Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa716c-6fc0-4469-9cc0-4c777112d874/1/xt0MaFjqmDAlGvhzt2gG1S9PSa0.mft
File:                     xt0MaFjqmDAlGvhzt2gG1S9PSa0.mft (raw, json)
Hash identifier:          O3SrrqKnkjs+mRBQjuRqYv+EO5BxxuTr67EmuWlvZS4=
Subject key identifier:   23:BE:F7:12:00:89:49:92:1E:2F:A6:43:C2:6B:5D:43:61:C2:F0:54
Authority key identifier: C6:DD:0C:68:58:EA:98:30:25:1A:F8:73:B7:68:06:D5:2F:4F:49:AD
Certificate issuer:       /CN=c6dd0c6858ea9830251af873b76806d52f4f49ad
Certificate serial:       0182E7E7B8BAF44613D31E12B842D9E9E343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xt0MaFjqmDAlGvhzt2gG1S9PSa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/aa716c-6fc0-4469-9cc0-4c777112d874/1/xt0MaFjqmDAlGvhzt2gG1S9PSa0.mft
Manifest number:          049B
Signing time:             Mon 29 Aug 2022 04:41:39 +0000
Manifest this update:     Mon 29 Aug 2022 04:41:39 +0000
Manifest next update:     Tue 30 Aug 2022 04:41:39 +0000
Files and hashes:         1: LOj9VDkcWchz-1bYGFwuHppwjpE.roa (hash: pf4k2GrJc5+HUsFaIRWzXrSR9ooY2NbFR2GOEgdLRIo=)
                          2: xt0MaFjqmDAlGvhzt2gG1S9PSa0.crl (hash: IqEKdmpSjdDiMdYLfwopjJVKYxEAEiS94gEDBPqlqmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e7:e7:b8:ba:f4:46:13:d3:1e:12:b8:42:d9:e9:e3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6dd0c6858ea9830251af873b76806d52f4f49ad
        Validity
            Not Before: Aug 29 04:41:39 2022 GMT
            Not After : Aug 30 04:41:39 2022 GMT
        Subject: CN=23bef712008949921e2fa643c26b5d4361c2f054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c2:df:d8:1d:9b:68:99:77:90:e0:ea:2e:bb:
                    62:e2:96:75:bc:5c:2f:e3:55:eb:9f:2c:6c:16:3f:
                    01:da:c0:75:fa:bc:2d:8d:37:e8:30:1f:90:7f:81:
                    7a:3b:f2:62:b1:5f:e0:be:b7:c3:eb:70:70:17:21:
                    07:0f:00:ee:67:9b:77:d7:45:ac:12:c2:0c:75:ae:
                    8d:b5:19:24:17:b7:f1:0d:14:87:de:96:10:78:c1:
                    19:f9:a9:73:c8:93:e3:bf:53:a9:47:57:71:31:ea:
                    6b:8a:90:8e:a5:5f:27:43:e1:b3:47:a2:65:4b:90:
                    eb:c0:01:9a:27:13:d7:28:2d:77:55:03:5d:54:ed:
                    fc:bb:ef:a8:42:d5:1e:c1:fd:63:ea:e5:dc:ac:ad:
                    15:e9:e0:8f:79:6e:d4:f4:ab:74:ee:5e:df:34:10:
                    49:49:d7:07:b7:07:0c:0f:c4:2d:61:32:75:6a:3d:
                    fa:82:0c:38:db:0a:39:91:17:ac:4c:d3:4c:51:cf:
                    9c:62:4e:aa:e7:52:85:2e:b4:2a:0b:ef:29:7e:d1:
                    71:2a:3e:c4:94:3a:ae:88:f1:76:4d:0d:96:9a:ea:
                    4b:21:dc:b2:f3:98:b3:14:70:84:c5:83:08:39:84:
                    12:44:c9:07:07:7b:48:96:90:ad:cc:51:d7:da:98:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BE:F7:12:00:89:49:92:1E:2F:A6:43:C2:6B:5D:43:61:C2:F0:54
            X509v3 Authority Key Identifier:
                keyid:C6:DD:0C:68:58:EA:98:30:25:1A:F8:73:B7:68:06:D5:2F:4F:49:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt0MaFjqmDAlGvhzt2gG1S9PSa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa716c-6fc0-4469-9cc0-4c777112d874/1/xt0MaFjqmDAlGvhzt2gG1S9PSa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa716c-6fc0-4469-9cc0-4c777112d874/1/xt0MaFjqmDAlGvhzt2gG1S9PSa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:8c:a3:39:66:58:75:eb:30:25:91:96:b8:25:8c:10:97:
         59:44:68:15:a3:73:11:b0:a3:5d:87:e0:fa:bb:83:df:42:91:
         91:0c:23:4d:18:22:85:83:64:7e:94:7e:f8:dd:fe:72:29:37:
         52:26:a8:e6:04:7f:f9:b6:dc:b9:46:f1:d6:d8:5e:f8:81:5e:
         bd:ec:6d:fe:8c:bb:a8:b5:9e:6d:db:ef:72:b1:33:8e:f7:95:
         21:92:b4:20:95:db:5a:35:3d:26:54:7c:8c:07:d7:19:63:c7:
         85:8e:a4:74:1d:50:4c:4e:05:28:78:93:cd:34:df:d7:d6:34:
         ca:9c:94:87:d0:ff:76:b2:94:41:b6:72:53:89:c5:f5:0c:f1:
         9c:5a:f5:64:45:6e:bd:87:d0:11:63:12:86:d3:4f:57:c6:33:
         96:b0:8d:bb:39:b9:a5:e5:64:d7:44:3a:3f:7b:98:ff:7f:bb:
         5b:e6:68:17:c1:91:84:83:8f:5e:ea:66:c9:f4:3d:05:77:1c:
         fa:c4:2d:66:eb:d7:ea:f5:5b:3e:ad:e9:c4:00:da:1e:1c:1f:
         bc:68:a2:a9:99:6c:91:d0:69:61:e5:ca:03:16:50:74:f1:97:
         16:ce:03:f2:7e:a3:22:7d:09:c6:ca:5a:9b:25:cd:2e:b7:0d:
         b9:b3:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----