Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.mft
File:                     vq0i1TCtLl-opRJL0FqAPBh2rM0.mft (raw, json)
Hash identifier:          iVcwl782DPH1DsWkbpl+PJzpC4a7MTYJxK3ugZPZphk=
Subject key identifier:   33:57:70:13:22:B7:13:82:33:5D:41:D5:9B:0D:BE:C8:FF:2C:20:1D
Authority key identifier: BE:AD:22:D5:30:AD:2E:5F:A8:A5:12:4B:D0:5A:80:3C:18:76:AC:CD
Certificate issuer:       /CN=bead22d530ad2e5fa8a5124bd05a803c1876accd
Certificate serial:       0182685FEAA6F0F239BB177108D46418403D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vq0i1TCtLl-opRJL0FqAPBh2rM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.mft
Manifest number:          0A40
Signing time:             Thu 04 Aug 2022 10:21:32 +0000
Manifest this update:     Thu 04 Aug 2022 10:21:32 +0000
Manifest next update:     Fri 05 Aug 2022 10:21:32 +0000
Files and hashes:         1: n1_XsSWu0O01boqrftt3Tj5kW-Q.roa (hash: kHe3LvMm1Q+9trR/P6altk1cVJjrdVHK8aEDEcoM24o=)
                          2: vq0i1TCtLl-opRJL0FqAPBh2rM0.crl (hash: 5reWQ9YLen+7OUOR1Lrey1wjb5rAE11QWfUK1QfPpWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:68:5f:ea:a6:f0:f2:39:bb:17:71:08:d4:64:18:40:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bead22d530ad2e5fa8a5124bd05a803c1876accd
        Validity
            Not Before: Aug  4 10:21:32 2022 GMT
            Not After : Aug  5 10:21:32 2022 GMT
        Subject: CN=3357701322b71382335d41d59b0dbec8ff2c201d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:d0:7d:f9:e1:8e:e9:2f:90:7a:73:eb:5c:
                    44:d9:9b:11:db:f7:74:53:55:e4:0f:81:9d:90:f7:
                    d8:30:95:82:f4:e2:5a:16:c8:3f:94:8f:51:39:8c:
                    e5:17:8e:8a:2f:e9:65:a9:6a:47:a7:f4:ce:80:4a:
                    d9:c6:a9:d8:df:e9:64:91:cc:3d:bd:ca:ae:b3:d5:
                    f7:3d:af:10:ea:ab:36:fd:8c:2d:44:ab:a6:8d:07:
                    1a:4a:96:d4:02:47:f3:db:45:40:75:92:e8:f7:40:
                    30:f6:15:98:76:ee:91:b5:d6:8f:21:60:52:24:a1:
                    0c:c3:ce:95:3a:83:d6:f0:d3:ee:0e:0e:10:a0:86:
                    ed:e1:db:29:a5:be:33:3e:c9:67:9e:4a:bf:f9:9e:
                    20:38:1a:39:00:39:74:b5:4e:a4:96:e5:f6:e1:0b:
                    ea:7c:f2:26:2a:b2:93:46:3a:d2:bc:bc:bc:95:03:
                    7d:f7:d9:3b:69:af:fb:e8:cc:57:9f:95:96:fc:ca:
                    86:a9:38:39:77:58:7f:91:0c:c7:c1:43:75:c1:db:
                    72:52:74:4b:ce:bd:47:9b:92:08:85:bd:d4:fe:c7:
                    15:37:b3:18:a2:4d:95:5e:7a:3c:c6:5a:b7:37:86:
                    9c:0c:89:38:98:75:10:b7:af:8b:77:58:1d:82:eb:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:70:13:22:B7:13:82:33:5D:41:D5:9B:0D:BE:C8:FF:2C:20:1D
            X509v3 Authority Key Identifier:
                keyid:BE:AD:22:D5:30:AD:2E:5F:A8:A5:12:4B:D0:5A:80:3C:18:76:AC:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vq0i1TCtLl-opRJL0FqAPBh2rM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c5:25:0b:c2:9c:c9:d6:92:aa:e6:01:7b:fc:a7:b0:a3:63:
         e5:d5:db:32:c7:4a:22:7e:ad:8b:e1:98:38:9d:a5:67:53:55:
         21:77:08:71:4d:2e:97:4a:ae:6d:f9:38:c8:2d:b1:b3:cc:90:
         c6:4c:46:05:3f:ff:7e:92:7a:c6:40:60:fd:3d:fd:06:b7:a3:
         7c:f1:68:7c:3a:d2:12:e8:d5:90:bf:1d:16:5c:9c:e1:cc:e0:
         7b:ea:da:c3:51:63:28:a8:92:70:eb:64:17:5f:7e:86:2a:0b:
         22:d1:ee:cf:b8:dd:34:bd:e6:78:7f:9b:6a:ce:7f:0e:54:ec:
         e2:33:c3:bd:8b:21:53:75:34:1a:fa:cd:18:6c:e2:c5:7f:d3:
         3a:99:25:c0:29:57:96:10:e9:5d:4e:0c:1a:25:93:1c:5e:b6:
         43:10:5b:d2:45:ea:65:f7:a6:44:4f:d2:87:ad:f6:44:91:5e:
         4b:58:06:3b:4f:00:19:f7:5e:f5:f7:e5:0b:5f:79:2a:f0:41:
         9b:62:d7:4e:67:ab:f6:4e:1f:db:d3:5a:31:6b:c8:ea:33:2b:
         bb:88:91:cd:17:14:f1:8d:6a:64:c5:34:d2:92:73:52:1a:99:
         6d:25:86:54:eb:35:50:71:4a:83:45:a3:d1:de:03:10:ec:17:
         e8:ba:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----