Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.mft
File:                     7Gg2jF0pQWD00tDOr3Ux5EdfpTM.mft (raw, json)
Hash identifier:          hjQegLfTajgiEKemGE7ZtqNZ/XHC4+jxsHCZdJ9PSco=
Subject key identifier:   94:FC:92:17:42:FC:F2:9C:D1:E8:A6:CE:3C:63:74:CA:8D:8B:3D:B2
Authority key identifier: EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
Certificate issuer:       /CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Certificate serial:       018538C94CD939F43E0D754D5DF1A522C71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.mft
Manifest number:          0BF3
Signing time:             Thu 22 Dec 2022 07:43:14 +0000
Manifest this update:     Thu 22 Dec 2022 07:43:14 +0000
Manifest next update:     Fri 23 Dec 2022 07:43:14 +0000
Files and hashes:         1: 7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl (hash: ZutIeieiRfo+HrBGTZENpAxvNNiXfbBXrJUtx5UhtfA=)
                          2: YfjOZWfohnpgi_RjomAZARqxn4U.roa (hash: yBlSDu7YKgaLAkMUqyRj1B0OLBke6N0QGqSjfyZ+hpg=)
                          3: s02slZwNnn_3BoMak-O-1dWLHsk.roa (hash: jzvlqbLzfgD4nSMfOW+0x13rBDuAKWcYvBzSUqwuE80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:38:c9:4c:d9:39:f4:3e:0d:75:4d:5d:f1:a5:22:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
        Validity
            Not Before: Dec 22 07:43:14 2022 GMT
            Not After : Dec 23 07:43:14 2022 GMT
        Subject: CN=94fc921742fcf29cd1e8a6ce3c6374ca8d8b3db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:20:df:87:5a:09:0a:1d:f2:b4:a3:6e:01:99:
                    66:46:44:7e:50:4c:b2:36:4a:8b:8b:3b:cd:79:ad:
                    d9:ce:76:0f:84:15:90:e2:00:c0:bc:54:72:11:c2:
                    86:a4:5c:03:7c:3e:c7:99:f1:65:da:3b:3f:37:79:
                    03:c0:1d:b7:08:ea:29:19:ce:c1:d1:74:9e:f7:2d:
                    f7:0e:6b:af:70:71:60:26:9b:df:95:2f:46:e2:3b:
                    81:f3:d9:eb:78:b2:05:5d:00:f2:85:dc:15:e9:a1:
                    8d:8e:4b:8b:19:e6:cc:e2:04:65:f5:79:43:c9:cb:
                    3a:84:e1:f6:67:fe:a4:06:80:01:f5:35:62:61:70:
                    08:2a:8e:b7:eb:43:c1:aa:9d:47:15:8d:1b:ce:d4:
                    b3:bd:fc:a9:63:4e:48:8c:2c:86:97:75:c0:76:a9:
                    36:d7:0f:69:18:e3:ce:5b:21:e0:22:e3:79:b2:47:
                    fb:59:e1:f1:62:42:db:a5:fa:05:ff:c1:94:e2:d3:
                    97:4c:5f:c9:27:8b:57:c7:3c:77:d6:3d:6b:59:f3:
                    a2:1f:ca:f9:0f:e5:09:02:d6:d9:05:d5:8a:6a:9b:
                    57:9a:9e:11:7a:20:e7:2c:19:40:10:70:ab:48:33:
                    5e:d1:e6:e0:44:6f:3c:57:43:4f:50:2b:98:3d:32:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FC:92:17:42:FC:F2:9C:D1:E8:A6:CE:3C:63:74:CA:8D:8B:3D:B2
            X509v3 Authority Key Identifier:
                keyid:EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4e:85:4f:ac:66:57:58:b1:8a:37:e2:ad:14:9d:aa:42:8d:
         dd:64:03:e9:43:02:03:70:22:0c:b4:fa:25:1d:cd:b0:db:89:
         46:d2:9d:65:96:56:e5:d8:48:00:35:87:91:a7:df:7e:48:c7:
         9e:e6:c7:f0:1a:14:0d:90:85:a5:d3:5a:22:63:39:3f:aa:d2:
         b0:d2:fb:fa:8e:60:3a:df:0e:83:3c:3e:ff:10:11:e5:f1:91:
         3c:c6:49:6f:63:12:12:14:14:75:0f:fe:b1:2a:1d:5a:d4:0e:
         cd:3e:84:06:17:db:f5:5c:8c:bf:c1:f1:3a:2b:15:de:59:47:
         4f:a7:ad:96:39:fa:41:61:6f:78:ce:22:0d:8f:97:14:ff:8f:
         24:05:73:ba:88:a3:40:4b:06:81:b1:ed:68:b7:59:ac:b9:47:
         08:7b:7b:81:94:b4:ed:dc:9a:29:43:00:e3:cc:f9:a5:1a:db:
         0a:66:42:2b:cf:cb:32:8d:00:af:b6:07:02:10:fa:b0:b4:8f:
         44:61:91:65:e4:23:3c:f8:58:88:55:f4:0c:1f:42:18:82:51:
         fb:67:4d:62:ee:45:8d:a4:64:4b:1f:6d:c1:49:9e:5b:ce:a7:
         2b:7c:c3:09:60:1a:d9:34:3f:70:89:0a:d4:71:78:53:f9:23:
         8f:d5:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----