Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/7sv52yqaT_fpyMZk4O-SeGPOVJM.mft
File:                     7sv52yqaT_fpyMZk4O-SeGPOVJM.mft (raw, json)
Hash identifier:          gG15PBYQQAf+QCiysPJhtgHhl552trGEWjeWeP17oPQ=
Subject key identifier:   0B:97:57:03:AE:27:08:EA:B6:A0:30:08:AC:0B:1E:CD:07:96:5D:E3
Authority key identifier: EE:CB:F9:DB:2A:9A:4F:F7:E9:C8:C6:64:E0:EF:92:78:63:CE:54:93
Certificate issuer:       /CN=eecbf9db2a9a4ff7e9c8c664e0ef927863ce5493
Certificate serial:       01835FA8AB600559D933DC1023F9CFEBF11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sv52yqaT_fpyMZk4O-SeGPOVJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/7sv52yqaT_fpyMZk4O-SeGPOVJM.mft
Manifest number:          0435
Signing time:             Wed 21 Sep 2022 10:47:12 +0000
Manifest this update:     Wed 21 Sep 2022 10:47:12 +0000
Manifest next update:     Thu 22 Sep 2022 10:47:12 +0000
Files and hashes:         1: 7sv52yqaT_fpyMZk4O-SeGPOVJM.crl (hash: Bff7pxogZPVx7m/0oalpfs0fKmpLhBMBAesWS595ZoA=)
                          2: ibw6XR_JIBWsexLauixh0iGbRVI.roa (hash: sa3PrLqmXf5U8BH3BknX3YAZlkjCBjs17vvFHEGFUHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5f:a8:ab:60:05:59:d9:33:dc:10:23:f9:cf:eb:f1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecbf9db2a9a4ff7e9c8c664e0ef927863ce5493
        Validity
            Not Before: Sep 21 10:47:12 2022 GMT
            Not After : Sep 22 10:47:12 2022 GMT
        Subject: CN=0b975703ae2708eab6a03008ac0b1ecd07965de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:6d:32:55:1d:d4:5e:64:cc:6a:91:9d:d7:
                    51:9d:f2:af:42:32:3c:82:dd:c1:92:9b:89:e4:92:
                    f4:b6:ef:69:9c:d0:89:01:f2:65:50:ed:2b:8b:4f:
                    36:21:ba:2a:04:cf:60:69:ae:e6:6b:28:0d:2c:6b:
                    07:38:ee:e3:74:d9:1d:b3:85:44:d3:58:c6:30:9a:
                    b0:46:dc:1b:71:ed:93:42:0f:55:96:a6:02:bb:2c:
                    db:7e:8e:41:88:d2:ea:19:01:b0:78:30:e8:50:79:
                    5c:0b:67:8b:fd:96:0f:ef:f3:54:f8:90:ee:d3:3b:
                    6a:ca:d3:ac:2c:f8:21:e2:19:0f:c1:c2:09:3f:fe:
                    85:34:44:5c:42:0a:58:ab:8d:b9:70:df:1d:2f:e1:
                    08:3f:a0:d1:cd:08:f3:c5:75:59:62:da:6a:70:8d:
                    ad:80:ff:3d:b4:04:46:4e:0a:11:af:d4:ab:df:20:
                    fb:48:db:dd:81:b4:bb:7a:a8:5a:f8:eb:34:ee:15:
                    c1:81:46:62:c5:21:e4:00:ef:27:c5:58:cd:9b:7e:
                    bf:66:00:c0:74:c6:00:e2:2f:8e:85:1d:53:e4:21:
                    a3:cd:78:ff:27:a0:0b:4a:a8:61:8d:68:35:67:d9:
                    3b:9e:2c:06:a5:b6:9c:69:1a:00:58:c5:a1:5e:96:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:97:57:03:AE:27:08:EA:B6:A0:30:08:AC:0B:1E:CD:07:96:5D:E3
            X509v3 Authority Key Identifier:
                keyid:EE:CB:F9:DB:2A:9A:4F:F7:E9:C8:C6:64:E0:EF:92:78:63:CE:54:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sv52yqaT_fpyMZk4O-SeGPOVJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/7sv52yqaT_fpyMZk4O-SeGPOVJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/7sv52yqaT_fpyMZk4O-SeGPOVJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:b2:16:bf:c7:0f:09:3b:16:6f:f7:a3:a8:60:14:46:34:
         68:60:bb:ff:12:ee:17:de:12:94:d2:e6:8a:e0:f1:ea:17:d3:
         7a:f7:54:96:45:a1:77:e4:bb:0a:d9:9f:f8:e0:ac:59:eb:60:
         e4:b0:8d:f6:ac:98:ad:67:bb:68:f8:f5:3e:68:f0:0a:94:39:
         dc:ab:87:cb:fa:02:4c:3e:79:4e:0c:60:59:14:21:0f:7f:73:
         16:98:3d:08:6e:25:53:5b:77:04:8e:0a:3e:12:a1:c1:80:b1:
         04:5f:c6:28:57:b5:d1:67:ef:b4:8b:0d:d2:25:68:21:d1:ad:
         98:2b:97:45:37:bb:83:d5:59:51:05:cc:8b:13:6d:14:5c:30:
         6a:76:23:be:b0:a8:bc:08:84:44:45:75:a8:89:75:9d:e7:4c:
         ee:b4:ab:c7:08:2f:f7:fd:92:9a:41:67:fb:4e:1c:eb:fa:18:
         d0:94:4f:78:4f:7b:25:44:db:7d:56:cd:56:f4:c2:c2:3a:6c:
         23:fe:ab:ee:4f:0a:4a:29:da:8a:64:8a:39:10:d4:9c:61:45:
         e4:fa:7a:31:34:d2:3b:7f:fe:94:e8:bb:9d:cc:1f:e5:df:74:
         53:c4:91:28:97:2b:2a:a8:81:3d:8b:c6:a5:93:55:4b:8c:e7:
         2c:bc:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----