Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/IY7fZEhJI4T_yNujzmd9d6toMGw.mft
File:                     IY7fZEhJI4T_yNujzmd9d6toMGw.mft (raw, json)
Hash identifier:          kWkBvcyRSGHd6HSscsAVV7Zm6O5IyQmz7yDBhyjDI6I=
Subject key identifier:   E5:F6:16:37:FA:A3:E8:AD:7F:E5:7D:5A:79:A6:06:0B:88:A5:14:38
Authority key identifier: 21:8E:DF:64:48:49:23:84:FF:C8:DB:A3:CE:67:7D:77:AB:68:30:6C
Certificate issuer:       /CN=218edf6448492384ffc8dba3ce677d77ab68306c
Certificate serial:       05F179CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY7fZEhJI4T_yNujzmd9d6toMGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/IY7fZEhJI4T_yNujzmd9d6toMGw.mft
Manifest number:          0802
Signing time:             Thu 12 May 2022 05:37:08 +0000
Manifest this update:     Thu 12 May 2022 05:37:08 +0000
Manifest next update:     Fri 13 May 2022 05:37:08 +0000
Files and hashes:         1: 11TP45FFaKq7ezmVyIptkCeKkx8.roa (hash: 1bEYg9kFXk3ny+HGS9qrF2x879w+OX5Rztm6qlzgh7w=)
                          2: IY7fZEhJI4T_yNujzmd9d6toMGw.crl (hash: h+/r0PICBI22e620CXjzWcV5JY6bOShk5d6AkX7iHtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99711438 (0x5f179ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218edf6448492384ffc8dba3ce677d77ab68306c
        Validity
            Not Before: May 12 05:37:08 2022 GMT
            Not After : May 13 05:37:08 2022 GMT
        Subject: CN=e5f61637faa3e8ad7fe57d5a79a6060b88a51438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:67:5e:17:55:fa:bc:1b:e6:59:c1:20:a9:
                    c2:b6:9d:4f:29:36:fd:e7:88:cc:d0:e5:56:c7:3d:
                    fe:7c:f6:b6:a6:ed:25:f1:f7:06:f4:3d:5e:87:c7:
                    59:b7:f2:dc:74:10:d4:97:b5:0b:10:2f:14:b7:df:
                    3e:68:98:05:a8:64:31:7b:da:98:ac:f4:31:7b:a9:
                    8f:02:7c:8d:de:05:49:29:0b:ae:bf:c5:28:f9:44:
                    56:53:87:e8:34:b6:b5:38:1b:76:01:9f:b2:34:bd:
                    5d:79:a0:be:cf:7d:44:e1:20:98:4b:c5:97:69:10:
                    6d:51:66:f4:e6:e4:7c:9f:52:36:ed:9e:fd:23:df:
                    48:93:20:1b:5f:41:a9:72:7f:27:84:12:1e:d9:b5:
                    d4:16:ab:ee:54:53:87:61:e4:aa:eb:bc:29:a1:0d:
                    99:78:a1:39:5c:e7:8a:28:f3:42:e6:dc:ef:3d:ef:
                    2d:20:5c:bb:bc:57:8f:61:c6:c7:c4:08:ed:49:0e:
                    bd:38:92:5f:28:40:f5:fd:0d:7e:0a:a7:88:5f:fb:
                    bf:e5:3e:07:f4:dd:7f:61:f3:eb:ee:84:c4:2b:24:
                    a9:90:4f:cd:a2:02:cb:b1:d5:9b:a4:fc:67:a9:ad:
                    4e:69:93:47:7d:9d:39:30:48:67:b9:60:cd:04:cd:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F6:16:37:FA:A3:E8:AD:7F:E5:7D:5A:79:A6:06:0B:88:A5:14:38
            X509v3 Authority Key Identifier:
                keyid:21:8E:DF:64:48:49:23:84:FF:C8:DB:A3:CE:67:7D:77:AB:68:30:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY7fZEhJI4T_yNujzmd9d6toMGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/IY7fZEhJI4T_yNujzmd9d6toMGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/IY7fZEhJI4T_yNujzmd9d6toMGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:51:1c:59:9b:f6:4a:15:4a:ce:08:e4:b3:49:c1:f9:50:
         1c:a3:7d:a7:3b:81:52:c3:6b:fb:0b:b5:45:61:cc:b5:ec:77:
         bf:72:32:61:ce:45:7c:02:de:54:71:53:ee:af:97:02:2a:ea:
         46:5b:e6:9e:46:11:24:e0:ed:db:2f:78:ec:6a:19:21:a3:bf:
         c0:36:78:3a:32:df:8c:9b:50:4d:eb:08:54:03:ca:f9:6f:48:
         bb:07:39:4a:c4:66:28:03:e1:94:ce:61:68:91:b5:9b:f2:b5:
         b6:0c:a8:b7:a9:b3:58:5f:09:63:1b:4e:41:e4:78:c6:72:63:
         c9:cf:c8:c6:3d:fa:0b:f6:d0:d6:c6:b8:dc:94:6a:97:60:eb:
         d8:69:6b:86:64:0d:4d:97:cd:e2:47:d1:9a:c5:0b:dd:23:34:
         44:3b:55:5a:13:f6:72:89:bc:05:29:65:e0:c2:26:57:ef:c4:
         ba:fd:59:45:b4:5a:fb:54:24:4b:21:70:64:66:73:69:b4:57:
         62:91:32:0b:cd:9a:bf:c4:c1:25:17:ab:6f:a9:ef:33:ff:14:
         6e:43:4d:bd:cd:02:47:c5:1a:79:06:f7:13:9a:4c:70:79:8d:
         fd:0a:be:05:5f:10:3c:73:ae:2a:c9:57:2f:2f:f2:fd:e9:5e:
         4f:6e:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----