Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/14b812-6d92-47e3-bace-48f6179d26e5/1/RQdqf3C19AJCtprePJMegpHuDaY.mft
File:                     RQdqf3C19AJCtprePJMegpHuDaY.mft (raw, json)
Hash identifier:          CQIlI0MJACA2cNJ601qjBVo01rRPAMv4AWM3dxdFtUM=
Subject key identifier:   C4:D2:2C:FB:17:41:89:B9:BA:1B:8B:5A:7A:24:65:65:21:28:2F:E9
Authority key identifier: 45:07:6A:7F:70:B5:F4:02:42:B6:9A:DE:3C:93:1E:82:91:EE:0D:A6
Certificate issuer:       /CN=45076a7f70b5f40242b69ade3c931e8291ee0da6
Certificate serial:       0182B5599F030F4BA05819920BEC368CEC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQdqf3C19AJCtprePJMegpHuDaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/14b812-6d92-47e3-bace-48f6179d26e5/1/RQdqf3C19AJCtprePJMegpHuDaY.mft
Manifest number:          0A72
Signing time:             Fri 19 Aug 2022 09:05:25 +0000
Manifest this update:     Fri 19 Aug 2022 09:05:25 +0000
Manifest next update:     Sat 20 Aug 2022 09:05:25 +0000
Files and hashes:         1: 0d1v7exAiCE6sac5BdghK6x-ckU.roa (hash: Hr5AdPsMvJzd2qtnfHYkeIsXAApwx/4aP85KkVv7WeY=)
                          2: RQdqf3C19AJCtprePJMegpHuDaY.crl (hash: y63Ozcl9zqhK2tZebZB3dLY3bOyT2jGNnjEom8o9dXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b5:59:9f:03:0f:4b:a0:58:19:92:0b:ec:36:8c:ec:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45076a7f70b5f40242b69ade3c931e8291ee0da6
        Validity
            Not Before: Aug 19 09:05:25 2022 GMT
            Not After : Aug 20 09:05:25 2022 GMT
        Subject: CN=c4d22cfb174189b9ba1b8b5a7a24656521282fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:74:56:f7:e5:39:8d:76:88:e2:38:e2:87:
                    12:2e:24:ff:56:42:53:15:0e:27:11:40:c0:66:7f:
                    ae:23:60:51:e2:a7:2c:8b:4b:a9:6f:a4:56:cd:22:
                    95:3b:94:a2:e9:c5:53:a1:d4:7d:03:2c:63:56:62:
                    04:bf:16:84:d2:b7:34:ad:94:53:22:08:a1:e7:70:
                    e8:aa:4a:98:33:47:8b:87:c5:5d:c7:e8:25:af:c3:
                    a5:0f:96:8a:37:b9:91:fe:44:2f:b5:f6:4c:5f:15:
                    36:85:bc:7c:3f:29:7d:0a:b3:6e:6a:d0:ce:6b:12:
                    18:1f:82:6c:8f:36:a7:76:38:5e:09:a3:66:56:66:
                    68:85:7c:d6:0c:a6:bf:3c:37:c7:93:d9:79:67:c2:
                    cd:0f:d7:0b:a6:9f:b5:cf:d4:65:07:ea:22:7f:19:
                    24:3e:d5:6d:c7:ce:b1:9c:78:cc:26:a9:85:3a:6d:
                    83:b9:d7:5f:41:71:d8:ea:e8:01:c8:ba:af:28:00:
                    6f:c9:01:81:16:36:92:32:70:50:ea:09:d1:ab:5e:
                    dd:98:27:eb:4c:b3:6c:e0:b9:68:e0:ab:53:49:f4:
                    0c:db:10:68:20:0f:bd:d3:03:96:80:5f:ef:36:53:
                    23:c6:c3:26:f4:28:26:11:75:37:02:25:91:ab:57:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D2:2C:FB:17:41:89:B9:BA:1B:8B:5A:7A:24:65:65:21:28:2F:E9
            X509v3 Authority Key Identifier:
                keyid:45:07:6A:7F:70:B5:F4:02:42:B6:9A:DE:3C:93:1E:82:91:EE:0D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQdqf3C19AJCtprePJMegpHuDaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/14b812-6d92-47e3-bace-48f6179d26e5/1/RQdqf3C19AJCtprePJMegpHuDaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/14b812-6d92-47e3-bace-48f6179d26e5/1/RQdqf3C19AJCtprePJMegpHuDaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:d4:e6:5e:0b:2c:6a:74:09:52:2e:4d:ec:0b:49:66:e8:
         82:e1:05:c0:f2:7e:be:19:fc:7b:f5:b2:7e:9b:bb:39:bf:64:
         7c:90:bb:a3:1d:68:33:f9:53:8c:87:17:d8:43:8f:8b:42:f2:
         3c:6b:0a:3d:b9:96:a1:6b:e5:77:70:9f:67:98:9e:3a:4b:8d:
         7f:5b:d7:4f:c9:7c:96:7b:bd:ff:20:0b:4f:53:92:5b:39:aa:
         6e:d7:ee:26:66:b8:37:a7:55:ee:36:8f:0e:3d:cc:73:cc:eb:
         37:62:2b:a7:dd:29:cc:da:e5:b3:a3:c8:64:4a:e5:f2:d9:54:
         d8:85:50:ef:35:2a:93:3e:b3:b9:7d:7b:36:c3:ec:79:5e:1f:
         9f:40:51:4c:06:b3:f7:26:39:e9:a7:73:7d:3e:81:73:c8:4f:
         b6:a7:54:75:ff:11:6e:ff:7d:e0:9b:a4:fd:7c:57:ca:bd:89:
         49:02:fc:42:2c:53:53:b0:9d:eb:84:3b:bc:c4:6d:18:2a:1a:
         6a:85:c1:cc:30:72:1e:06:45:24:f5:87:4e:1e:c8:d5:e0:14:
         a2:ca:ca:d3:b1:03:47:bf:8b:95:59:e9:55:80:8b:bb:3e:de:
         a3:ff:a2:0c:29:14:db:3d:44:40:2c:f5:d7:8d:42:fb:3e:12:
         b2:07:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----