Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/7iKh_TZFj-LEwK0h_EPwM201YjU.mft
File:                     7iKh_TZFj-LEwK0h_EPwM201YjU.mft (raw, json)
Hash identifier:          9GPRAKsRnRMlhdVVcHeM1RtvtktfLLuWSrT5woAygtw=
Subject key identifier:   D9:9B:6A:E5:4B:4E:21:BC:B8:BF:26:95:57:10:2D:26:A7:14:C2:50
Authority key identifier: EE:22:A1:FD:36:45:8F:E2:C4:C0:AD:21:FC:43:F0:33:6D:35:62:35
Certificate issuer:       /CN=ee22a1fd36458fe2c4c0ad21fc43f0336d356235
Certificate serial:       0186E4F53866FA96BCB7E4DC35151759FA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iKh_TZFj-LEwK0h_EPwM201YjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/7iKh_TZFj-LEwK0h_EPwM201YjU.mft
Manifest number:          0772
Signing time:             Wed 15 Mar 2023 11:08:41 +0000
Manifest this update:     Wed 15 Mar 2023 11:08:41 +0000
Manifest next update:     Thu 16 Mar 2023 11:08:41 +0000
Files and hashes:         1: 6c3g6raFBL-uBs5rVhXNovTeUTU.roa (hash: YXTDfqvCNXiAVXT32c4Tljg0w/mnl9zRhDeIN/+0sSI=)
                          2: 7iKh_TZFj-LEwK0h_EPwM201YjU.crl (hash: 7nmHVes1l3O98OcU7BYniaODz8Zxlqxhk+Rm0g2MnCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:f5:38:66:fa:96:bc:b7:e4:dc:35:15:17:59:fa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee22a1fd36458fe2c4c0ad21fc43f0336d356235
        Validity
            Not Before: Mar 15 11:08:41 2023 GMT
            Not After : Mar 16 11:08:41 2023 GMT
        Subject: CN=d99b6ae54b4e21bcb8bf269557102d26a714c250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:0f:31:76:7b:47:45:fd:1d:09:75:9c:18:
                    ac:79:20:5b:a0:0c:78:ff:aa:86:02:3c:20:43:fc:
                    76:73:9f:2f:01:7d:a9:82:e3:34:95:6f:8d:bf:38:
                    67:39:56:fa:ef:3d:a3:1a:ed:1e:58:39:f5:fc:10:
                    4b:0d:4e:07:48:49:6a:55:f7:91:b2:ab:3a:97:4e:
                    cc:76:2c:cd:f9:73:a9:0b:f8:d5:9a:ce:01:8f:f8:
                    6e:ed:44:c6:40:2e:c2:39:7f:8b:0a:f6:83:2e:41:
                    27:c3:8b:4a:79:c4:d6:b7:03:60:48:ef:e4:9d:3b:
                    44:3d:c6:82:2d:af:7a:27:da:17:0c:64:c1:64:d1:
                    38:dd:63:68:09:26:70:cd:90:e8:dc:ca:fa:2c:ef:
                    c8:d1:8e:5f:07:6f:dd:db:76:ac:22:ba:1a:07:6f:
                    10:ba:94:e4:54:2e:6f:14:74:c7:0c:b2:76:ee:fb:
                    65:11:11:53:5a:0d:5b:97:ef:bb:30:4a:39:2e:e9:
                    b9:80:04:2f:de:b7:61:cf:6b:b1:23:de:91:ed:2d:
                    16:84:24:8f:48:99:e3:01:df:a2:c1:4c:bc:b7:cd:
                    e5:e3:53:08:17:d0:e0:f8:19:1c:80:1a:da:43:e8:
                    d9:6e:b0:05:d6:9f:25:46:f4:7d:93:4a:e8:82:1f:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9B:6A:E5:4B:4E:21:BC:B8:BF:26:95:57:10:2D:26:A7:14:C2:50
            X509v3 Authority Key Identifier:
                keyid:EE:22:A1:FD:36:45:8F:E2:C4:C0:AD:21:FC:43:F0:33:6D:35:62:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iKh_TZFj-LEwK0h_EPwM201YjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/7iKh_TZFj-LEwK0h_EPwM201YjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/7iKh_TZFj-LEwK0h_EPwM201YjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:45:97:db:87:3f:eb:9a:86:3f:60:ed:a6:16:fe:5e:9f:2e:
         25:c8:a5:e4:59:8d:ae:52:ff:4e:71:24:b7:33:c5:5b:fe:2e:
         c3:ef:37:e7:e9:1f:00:6a:e1:60:1d:a0:56:33:2c:5b:f7:f1:
         1f:d3:78:4c:d5:9a:9b:17:7c:1e:d8:1d:87:5b:08:09:c8:ba:
         60:75:58:e2:5b:e2:68:c1:7b:05:58:55:f4:4d:35:ac:50:b9:
         fd:ec:58:ad:c7:8a:45:b6:5a:b1:a1:01:f7:e0:cb:ca:25:7e:
         39:18:5c:e5:a0:e0:1b:18:5e:00:40:4d:ee:ca:33:74:90:e5:
         f4:d1:e5:0c:47:f5:c3:cb:bb:99:47:dc:02:8d:85:6d:a9:a0:
         ea:ff:4b:6d:d8:e6:5e:4a:9c:38:e1:99:df:3f:1f:b7:74:ee:
         52:88:d3:02:38:77:c7:4b:f8:a0:25:f9:69:1c:40:71:95:9b:
         3d:27:17:ba:5d:9f:5f:77:bd:47:1c:80:20:06:bf:07:8b:72:
         c2:17:f2:ab:06:da:90:e0:ca:83:ab:b2:e4:68:40:71:51:63:
         ad:00:6d:d8:44:49:8a:f8:00:2e:1d:2a:d6:26:e6:e3:db:10:
         22:f8:69:c5:f9:52:2d:a4:e6:04:99:cc:38:fd:f6:87:0d:50:
         3c:6b:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----