Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/66431f-6e9b-4bf2-a471-85374c3345d3/1/Mg7HIMDpY6Azb84yaxeY2_riiTU.mft
File:                     Mg7HIMDpY6Azb84yaxeY2_riiTU.mft (raw, json)
Hash identifier:          Hu/f74Yb8QeOxnj3efCgPIemr1Gv24iKRtbSOcXDguk=
Subject key identifier:   39:B8:6D:3E:5F:B1:DC:26:82:0D:0E:DD:ED:88:0D:28:F3:8D:A9:A6
Authority key identifier: 32:0E:C7:20:C0:E9:63:A0:33:6F:CE:32:6B:17:98:DB:FA:E2:89:35
Certificate issuer:       /CN=320ec720c0e963a0336fce326b1798dbfae28935
Certificate serial:       0183D4D95078E7E5503B0E787156E4FAA527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mg7HIMDpY6Azb84yaxeY2_riiTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/66431f-6e9b-4bf2-a471-85374c3345d3/1/Mg7HIMDpY6Azb84yaxeY2_riiTU.mft
Manifest number:          05
Signing time:             Fri 14 Oct 2022 04:55:55 +0000
Manifest this update:     Fri 14 Oct 2022 04:55:55 +0000
Manifest next update:     Sat 15 Oct 2022 04:55:55 +0000
Files and hashes:         1: Mg7HIMDpY6Azb84yaxeY2_riiTU.crl (hash: Tr5FoHHV+J7GupmEeGOeRqemdd+b/7Uos9XUzTmjJDk=)
                          2: cLJWO1SRCfYqLHlFDSs4HgyyPTE.roa (hash: 7fU9O4Cw+KB3AEhEKvnFFTjlMF+3ypueLEHfymoSJTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d4:d9:50:78:e7:e5:50:3b:0e:78:71:56:e4:fa:a5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320ec720c0e963a0336fce326b1798dbfae28935
        Validity
            Not Before: Oct 14 04:55:55 2022 GMT
            Not After : Oct 15 04:55:55 2022 GMT
        Subject: CN=39b86d3e5fb1dc26820d0edded880d28f38da9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:90:2d:f0:97:76:53:dd:7a:97:77:fe:6f:
                    f7:8a:5f:c8:a0:f2:de:f7:de:59:52:93:80:f2:ac:
                    1b:27:13:bc:bf:d9:c3:19:80:f4:fc:7f:f1:c1:ba:
                    39:3b:d5:84:ea:a5:82:68:f1:cb:e6:ac:08:44:3b:
                    98:3c:85:35:6e:7e:d2:58:a5:f1:3c:1b:1d:15:9f:
                    28:10:cb:8e:8e:c6:e8:a9:02:50:07:3e:63:24:78:
                    80:15:6e:81:f2:ac:78:9d:04:72:1d:93:9d:ea:fc:
                    56:9e:61:8f:6b:5e:44:59:16:20:bf:83:8b:1e:3d:
                    a0:b6:f5:ae:4c:4a:ce:45:d3:b6:d0:74:03:de:4c:
                    4f:2f:bc:d2:95:c0:37:1b:17:70:7a:c5:9b:fa:e8:
                    2d:d6:55:14:3d:e2:2b:e0:d2:6f:db:db:19:8a:53:
                    de:27:05:98:17:b3:67:59:3b:2b:0e:30:06:7b:3e:
                    57:e4:aa:bd:6d:5a:d5:fc:26:92:fa:65:21:f2:b1:
                    18:24:42:13:4c:21:49:ad:72:df:d3:33:26:be:40:
                    66:1d:57:df:a8:46:6e:99:61:99:fb:60:f4:c9:0e:
                    7a:34:ba:df:50:73:80:f3:f6:d6:e9:e8:75:c5:22:
                    4d:5f:12:d7:b0:f1:89:73:cf:b6:dc:08:01:c5:4d:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:6D:3E:5F:B1:DC:26:82:0D:0E:DD:ED:88:0D:28:F3:8D:A9:A6
            X509v3 Authority Key Identifier:
                keyid:32:0E:C7:20:C0:E9:63:A0:33:6F:CE:32:6B:17:98:DB:FA:E2:89:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg7HIMDpY6Azb84yaxeY2_riiTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/66431f-6e9b-4bf2-a471-85374c3345d3/1/Mg7HIMDpY6Azb84yaxeY2_riiTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/66431f-6e9b-4bf2-a471-85374c3345d3/1/Mg7HIMDpY6Azb84yaxeY2_riiTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8a:ca:b1:47:fc:67:52:e2:1f:8c:8a:45:27:c6:1b:32:c2:
         01:c7:81:47:0d:e2:cc:ae:fc:1a:8f:28:c5:fe:99:70:1c:a2:
         d4:21:52:a7:6b:e0:cc:f4:fe:69:6c:a7:8a:6b:21:b9:0b:3a:
         3b:ee:d4:b9:06:d4:11:fe:a0:2b:45:4e:d5:d5:f0:b0:a9:00:
         3e:41:26:28:8e:df:44:4f:56:eb:fa:72:2b:52:6b:15:55:ac:
         9b:56:30:8e:c1:44:61:9f:70:7e:29:67:b3:ad:65:84:89:97:
         1d:a4:ad:61:d2:fa:4e:64:dc:af:72:1f:6e:b9:a8:e9:32:37:
         f7:e3:f6:b2:b0:ab:72:77:a7:84:5b:1d:0c:8c:7b:ee:02:25:
         f4:05:3c:25:ef:11:d9:06:3b:eb:64:40:85:db:19:d8:28:c4:
         03:8a:91:f1:b1:7f:0d:fc:db:74:eb:8b:5f:77:e4:69:f3:60:
         f4:65:fe:64:95:86:f3:5c:81:dd:ef:ca:1f:95:cd:a9:b8:e5:
         9f:44:3f:8c:f7:05:35:7c:68:63:f5:b2:11:cd:ae:e2:de:2e:
         20:81:dd:f8:c8:41:be:66:1b:c5:ab:70:ce:ba:ad:25:dd:16:
         44:49:e1:42:59:7b:83:e4:39:6c:d6:ea:8e:e8:a3:38:4b:31:
         c9:21:48:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----