Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/EDu0KhJtb9E9anNrap5BtPTDHmg.mft
File:                     EDu0KhJtb9E9anNrap5BtPTDHmg.mft (raw, json)
Hash identifier:          cdRBYVpGfuP7UEvH0OjLKj0vibfXlPoyyPSnRxDAEzw=
Subject key identifier:   56:88:C6:D0:F6:05:ED:C7:1B:08:F3:4E:DD:AA:B1:73:CC:38:20:64
Authority key identifier: 10:3B:B4:2A:12:6D:6F:D1:3D:6A:73:6B:6A:9E:41:B4:F4:C3:1E:68
Certificate issuer:       /CN=103bb42a126d6fd13d6a736b6a9e41b4f4c31e68
Certificate serial:       01856098BBF42C7B7FCFD702FE0773602761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDu0KhJtb9E9anNrap5BtPTDHmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/EDu0KhJtb9E9anNrap5BtPTDHmg.mft
Manifest number:          0256
Signing time:             Fri 30 Dec 2022 01:15:00 +0000
Manifest this update:     Fri 30 Dec 2022 01:15:00 +0000
Manifest next update:     Sat 31 Dec 2022 01:15:00 +0000
Files and hashes:         1: EDu0KhJtb9E9anNrap5BtPTDHmg.crl (hash: v/biDGzcfe9Y9x2qDOmkQJp12AqfIPVFBKbExleeRVE=)
                          2: UrCD0O-vOSGhGBCcB_JF_UkPTa8.roa (hash: iStMq/IW2YFeE8BeCIiHKTOYue7QRfr7RZMHrozoUXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:60:98:bb:f4:2c:7b:7f:cf:d7:02:fe:07:73:60:27:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103bb42a126d6fd13d6a736b6a9e41b4f4c31e68
        Validity
            Not Before: Dec 30 01:15:00 2022 GMT
            Not After : Dec 31 01:15:00 2022 GMT
        Subject: CN=5688c6d0f605edc71b08f34eddaab173cc382064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:e4:30:91:b9:55:aa:66:aa:ce:97:41:51:
                    b6:31:67:b5:48:6f:0b:3d:bb:3f:cf:cc:9e:06:06:
                    5d:70:3a:2d:47:63:51:b7:9a:df:5a:9b:ca:b1:6d:
                    2f:03:99:b2:27:35:a9:ae:25:0d:e0:1e:3c:94:29:
                    b5:8b:35:03:22:c3:ba:1e:de:94:4f:ca:2f:b6:17:
                    b2:0f:e8:2c:63:6e:db:bc:18:f0:c4:43:a1:99:82:
                    e3:41:18:8d:1e:ec:a5:f8:a7:64:2d:83:e5:e6:7f:
                    6b:60:c6:8d:cf:21:58:75:7b:7e:9e:85:fc:b0:a1:
                    7f:0b:24:0b:95:46:0b:a5:5e:20:6e:29:fa:f8:0f:
                    8c:76:b5:4a:2f:86:dc:8c:8f:10:6c:81:5b:eb:2b:
                    9e:03:10:5c:c1:da:50:89:a2:9e:6e:d7:00:98:85:
                    52:09:05:6a:5c:24:a1:19:67:d0:fa:b3:8c:e5:95:
                    40:eb:f1:8a:98:bd:68:9c:94:e1:3f:a4:f1:41:3a:
                    92:b2:b9:25:77:0c:7f:eb:1e:12:32:a7:e2:56:ab:
                    b6:a4:23:3d:98:cd:df:e6:d3:e6:05:ac:56:2d:b5:
                    fc:da:0f:5f:b0:ed:17:c5:b0:28:cb:97:ae:65:98:
                    57:95:92:21:78:da:01:70:ec:4f:a0:02:cb:b8:8d:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:C6:D0:F6:05:ED:C7:1B:08:F3:4E:DD:AA:B1:73:CC:38:20:64
            X509v3 Authority Key Identifier:
                keyid:10:3B:B4:2A:12:6D:6F:D1:3D:6A:73:6B:6A:9E:41:B4:F4:C3:1E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDu0KhJtb9E9anNrap5BtPTDHmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/EDu0KhJtb9E9anNrap5BtPTDHmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/EDu0KhJtb9E9anNrap5BtPTDHmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:bf:02:4a:56:62:4b:0b:db:92:a7:d3:66:7c:47:27:51:
         8f:7f:4c:b0:3b:00:9a:19:92:83:d8:54:c5:30:df:c2:f6:e3:
         65:08:fb:5b:df:a6:a3:af:77:99:a3:9e:cc:b9:0c:63:73:07:
         f9:9b:55:15:35:39:7a:ae:a4:72:d9:65:0f:63:06:f0:53:37:
         57:e6:c3:fe:af:d8:84:03:a5:2e:e9:44:ce:a7:37:98:d2:15:
         57:3f:33:2a:06:2d:ae:b7:42:f6:15:fd:9a:a8:7d:f5:e8:24:
         59:68:f0:08:62:05:35:85:18:a4:7c:60:e1:f5:3e:a8:37:8e:
         cc:b3:e6:ca:9d:48:51:3a:ce:1b:10:cf:09:d4:d1:c4:9d:6b:
         82:8c:60:43:b4:d6:1b:b1:95:14:00:d4:61:be:b4:bc:64:48:
         55:b7:cd:58:47:7f:b0:92:40:d0:d3:36:5d:b7:28:f0:7c:99:
         4a:cf:7e:43:8f:85:60:b5:15:f2:cd:07:6e:f3:26:98:c8:b8:
         e4:2c:99:1d:b2:ca:af:b5:c8:94:0e:98:c3:ec:88:ba:8d:3a:
         a7:6a:d9:97:b1:b4:df:a1:5a:4a:02:18:97:0d:70:8a:35:1e:
         0f:1b:7c:96:ed:c7:0a:c4:8f:4a:cb:7c:44:9d:5a:60:c7:9f:
         8a:f8:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----