Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.mft
File:                     YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.mft (raw, json)
Hash identifier:          VXuHl6/IlNLVTQmGtVN1Ile9fktluxT90K3h6THZ4KM=
Subject key identifier:   A8:F3:6B:69:A6:A6:D4:A6:88:63:9A:1B:65:2D:46:75:79:48:9B:35
Authority key identifier: 60:73:B4:42:61:98:11:F9:06:9C:FF:D0:E4:27:79:A5:34:66:30:C6
Certificate issuer:       /CN=6073b442619811f9069cffd0e42779a5346630c6
Certificate serial:       0182159411DD363848B19DDDA31B7B7A4872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.mft
Manifest number:          0121
Signing time:             Tue 19 Jul 2022 08:30:01 +0000
Manifest this update:     Tue 19 Jul 2022 08:30:01 +0000
Manifest next update:     Wed 20 Jul 2022 08:30:01 +0000
Files and hashes:         1: NWL-eu5S_3GsxjW93sdPL5hRZUg.roa (hash: NNm9JwRqrKtPUvj5bABuoe0RABH7jKOFb1pZIFDCjnA=)
                          2: YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.crl (hash: 7wyUdBCHOWJ/kkrYzqHCr2rWMq8m1y9J4nMqASTx1QU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:15:94:11:dd:36:38:48:b1:9d:dd:a3:1b:7b:7a:48:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6073b442619811f9069cffd0e42779a5346630c6
        Validity
            Not Before: Jul 19 08:30:01 2022 GMT
            Not After : Jul 20 08:30:01 2022 GMT
        Subject: CN=a8f36b69a6a6d4a688639a1b652d467579489b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:68:7b:2a:53:83:20:7c:83:55:cb:02:43:
                    a8:81:82:d7:f9:aa:a6:02:41:59:76:c7:4e:00:22:
                    0e:d8:99:b2:4b:1d:be:03:7c:eb:bc:07:96:ad:ff:
                    65:a6:6b:f4:c1:23:1c:00:19:8e:cc:15:af:2f:be:
                    73:50:9a:30:db:34:c7:c3:38:1e:13:a9:7f:a8:1d:
                    85:f6:32:e3:9b:b5:55:5d:81:e5:58:48:82:a2:23:
                    ef:ab:c4:b4:ba:1b:dd:4b:91:d1:87:0c:f2:10:25:
                    c7:d4:72:8a:1b:50:9c:ea:f3:0b:45:d5:7d:48:a6:
                    87:e3:5b:7f:9f:04:d0:c3:6a:3a:12:52:39:7d:b8:
                    23:54:7d:92:77:f2:0c:a8:5d:8d:d2:2c:80:a5:85:
                    9d:42:7f:2e:c6:7b:7e:76:36:94:e1:ff:60:5d:cf:
                    16:9f:7f:6a:4f:8c:cb:35:aa:6e:17:f4:95:aa:1e:
                    11:4f:e1:e9:d8:95:74:dc:ca:f4:98:6e:0b:e8:39:
                    eb:fa:a5:36:36:0b:ad:78:f1:9b:f5:47:d0:3f:c7:
                    31:37:5e:4f:56:42:b9:9d:3e:4f:2a:74:3f:f9:54:
                    83:d7:11:8e:09:40:87:d5:f4:83:d4:e4:02:6d:6f:
                    bf:8c:cd:d5:c4:f2:76:b7:ba:aa:9f:74:89:d4:08:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:6B:69:A6:A6:D4:A6:88:63:9A:1B:65:2D:46:75:79:48:9B:35
            X509v3 Authority Key Identifier:
                keyid:60:73:B4:42:61:98:11:F9:06:9C:FF:D0:E4:27:79:A5:34:66:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:70:12:33:dd:e9:c7:dc:07:8e:bd:0c:2d:eb:2a:3a:e0:f5:
         15:ab:00:ba:60:93:9c:06:36:74:ff:32:f3:21:f7:52:4c:dc:
         e3:4b:e1:0d:14:ca:4e:a0:a4:91:ce:02:2a:17:7b:a8:5d:c3:
         56:aa:64:c1:02:5b:56:93:ea:b2:61:9a:f4:6e:a4:87:e2:c4:
         45:03:49:b4:e5:d7:53:7a:00:f4:57:97:5f:13:30:fe:88:b6:
         0a:dd:73:5c:16:6e:50:ef:36:d4:58:d7:bd:47:46:c5:3b:9a:
         b1:b9:d3:72:89:4c:dc:89:81:a5:d8:6f:d9:a0:ae:d6:e8:8c:
         ef:7f:3c:1e:b1:78:51:85:1e:f8:7e:54:1c:cf:49:7a:e3:e4:
         ab:12:43:59:68:b0:d5:96:03:7d:1c:00:f5:03:c9:d2:ca:c7:
         b1:6f:b3:fa:b2:0a:9a:85:0c:2a:e0:07:68:18:cd:39:50:39:
         e6:a2:73:ee:cf:5b:a8:25:37:5f:15:c7:01:42:f5:8b:46:78:
         1c:a9:a2:d9:9c:84:7c:5f:fa:0a:1a:18:b3:20:6f:1b:35:b7:
         6e:bb:5b:80:23:e9:1f:ee:89:75:50:68:e7:59:08:6e:90:4e:
         55:30:22:76:e3:70:d9:63:b5:db:68:2c:c5:98:37:1a:5b:10:
         6f:a9:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----