iJyQF1a+Q=
Subject key identifier:   5C:F2:D0:0C:19:A6:38:C8:2F:DF:73:4F:09:FE:50:C6:E1:81:C9:09
Authority key identifier: B9:34:A4:87:BA:23:3E:06:BD:2D:3F:95:75:59:F9:6D:E3:A3:E1:FE
Certificate issuer:       /CN=b934a487ba233e06bd2d3f957559f96de3a3e1fe
Certificate serial:       01828169E385823BAF1F6DC4B1189ABB0E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTSkh7ojPga9LT-VdVn5beOj4f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/uTSkh7ojPga9LT-VdVn5beOj4f4.mft
Manifest number:          D8
Signing time:             Tue 09 Aug 2022 07:02:56 +0000
Manifest this update:     Tue 09 Aug 2022 07:02:56 +0000
Manifest next update:     Wed 10 Aug 2022 07:02:56 +0000
Files and hashes:         1: m0dS5w9NPmZNFObvfzPF5lYIgjE.roa (hash: 1NRUm3VdMjWOXPU1mUQwGpunwSfUPf//DqBALYkjEwk=)
                          2: uTSkh7ojPga9LT-VdVn5beOj4f4.crl (hash: M95vce2pKrlYw/RydhdkakD/JE4ilRMXFLNplc7JOwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:81:69:e3:85:82:3b:af:1f:6d:c4:b1:18:9a:bb:0e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b934a487ba233e06bd2d3f957559f96de3a3e1fe
        Validity
            Not Before: Aug  9 07:02:56 2022 GMT
            Not After : Aug 10 07:02:56 2022 GMT
        Subject: CN=5cf2d00c19a638c82fdf734f09fe50c6e181c909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:9f:b4:d0:e1:52:9e:26:f5:40:18:bb:92:
                    fd:4b:b2:c0:ca:02:4e:74:13:01:90:43:22:8f:1e:
                    6c:48:98:f5:e2:63:52:1a:d6:08:11:f0:49:9a:79:
                    d5:33:4d:d4:d3:62:a0:cd:fb:09:69:7b:15:e2:f9:
                    6a:d5:04:05:c4:37:66:d5:e3:c3:42:1b:bf:35:44:
                    f4:d1:29:ec:cf:7e:4e:a2:f9:ad:9e:09:ea:02:98:
                    5e:f7:88:39:34:58:fd:7c:58:ee:b4:66:ff:98:43:
                    32:3b:e6:02:0e:0a:29:53:10:cb:77:3a:f9:2e:3c:
                    f9:c4:93:ec:ee:66:a8:94:43:07:4e:0a:9e:ef:79:
                    07:f5:f1:96:da:81:20:d6:cc:c6:76:ad:6e:56:ef:
                    a9:43:07:83:71:71:b6:e6:17:f8:67:80:68:ae:69:
                    49:8f:89:65:08:0e:aa:b4:cd:9a:21:9b:3a:c7:bf:
                    a5:2e:e2:85:07:fc:09:d2:c6:8c:6f:c5:b0:5d:f2:
                    d0:f6:51:f0:38:93:96:56:90:f7:2e:ea:7e:86:5a:
                    ac:28:ce:40:cb:a2:2e:5c:d5:8f:63:37:72:a4:81:
                    01:a3:ae:e8:ff:19:89:eb:a8:50:50:f2:79:10:ae:
                    a4:1e:cc:ff:6c:f4:e7:c0:b2:37:fc:c8:62:00:b1:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F2:D0:0C:19:A6:38:C8:2F:DF:73:4F:09:FE:50:C6:E1:81:C9:09
            X509v3 Authority Key Identifier:
                keyid:B9:34:A4:87:BA:23:3E:06:BD:2D:3F:95:75:59:F9:6D:E3:A3:E1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTSkh7ojPga9LT-VdVn5beOj4f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/uTSkh7ojPga9LT-VdVn5beOj4f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/uTSkh7ojPga9LT-VdVn5beOj4f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:14:fe:ae:ad:30:95:c8:87:fa:34:c0:16:6d:84:d4:e3:5c:
         47:eb:af:90:e9:ef:f6:02:3f:b9:9d:29:47:05:f1:0f:cb:55:
         fc:95:53:93:cb:4d:12:64:76:82:72:f0:ca:f7:bb:95:79:fa:
         03:92:db:31:0d:25:80:a7:8c:20:db:07:de:db:f8:65:45:f5:
         0d:bc:fc:03:38:c2:f2:92:07:47:ab:dc:0d:ac:49:e6:6e:4c:
         64:37:a6:ea:7d:b3:da:56:f5:85:05:f2:76:a7:da:f7:b5:f5:
         44:df:fc:fa:5e:91:12:13:93:5c:82:75:0c:b6:2d:80:d4:15:
         65:88:7a:61:87:9c:07:96:91:f4:db:c8:c3:11:23:51:98:9c:
         0e:2d:4d:1f:0c:ec:05:34:30:9a:8b:52:e2:93:34:47:e1:cd:
         8e:d5:91:87:33:29:ec:0c:f6:b1:c1:e0:af:08:9a:18:84:2f:
         13:a5:7f:5c:df:69:50:d6:47:36:e1:cd:5d:4d:6a:ef:c0:e8:
         a2:d4:79:c0:d8:f8:10:da:db:c9:ee:c5:88:72:37:7e:11:73:
         5d:c8:b4:28:b0:e3:61:00:4f:eb:77:b1:41:dc:6d:90:fd:fd:
         d0:83:6e:e8:cb:65:26:a5:c9:e7:80:db:24:2a:9f:3a:f6:45:
         b3:f4:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----