Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/67da32-8c4e-4fa0-a6e2-e73c8f618dc2/1/4jrIC6uhHbovuL8QOD9XYe2RWgo.mft
File:                     4jrIC6uhHbovuL8QOD9XYe2RWgo.mft (raw, json)
Hash identifier:          +WUTQXrd3LCachg5YXxwvyWulch09ZLj1ch76YFVmc0=
Subject key identifier:   97:7A:BE:A5:CE:1D:AB:17:95:E4:12:D5:C1:E1:C1:CC:E6:3A:15:A1
Authority key identifier: E2:3A:C8:0B:AB:A1:1D:BA:2F:B8:BF:10:38:3F:57:61:ED:91:5A:0A
Certificate issuer:       /CN=e23ac80baba11dba2fb8bf10383f5761ed915a0a
Certificate serial:       1652934E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jrIC6uhHbovuL8QOD9XYe2RWgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/67da32-8c4e-4fa0-a6e2-e73c8f618dc2/1/4jrIC6uhHbovuL8QOD9XYe2RWgo.mft
Manifest number:          0941
Signing time:             Tue 10 May 2022 08:52:43 +0000
Manifest this update:     Tue 10 May 2022 08:52:43 +0000
Manifest next update:     Wed 11 May 2022 08:52:43 +0000
Files and hashes:         1: 4jrIC6uhHbovuL8QOD9XYe2RWgo.crl (hash: 6W4U5rLlrZuBWeW4HdZjyhoaKL0hCMHRQlF0eGEPt5A=)
                          2: T3ucy4pDpLkR7VJ_eyiGPmc6pJE.roa (hash: nPA36LP0kjIV/4n37zYQGzAVbMFtHzxoKzqpJmXZMuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374510414 (0x1652934e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23ac80baba11dba2fb8bf10383f5761ed915a0a
        Validity
            Not Before: May 10 08:52:43 2022 GMT
            Not After : May 11 08:52:43 2022 GMT
        Subject: CN=977abea5ce1dab1795e412d5c1e1c1cce63a15a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:84:8a:68:38:f2:4a:29:0c:87:01:6a:93:
                    d8:ad:60:dc:82:3f:57:7e:a5:f3:a5:b3:af:4b:14:
                    b7:4f:57:37:b5:cf:18:ed:86:8c:0a:c1:07:bf:9e:
                    3e:90:ad:9a:53:40:33:b0:c4:9c:6d:a5:62:cf:0b:
                    d1:78:10:48:45:74:c7:01:f5:cd:92:db:e3:3e:58:
                    68:ad:5c:6f:69:10:c2:c8:41:7a:34:3f:9e:72:74:
                    63:d7:ac:a0:3e:7c:b8:e0:69:3f:3a:2b:97:3a:ef:
                    cd:7a:00:9a:a4:df:49:98:07:9e:01:2e:bc:ab:d0:
                    a5:f0:d3:ec:a5:07:25:cf:2d:a4:b9:c8:b5:a8:3c:
                    4d:5e:0e:64:57:4e:b9:4f:c5:75:7a:d9:9d:ae:a5:
                    a2:fb:80:02:0d:56:a4:cf:25:65:92:56:96:1e:c6:
                    08:a8:33:46:68:6a:a3:d6:93:7f:a2:2e:15:81:7a:
                    d3:f4:09:6f:fe:c4:0e:ac:d2:06:47:6c:79:bd:dd:
                    85:e1:d7:40:2e:d4:df:b0:2b:a9:f5:bf:45:f5:e7:
                    a1:0f:c5:ad:f7:f3:9e:62:0b:d5:08:46:0e:79:d9:
                    94:fc:09:4a:2e:b1:16:99:d8:f8:8b:ab:71:d3:c8:
                    71:32:de:07:a2:76:fa:15:44:13:59:45:f2:57:18:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7A:BE:A5:CE:1D:AB:17:95:E4:12:D5:C1:E1:C1:CC:E6:3A:15:A1
            X509v3 Authority Key Identifier:
                keyid:E2:3A:C8:0B:AB:A1:1D:BA:2F:B8:BF:10:38:3F:57:61:ED:91:5A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jrIC6uhHbovuL8QOD9XYe2RWgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/67da32-8c4e-4fa0-a6e2-e73c8f618dc2/1/4jrIC6uhHbovuL8QOD9XYe2RWgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/67da32-8c4e-4fa0-a6e2-e73c8f618dc2/1/4jrIC6uhHbovuL8QOD9XYe2RWgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:01:fd:57:ac:a4:40:a7:89:2a:f0:46:84:e9:15:13:e9:28:
         04:2b:8a:4d:d5:69:32:2b:16:ba:4b:35:e1:c3:55:ac:80:ff:
         7b:42:e6:15:86:2b:b1:32:df:f8:6e:97:ae:bd:7c:1b:45:7b:
         e1:da:18:6b:51:25:ad:36:57:01:ee:19:b3:94:44:0d:f2:c0:
         d7:19:35:61:b8:4e:2a:87:06:33:f2:85:78:ee:9e:63:53:9d:
         a1:2d:a6:91:df:ee:11:cd:36:63:ee:b8:1f:7b:00:5c:03:32:
         f9:69:d0:d9:cb:cd:43:f2:49:3b:88:61:3f:5f:cb:b9:fe:2f:
         25:f3:eb:ba:ad:d5:72:17:3f:85:17:70:82:a8:fa:2c:31:66:
         b4:6a:aa:d7:32:72:e5:59:f8:16:69:47:9c:d2:65:5c:e7:89:
         a7:3a:89:5d:4a:d2:25:8a:91:81:74:43:aa:6c:3f:9e:e4:d2:
         56:93:e4:6c:c2:9a:56:b4:64:73:8c:a4:fd:cb:53:79:97:7d:
         db:0a:98:b0:c9:f3:ba:10:71:cc:81:e8:a5:3c:c9:22:dd:9f:
         92:60:f5:2c:d7:ff:75:e7:59:f8:17:94:72:b7:e1:96:e7:ea:
         c2:7f:18:57:40:04:7d:e2:f4:eb:e0:3a:35:12:9a:c6:49:11:
         e5:e2:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----