Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/58669d-ee10-4d67-a92a-d255b2957f0b/1/llNa_u4c3fSaSgScymjjs9sAwKg.mft
File:                     llNa_u4c3fSaSgScymjjs9sAwKg.mft (raw, json)
Hash identifier:          j2x+5/SW4ZWhJWtWGh3N22jFpXOdaVE3Q1cjQGw0Icg=
Subject key identifier:   D1:E1:29:69:AF:2C:C3:87:A0:94:86:91:0B:7B:B8:23:F3:55:56:DC
Authority key identifier: 96:53:5A:FE:EE:1C:DD:F4:9A:4A:04:9C:CA:68:E3:B3:DB:00:C0:A8
Certificate issuer:       /CN=96535afeee1cddf49a4a049cca68e3b3db00c0a8
Certificate serial:       09C659EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llNa_u4c3fSaSgScymjjs9sAwKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/58669d-ee10-4d67-a92a-d255b2957f0b/1/llNa_u4c3fSaSgScymjjs9sAwKg.mft
Manifest number:          0915
Signing time:             Mon 25 Apr 2022 01:00:59 +0000
Manifest this update:     Mon 25 Apr 2022 01:00:59 +0000
Manifest next update:     Tue 26 Apr 2022 01:00:59 +0000
Files and hashes:         1: P934H1Py1sgztmin6KRA_5D7m2s.roa (hash: HzaiM4aZZRePZ8wTnHB8Ppz6yEw903HrJHoPi9apxa4=)
                          2: llNa_u4c3fSaSgScymjjs9sAwKg.crl (hash: tQcXPby8mPDjaMnZVXyeulYF9+TXftJMSPjVR5CF9Fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163994095 (0x9c659ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96535afeee1cddf49a4a049cca68e3b3db00c0a8
        Validity
            Not Before: Apr 25 01:00:59 2022 GMT
            Not After : Apr 26 01:00:59 2022 GMT
        Subject: CN=d1e12969af2cc387a09486910b7bb823f35556dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:aa:bf:9a:10:7b:21:50:95:f2:ab:3c:f3:
                    6e:a4:6e:dc:fc:50:54:13:83:11:2a:46:2d:ea:b9:
                    9b:91:14:f6:43:e1:e1:be:24:60:cc:4d:80:1e:a1:
                    62:8e:82:72:24:4c:21:e6:a8:34:ee:0c:6f:0b:e0:
                    99:8d:53:80:f3:6d:9a:10:1f:a1:f5:a7:22:80:4e:
                    98:cb:b0:e3:0c:96:11:11:25:ae:89:69:b6:e5:1b:
                    b3:1c:58:71:d1:c6:0c:40:12:53:b0:f0:65:35:5e:
                    e0:e2:2d:13:12:ff:23:0b:f7:27:d5:d3:86:78:bd:
                    2b:00:3d:c6:b3:99:a5:53:8a:5a:85:4f:b1:87:71:
                    04:d8:a4:ec:99:9d:be:7b:12:99:28:7b:16:2e:71:
                    cc:a5:0d:64:01:a1:c0:df:2e:58:3f:59:50:8f:9d:
                    ad:38:0a:0e:24:6e:d4:a0:bd:16:0a:09:40:f5:60:
                    20:ce:fe:6d:f2:39:1a:58:de:1f:96:9e:db:4f:98:
                    fc:7b:c0:8a:a4:cc:a1:70:52:3c:0e:16:d8:67:be:
                    2d:43:2d:ea:81:7d:9c:79:85:40:7a:4c:17:7f:53:
                    60:6f:47:2c:be:b7:54:dd:16:a6:b4:c3:4b:fa:87:
                    13:18:d4:53:ef:b2:e2:af:b3:e8:70:32:08:23:1d:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E1:29:69:AF:2C:C3:87:A0:94:86:91:0B:7B:B8:23:F3:55:56:DC
            X509v3 Authority Key Identifier:
                keyid:96:53:5A:FE:EE:1C:DD:F4:9A:4A:04:9C:CA:68:E3:B3:DB:00:C0:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llNa_u4c3fSaSgScymjjs9sAwKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/58669d-ee10-4d67-a92a-d255b2957f0b/1/llNa_u4c3fSaSgScymjjs9sAwKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/58669d-ee10-4d67-a92a-d255b2957f0b/1/llNa_u4c3fSaSgScymjjs9sAwKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:86:e9:76:09:5b:20:c4:b0:cc:3a:7c:17:f5:81:b5:7f:16:
         64:13:ec:df:2c:7c:10:14:a2:6c:37:2f:a7:43:16:8a:db:94:
         23:36:6e:35:27:d2:43:00:af:bd:2b:40:65:b6:64:cb:be:92:
         8e:99:a2:2b:08:13:9c:32:10:37:f4:36:6e:dc:55:ad:e9:fb:
         5a:25:c3:78:d1:08:5d:52:4d:bb:29:3a:7b:65:6a:fc:b9:a4:
         ee:8d:3e:74:b0:2c:61:7e:2c:45:2b:f5:66:c7:f6:ad:59:6a:
         b1:65:c2:01:16:c3:d6:05:a3:c2:90:3d:54:33:a1:81:70:d2:
         c4:7f:5c:12:fd:ac:40:4a:32:e2:ce:1a:20:94:e3:e6:ba:d1:
         6e:21:85:c5:7c:c6:5e:9d:02:b3:a1:b3:6d:c5:ff:34:f6:10:
         99:50:a8:61:12:6c:ff:29:1b:6e:36:22:f3:67:90:0e:f1:bf:
         84:a7:cb:1f:9b:81:3b:89:a3:fb:15:8c:b9:b0:91:ef:d4:82:
         92:42:a9:4b:43:05:b2:ff:62:80:3f:b6:3a:5d:64:b8:9b:bf:
         c6:61:20:cf:aa:51:29:ac:19:a9:bc:95:23:8a:e6:8d:82:b3:
         2c:85:54:f4:03:28:50:01:ca:c4:c1:f5:c6:ef:fe:d9:9e:01:
         bd:a9:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----