Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.mft
File:                     BWZHdQv1L3epyRwtaGToccGq-p8.mft (raw, json)
Hash identifier:          c9DLC8AJcrdrN0fuzShXxvD0LT3z3usC1bLlHerLNW0=
Subject key identifier:   E8:DC:71:8C:68:77:70:FD:2E:46:D0:80:DF:1B:4E:C8:51:60:24:04
Authority key identifier: 05:66:47:75:0B:F5:2F:77:A9:C9:1C:2D:68:64:E8:71:C1:AA:FA:9F
Certificate issuer:       /CN=056647750bf52f77a9c91c2d6864e871c1aafa9f
Certificate serial:       01864A86C2B4670B46A31F6358373E69B6B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWZHdQv1L3epyRwtaGToccGq-p8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.mft
Manifest number:          0C
Signing time:             Mon 13 Feb 2023 11:26:31 +0000
Manifest this update:     Mon 13 Feb 2023 11:26:31 +0000
Manifest next update:     Tue 14 Feb 2023 11:26:31 +0000
Files and hashes:         1: BWZHdQv1L3epyRwtaGToccGq-p8.crl (hash: rVCACl9HRo1U0lkguxoTj8lgi/HnI/cyMYJ/yiHviXA=)
                          2: hRsYtAHK6OUgpqgxD_NS-Sq4hmA.roa (hash: fCipxWQscGJ90OzGt/J5+ar7VwxV6Q11iqKdTL+xf2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4a:86:c2:b4:67:0b:46:a3:1f:63:58:37:3e:69:b6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056647750bf52f77a9c91c2d6864e871c1aafa9f
        Validity
            Not Before: Feb 13 11:26:31 2023 GMT
            Not After : Feb 14 11:26:31 2023 GMT
        Subject: CN=e8dc718c687770fd2e46d080df1b4ec851602404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:b6:1a:c1:b1:59:81:10:65:de:7a:4a:7c:
                    c4:3d:67:90:fa:b6:41:6c:42:17:5e:2a:24:99:d7:
                    d0:84:74:cf:df:76:a7:91:81:d3:93:38:f2:6a:80:
                    2b:2b:23:91:a6:5e:95:83:d6:db:12:3f:2a:f9:33:
                    21:28:5a:4c:2f:78:6a:18:8f:18:9c:a8:04:b6:cb:
                    0e:5c:67:cf:d1:03:a1:46:c7:c8:8c:7c:3b:4c:a6:
                    af:69:ff:e2:62:1d:b4:7c:ae:85:36:b9:b2:d0:bb:
                    54:c8:22:50:89:a4:4c:42:66:17:75:0d:c3:95:1e:
                    6c:3f:20:c6:b9:fe:56:03:dc:cd:26:bd:9e:b5:0a:
                    e8:11:38:b2:98:26:00:1d:6b:12:73:85:32:58:d0:
                    91:22:26:82:7e:a5:79:7c:3e:ef:d6:e9:2a:26:04:
                    b3:52:91:61:bd:7a:24:2c:8b:8b:1e:08:f9:86:34:
                    36:6e:f5:4b:91:6a:4c:37:5e:00:0c:2e:2a:e0:0a:
                    97:ad:6a:37:bc:34:d9:f7:81:94:22:aa:1b:bd:5b:
                    02:ac:15:1e:74:37:f2:4d:11:93:bb:82:f5:4a:4c:
                    e0:3a:6c:36:38:a7:e3:99:3f:2c:47:ca:45:e9:36:
                    dd:8c:09:ab:32:a4:c3:58:5e:e1:34:c1:a7:e1:d9:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DC:71:8C:68:77:70:FD:2E:46:D0:80:DF:1B:4E:C8:51:60:24:04
            X509v3 Authority Key Identifier:
                keyid:05:66:47:75:0B:F5:2F:77:A9:C9:1C:2D:68:64:E8:71:C1:AA:FA:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWZHdQv1L3epyRwtaGToccGq-p8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:44:c9:bc:37:61:74:4c:db:b1:ef:0a:1c:99:08:c3:ba:db:
         df:0d:61:2c:d8:10:95:c9:56:a5:51:f0:f6:91:d6:be:45:4d:
         3a:b9:f7:f9:62:1a:6a:91:02:44:17:8e:84:ca:4d:57:c8:04:
         ad:b2:45:4c:a3:6d:3f:8a:a9:76:c4:cb:33:b7:23:b9:3e:df:
         8d:a2:70:77:16:a4:40:c8:8a:29:30:ce:3e:a2:05:23:7a:30:
         8f:a6:6c:72:84:43:d8:60:d2:39:d7:4e:e4:0b:57:b1:3a:70:
         fa:a8:c6:48:43:97:39:12:55:f7:05:91:10:97:2b:0c:fd:21:
         45:a5:05:b9:c3:d3:b4:cc:51:7e:bb:c3:3e:55:64:e4:73:d8:
         f7:c7:b9:2c:39:8a:dc:c1:91:a4:22:5f:b8:49:3b:49:4a:bb:
         af:54:fb:3f:b7:9a:0b:d4:0f:fb:41:18:97:41:27:9d:b8:14:
         eb:3b:11:e2:83:ba:97:98:56:04:c0:36:e7:cd:63:8e:da:32:
         ac:37:d1:93:16:b7:1d:47:1c:28:bb:b8:49:33:e5:91:c1:8a:
         d8:1d:54:bb:2a:97:02:93:db:d8:31:01:51:d8:da:0f:f7:33:
         fe:a1:41:b1:33:d5:cf:f1:9b:fd:3b:61:db:5f:32:62:22:b8:
         50:3e:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----