Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/bRrVlBs6srTx8bmZrkHe3ce515o.mft
File:                     bRrVlBs6srTx8bmZrkHe3ce515o.mft (raw, json)
Hash identifier:          UUN7vDWaB0stv3PTUhgRuBzOTPB4QRv1oSTpeqJo+vc=
Subject key identifier:   1A:D4:C7:16:4B:A2:E9:69:C4:39:19:E4:1E:AB:21:3C:D5:64:C7:BD
Authority key identifier: 6D:1A:D5:94:1B:3A:B2:B4:F1:F1:B9:99:AE:41:DE:DD:C7:B9:D7:9A
Certificate issuer:       /CN=6d1ad5941b3ab2b4f1f1b999ae41deddc7b9d79a
Certificate serial:       05E943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRrVlBs6srTx8bmZrkHe3ce515o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/bRrVlBs6srTx8bmZrkHe3ce515o.mft
Manifest number:          09
Signing time:             Fri 13 May 2022 07:12:01 +0000
Manifest this update:     Fri 13 May 2022 07:12:01 +0000
Manifest next update:     Sat 14 May 2022 07:12:01 +0000
Files and hashes:         1: RbEpAKQG7wVxJeMBAAdcRq0yzb0.roa (hash: KywTCwg5EUalLAX2qqAKglnkKODQnvKVTRxz862ZQ/8=)
                          2: bRrVlBs6srTx8bmZrkHe3ce515o.crl (hash: FHukEyqopIkUDw4k9G2pvK1LvAV1x9b0FlEzqa145tk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387395 (0x5e943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d1ad5941b3ab2b4f1f1b999ae41deddc7b9d79a
        Validity
            Not Before: May 13 07:12:01 2022 GMT
            Not After : May 14 07:12:01 2022 GMT
        Subject: CN=1ad4c7164ba2e969c43919e41eab213cd564c7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:5b:78:12:db:b6:72:62:0f:30:e8:92:3b:
                    13:44:61:0a:d2:ee:2b:f8:66:50:7d:8e:99:3b:30:
                    f7:de:0e:0b:56:29:80:d1:bb:74:bc:97:55:83:58:
                    be:2a:0d:74:d0:9c:07:39:62:5b:b2:77:fd:41:7a:
                    0d:b5:f5:2d:e7:a5:e4:d6:27:c1:ce:f1:70:8a:5d:
                    fa:14:06:1a:db:4d:b9:70:54:a6:19:39:b0:25:6e:
                    de:69:0a:5a:8e:02:54:5b:ef:e2:2a:25:eb:97:3e:
                    84:1f:ef:98:a8:5d:a8:9a:69:cc:e5:ef:a8:b5:2d:
                    ad:c8:52:08:df:55:3f:19:bf:d2:9b:ae:9e:73:90:
                    32:46:7f:cb:9b:d8:e8:57:b3:96:73:3d:d0:cc:08:
                    73:50:cc:29:f7:2f:24:25:91:6e:62:db:65:25:52:
                    14:c8:2a:50:c5:cb:f8:d0:21:c8:ab:8b:5c:be:8c:
                    d6:90:12:73:ab:0f:89:3e:19:45:78:50:a5:c4:8a:
                    b3:85:f4:a1:eb:b5:12:b9:c1:58:dd:88:89:bf:63:
                    49:36:20:dd:bf:bf:66:99:d3:9b:fc:b1:44:15:81:
                    07:ff:5d:e5:2c:10:fb:c6:c5:4d:59:f6:c5:59:bd:
                    5c:7b:7a:e0:e5:ae:73:77:f2:07:94:d3:53:4f:58:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D4:C7:16:4B:A2:E9:69:C4:39:19:E4:1E:AB:21:3C:D5:64:C7:BD
            X509v3 Authority Key Identifier:
                keyid:6D:1A:D5:94:1B:3A:B2:B4:F1:F1:B9:99:AE:41:DE:DD:C7:B9:D7:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRrVlBs6srTx8bmZrkHe3ce515o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/bRrVlBs6srTx8bmZrkHe3ce515o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/bRrVlBs6srTx8bmZrkHe3ce515o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ff:77:d8:10:35:47:d5:f6:51:a8:5c:17:f3:19:67:d8:1c:
         3f:d0:70:8c:03:5a:f8:a1:87:c2:dd:94:03:48:11:93:96:23:
         f0:bf:53:15:39:80:5f:2a:85:76:c3:8f:69:4a:f8:b3:d2:0d:
         70:08:ee:30:07:61:89:bf:66:0a:46:42:a8:ca:5e:fa:71:16:
         1e:b3:73:31:8e:e5:85:60:97:61:0f:2a:e8:fb:52:f3:3a:f7:
         a1:30:d2:da:18:6d:21:dc:ac:b7:59:76:0c:ed:81:90:5b:fe:
         88:06:1e:bd:51:92:84:0e:8c:de:c8:7f:c3:48:10:41:9d:8b:
         b2:25:25:d0:3a:5e:39:e1:dd:7b:1d:e8:0c:59:d9:74:28:e5:
         9d:5f:ed:6b:26:de:9c:19:4b:ea:e2:fe:6e:f2:ad:a7:fe:0d:
         03:61:ba:a2:79:a2:d5:df:aa:6d:02:73:d2:92:68:d4:4c:fe:
         a6:75:40:a1:bd:68:d5:4f:18:bb:74:ba:cc:50:91:94:2e:32:
         0e:27:74:ec:df:a1:12:d2:bc:6c:d8:70:6f:e0:8c:56:00:10:
         3e:77:4d:2c:a0:28:44:b8:a5:40:91:70:59:92:b8:65:73:7d:
         ff:52:66:d7:ad:de:9d:f9:21:3a:f3:f0:d2:05:47:5f:a0:53:
         cd:da:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----