Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/7C8CcPQUBNsfAHgw-_5csEJk2W4.mft
File:                     7C8CcPQUBNsfAHgw-_5csEJk2W4.mft (raw, json)
Hash identifier:          6orVqbwreeFvTjKg3yJEYKs+7AXtmNe0Ln/IsaY87iA=
Subject key identifier:   44:B9:CC:78:E9:6D:3D:2C:BC:9C:BD:F3:A2:95:55:BD:7A:C5:AE:29
Authority key identifier: EC:2F:02:70:F4:14:04:DB:1F:00:78:30:FB:FE:5C:B0:42:64:D9:6E
Certificate issuer:       /CN=ec2f0270f41404db1f007830fbfe5cb04264d96e
Certificate serial:       0C9459D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7C8CcPQUBNsfAHgw-_5csEJk2W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/7C8CcPQUBNsfAHgw-_5csEJk2W4.mft
Manifest number:          08DE
Signing time:             Wed 06 Apr 2022 01:49:37 +0000
Manifest this update:     Wed 06 Apr 2022 01:49:37 +0000
Manifest next update:     Thu 07 Apr 2022 01:49:37 +0000
Files and hashes:         1: 7C8CcPQUBNsfAHgw-_5csEJk2W4.crl (hash: 31jxmjDK6Oa46mTvRMjgyt/jSdzwOEEC6+5MRrfLdnU=)
                          2: uVubQkOy6hY0s8Ndu_WkRGvxbFw.roa (hash: 7gZ2Do7S9tKoiv9ZlZ6+YE1w+EWkWiIYehXCUjI0Yl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211048921 (0xc9459d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2f0270f41404db1f007830fbfe5cb04264d96e
        Validity
            Not Before: Apr  6 01:49:37 2022 GMT
            Not After : Apr  7 01:49:37 2022 GMT
        Subject: CN=44b9cc78e96d3d2cbc9cbdf3a29555bd7ac5ae29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:39:ae:98:da:1a:36:7d:10:b5:f6:bc:c3:
                    75:37:8c:ec:f2:84:8e:8c:42:da:73:a1:0b:50:85:
                    3b:3e:db:88:02:2d:a9:be:d0:1d:68:71:c6:1b:ae:
                    a6:12:16:eb:e5:0f:00:84:19:3a:fe:9b:a6:b4:cf:
                    37:e6:08:e1:21:90:56:f9:74:37:51:66:72:e9:8b:
                    7f:ec:da:cf:d4:18:45:c8:45:22:c1:56:4b:4f:73:
                    59:86:80:9e:02:f0:6a:f4:9d:cf:30:88:43:17:52:
                    55:f2:28:68:76:d4:8e:bf:74:ad:89:78:0a:81:a3:
                    28:94:77:7d:53:00:ba:df:9a:ba:d4:d8:d8:f6:ab:
                    e3:48:71:e4:01:29:ea:08:19:38:89:5e:3f:1d:6d:
                    29:98:11:48:2b:e2:48:98:2e:e1:c7:44:30:72:cb:
                    b0:9e:09:0e:fc:60:46:a4:0d:be:8b:12:b2:6a:ab:
                    eb:e6:11:d8:e7:5e:ce:0c:92:e6:52:ba:e3:06:fa:
                    1c:f0:54:7b:74:8b:e5:dc:ff:79:bd:f2:5e:5c:7b:
                    d6:52:3e:53:31:2b:6c:68:d6:d6:27:0a:64:56:14:
                    f3:e1:8e:5e:46:6a:4f:b9:2d:a6:fc:05:43:f9:2c:
                    9e:f3:68:a1:bf:2b:67:af:d5:ae:a7:e6:31:a0:9c:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B9:CC:78:E9:6D:3D:2C:BC:9C:BD:F3:A2:95:55:BD:7A:C5:AE:29
            X509v3 Authority Key Identifier:
                keyid:EC:2F:02:70:F4:14:04:DB:1F:00:78:30:FB:FE:5C:B0:42:64:D9:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C8CcPQUBNsfAHgw-_5csEJk2W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/7C8CcPQUBNsfAHgw-_5csEJk2W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/7C8CcPQUBNsfAHgw-_5csEJk2W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:07:45:03:fc:84:bb:06:a8:d4:ff:5e:15:f6:4e:d1:22:7b:
         f0:1b:53:1e:fe:8b:e4:bd:c0:6e:5c:f8:90:76:65:d1:bf:da:
         a2:1f:4c:71:f9:dd:69:3c:f7:57:89:fd:6d:9c:63:61:cd:87:
         91:ba:b5:c2:8d:d5:79:e9:f9:04:bc:4b:59:8e:39:c5:fd:98:
         67:99:6e:f7:71:a3:f9:86:01:36:9b:f3:ca:4a:e2:98:c1:16:
         05:90:c2:a4:2a:2e:09:f5:5c:1b:2d:08:27:c7:c0:85:1f:f1:
         8f:43:ab:92:78:9d:cc:48:75:d2:22:5a:8e:0a:72:d3:f8:eb:
         f3:da:49:bc:41:39:b8:9c:fe:ce:1a:52:df:a2:02:e6:65:8f:
         85:a0:9c:f7:df:98:27:84:ca:01:c1:3c:a0:ad:cc:86:e9:4d:
         64:89:c1:a2:92:34:5d:5d:c2:46:c9:97:d1:6e:da:8d:1b:91:
         c1:74:9a:2b:9d:8b:49:e9:08:3a:7d:6f:1c:a7:14:e4:ed:ca:
         29:49:fb:0b:65:e4:8b:e3:21:4c:b7:7d:d9:a3:9d:5e:be:a7:
         03:96:8a:3d:31:8e:e0:9e:c2:49:54:84:10:7d:ed:d3:e3:e3:
         97:98:1f:66:1b:ad:f4:73:44:a5:fe:d9:b8:94:9f:84:e3:c8:
         5b:16:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----