Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.mft
File:                     7Ef-zOCWGrDR-FcylqInQhesONI.mft (raw, json)
Hash identifier:          9t3MmWTqCuddjjT3Gb1UJji6hks4SCdnl8dP/RIDD8A=
Subject key identifier:   8E:4F:2C:1D:B5:C4:E8:12:E9:94:D5:84:02:04:6D:8F:79:FE:4A:CA
Authority key identifier: EC:47:FE:CC:E0:96:1A:B0:D1:F8:57:32:96:A2:27:42:17:AC:38:D2
Certificate issuer:       /CN=ec47fecce0961ab0d1f8573296a2274217ac38d2
Certificate serial:       018499042BE51F4B1F3EEFE0EF4005C46B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Ef-zOCWGrDR-FcylqInQhesONI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.mft
Manifest number:          0B81
Signing time:             Mon 21 Nov 2022 07:08:18 +0000
Manifest this update:     Mon 21 Nov 2022 07:08:18 +0000
Manifest next update:     Tue 22 Nov 2022 07:08:18 +0000
Files and hashes:         1: 7Ef-zOCWGrDR-FcylqInQhesONI.crl (hash: ERb4x0Q4cZyiCdmgX2OxLLHevjcpDzGhIw9mM99suPk=)
                          2: __BzSnAbFYSPCn13fygqkEuR_74.roa (hash: 1iaUsuYj1v8tWz3ZDABy0hrFdUOFpDEkxGOZ59zzOmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:99:04:2b:e5:1f:4b:1f:3e:ef:e0:ef:40:05:c4:6b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec47fecce0961ab0d1f8573296a2274217ac38d2
        Validity
            Not Before: Nov 21 07:08:18 2022 GMT
            Not After : Nov 22 07:08:18 2022 GMT
        Subject: CN=8e4f2c1db5c4e812e994d58402046d8f79fe4aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:17:6a:6a:49:1d:71:4a:7b:42:22:0b:38:
                    d0:c0:80:1b:88:59:3c:ff:8d:11:71:4a:b1:e3:13:
                    8f:64:7c:32:ae:94:a9:bb:16:fb:c9:9b:01:10:6f:
                    f7:e6:40:b1:e9:91:50:79:9c:f8:88:95:7e:ec:8b:
                    56:3f:e3:0f:a2:d2:51:a6:76:11:c5:fa:35:88:e4:
                    f4:f1:25:9a:e8:e8:f6:25:63:bb:a1:89:99:f6:d2:
                    de:3d:f8:1b:99:86:5a:53:43:24:82:bd:fc:a9:b6:
                    9d:fb:c4:4d:33:1b:11:f6:74:8e:c1:79:06:46:62:
                    98:27:87:6b:3a:d3:5c:d0:0a:2b:43:ab:71:1c:b0:
                    87:05:24:27:0a:19:d7:ea:13:ad:6d:3a:8d:be:40:
                    89:fe:8e:47:33:9d:82:03:21:d6:19:0b:91:98:b3:
                    95:4c:b0:ad:d7:20:6b:b1:bf:2a:74:43:53:51:c9:
                    f2:96:cb:70:2a:be:9a:09:8f:b2:1a:60:35:25:01:
                    6a:9a:5c:a9:29:de:fa:f8:49:ba:f7:e9:a0:e2:6d:
                    dd:e8:93:4c:5a:b3:db:4b:43:1c:b3:1b:39:28:fd:
                    3d:fe:6d:dc:28:c2:91:9c:3f:fc:c7:3c:c1:98:cd:
                    22:83:29:45:65:7a:ac:2b:f8:c9:01:89:66:3b:92:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4F:2C:1D:B5:C4:E8:12:E9:94:D5:84:02:04:6D:8F:79:FE:4A:CA
            X509v3 Authority Key Identifier:
                keyid:EC:47:FE:CC:E0:96:1A:B0:D1:F8:57:32:96:A2:27:42:17:AC:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Ef-zOCWGrDR-FcylqInQhesONI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:bb:26:c2:8d:db:29:e9:83:f2:c6:58:44:33:a2:61:e3:
         41:7c:7d:5e:9f:17:ae:c2:9d:d5:4d:30:0a:81:d5:3d:b1:7a:
         ea:26:71:df:04:d8:d4:55:fb:f2:a8:90:a2:2a:82:44:a8:df:
         a2:36:dc:e2:3c:3e:61:03:47:fa:7a:cc:4e:ec:2c:89:dd:54:
         c7:ec:1d:58:31:65:f7:a7:65:bd:3b:e2:31:5e:df:97:5d:21:
         e7:34:80:78:c9:ad:f1:ed:7a:d7:70:ca:25:34:92:74:85:d9:
         c9:27:ff:69:5f:82:1d:a1:d8:34:10:6a:46:ec:79:04:f1:a9:
         4e:e9:cf:1e:9f:09:99:de:f0:91:eb:21:14:8c:0e:6e:7d:ee:
         31:df:b6:9b:6a:7e:3b:7c:c7:03:9e:ae:18:c0:bb:56:6b:31:
         80:79:4a:3a:86:9b:8b:85:fc:88:5b:c3:64:e9:63:98:65:ef:
         c5:74:ed:b0:20:0b:10:7e:71:10:e5:d1:86:96:5e:a7:af:e5:
         85:65:3c:59:0f:cb:01:7c:3e:31:93:6e:52:43:e9:b4:d5:70:
         08:f5:42:f4:56:98:ae:a9:57:ef:aa:15:17:f1:81:6d:09:ee:
         5a:76:86:24:44:b6:3f:30:13:b5:97:de:b6:2d:67:1b:fd:3c:
         cd:5c:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----