Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/8vlQCoTyzpDEIUdIrLODXWxW2Ww.mft
File:                     8vlQCoTyzpDEIUdIrLODXWxW2Ww.mft (raw, json)
Hash identifier:          GeuUesccd0ooc4ayQgK4RomvrZcoPg7MdOB7yR+EJis=
Subject key identifier:   FD:A9:A9:CC:E2:4E:7D:99:FC:1D:D5:90:D1:D0:D7:1D:84:9E:86:7F
Authority key identifier: F2:F9:50:0A:84:F2:CE:90:C4:21:47:48:AC:B3:83:5D:6C:56:D9:6C
Certificate issuer:       /CN=f2f9500a84f2ce90c4214748acb3835d6c56d96c
Certificate serial:       09C5C923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vlQCoTyzpDEIUdIrLODXWxW2Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/8vlQCoTyzpDEIUdIrLODXWxW2Ww.mft
Manifest number:          094E
Signing time:             Thu 12 May 2022 03:10:02 +0000
Manifest this update:     Thu 12 May 2022 03:10:02 +0000
Manifest next update:     Fri 13 May 2022 03:10:02 +0000
Files and hashes:         1: 5NKy_S_tnnIpn4zw4YzesD4wz_U.roa (hash: Yl/Qv7oOtAsnqv3rnGvkNdq9gXsrT/ikASICuttpnVg=)
                          2: 8vlQCoTyzpDEIUdIrLODXWxW2Ww.crl (hash: lBqgVwrftSNrgB4wo38WJ06ggu2HAAS6nJDETjjnDqk=)
                          3: SAwsPH-_lniG3IZQlvyc62Gm0lY.roa (hash: NPOD4JMRsYQ0mARo28NlWN7SNLu2bgkLFOE9ZjhUE6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163957027 (0x9c5c923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f9500a84f2ce90c4214748acb3835d6c56d96c
        Validity
            Not Before: May 12 03:10:02 2022 GMT
            Not After : May 13 03:10:02 2022 GMT
        Subject: CN=fda9a9cce24e7d99fc1dd590d1d0d71d849e867f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:9b:cf:4a:97:ca:93:9c:a2:42:66:60:db:
                    07:df:11:6f:14:41:55:39:a9:0a:f5:a8:bf:d7:7c:
                    9f:f8:06:6f:45:43:5b:4e:06:a5:e6:aa:9b:e1:6b:
                    f3:25:bb:35:4f:c7:d3:e6:39:4b:e8:50:e1:6f:34:
                    9a:4f:30:ce:5e:d1:d9:c1:0e:6e:1a:51:ba:45:e4:
                    45:8e:27:0b:f9:2c:e4:80:a2:79:14:e9:3d:20:24:
                    6f:a6:c9:e6:3e:aa:2f:71:ab:14:d0:b0:07:dd:d6:
                    33:80:ea:3d:e8:db:7b:c8:fa:e7:37:83:f6:9b:0b:
                    ac:97:fe:ca:f0:b4:33:8e:5b:9d:38:02:ac:7e:76:
                    12:fd:c1:37:18:8d:c4:46:29:a3:7e:b0:a0:67:aa:
                    e5:ee:da:2f:4b:b7:02:a6:5b:40:49:4e:51:e3:58:
                    45:32:92:38:ce:6b:0a:ac:95:81:36:bd:52:32:d3:
                    4f:78:7b:77:e5:55:f3:00:d4:55:61:49:28:c1:58:
                    8b:d8:a1:3d:dc:16:83:ed:05:bb:e4:3e:40:84:c5:
                    42:9f:5f:99:c6:1b:3a:6b:56:91:1b:2a:d2:7e:95:
                    f4:4f:bc:47:72:4f:bf:e9:71:68:76:b3:72:5b:3f:
                    e7:de:e4:bf:63:4e:d1:9e:fc:b4:c2:92:16:8f:e7:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A9:A9:CC:E2:4E:7D:99:FC:1D:D5:90:D1:D0:D7:1D:84:9E:86:7F
            X509v3 Authority Key Identifier:
                keyid:F2:F9:50:0A:84:F2:CE:90:C4:21:47:48:AC:B3:83:5D:6C:56:D9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vlQCoTyzpDEIUdIrLODXWxW2Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/8vlQCoTyzpDEIUdIrLODXWxW2Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/8vlQCoTyzpDEIUdIrLODXWxW2Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3f:02:5f:18:4f:e8:e0:22:e2:67:da:d0:8e:d3:6d:84:0d:
         da:6a:39:af:af:3c:67:1f:e4:6b:2b:66:8b:98:08:38:88:7b:
         e5:1d:6a:d9:e4:c2:56:23:c2:f0:bd:55:69:d3:da:1c:f5:5f:
         9a:6d:ba:6b:5d:df:6f:e4:e9:59:d0:f2:de:a7:92:f5:86:9c:
         0c:37:95:98:ac:2c:e6:d2:e6:44:05:bc:9f:9a:2c:ff:63:92:
         b8:91:f2:f6:f6:65:68:a2:dc:4f:c9:23:0c:e9:f1:09:7e:74:
         91:00:8e:a6:81:ef:ef:4b:e1:c1:4b:6c:06:b8:e8:6f:ee:59:
         af:0f:9a:73:41:36:da:a4:3d:3c:63:b6:87:1d:c2:d0:b5:c8:
         c7:75:53:4f:aa:95:4d:f2:a2:af:0f:2e:7e:5d:6d:5a:da:87:
         ee:f8:65:54:81:4e:f5:d0:8c:0e:1a:b0:ee:59:6f:4f:c1:5f:
         c4:cb:13:3f:0a:61:11:e6:3d:3e:c8:6a:01:72:a9:d3:e6:9f:
         9d:25:76:de:7c:6c:12:21:98:33:26:d8:ba:15:45:53:f7:83:
         64:1c:2e:0e:60:5e:a6:55:96:9e:bc:6d:33:fc:7a:a1:27:32:
         20:b7:64:94:b2:1b:41:0d:03:b2:31:c3:f9:a4:f2:ad:d1:23:
         37:65:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----