Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KOH0LFPzHXXRYVatug-uAr-RekQ.mft
File:                     KOH0LFPzHXXRYVatug-uAr-RekQ.mft (raw, json)
Hash identifier:          yNmpBxR/MhXYKp2JuLHdeEBp3nYQFBp2UPQg32+yWpM=
Subject key identifier:   AD:81:9F:A7:66:17:0D:61:DF:23:DC:55:50:74:5A:D5:60:6E:63:A2
Authority key identifier: 28:E1:F4:2C:53:F3:1D:75:D1:61:56:AD:BA:0F:AE:02:BF:91:7A:44
Certificate issuer:       /CN=28e1f42c53f31d75d16156adba0fae02bf917a44
Certificate serial:       09B39E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KOH0LFPzHXXRYVatug-uAr-RekQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KOH0LFPzHXXRYVatug-uAr-RekQ.mft
Manifest number:          0864
Signing time:             Wed 23 Feb 2022 03:29:04 +0000
Manifest this update:     Wed 23 Feb 2022 03:29:04 +0000
Manifest next update:     Thu 24 Feb 2022 03:29:04 +0000
Files and hashes:         1: CMpwvjkuiclc4d1mUMKWru0Y9z8.roa (hash: wHP2P7chk81skvWCQsbblcjGUn6+oyrHxpEXF/CSI7E=)
                          2: KOH0LFPzHXXRYVatug-uAr-RekQ.crl (hash: Z1GMzrpTusCWEXCHNaPXzYIOXPHSGb5TlPOeXRiy0Do=)
                          3: KU6WsG4Jgu8dwIeB4c67CcrMWH8.roa (hash: 1EcpW84Pp+pOYcxHPgPlWRiYqcCBh8E9ltjtJeYglhs=)
                          4: TSuDXySeqCfvvdAXTpU2McQk98E.roa (hash: /zytMHddKxfAqzQSuF/RTVdnLq1s3V6F3v6rBQgc90A=)
                          5: TeFzi6U5_q1SwpyicESUQv3uqmU.roa (hash: 28h9nPf7lA3/7ZiEsTxdSDpAVJ4vpFb5oMGIiP87A8g=)
                          6: v8JS1zr37lVGQKX0W1D5CFyIFBw.roa (hash: bVRxm+PgjooY8pOZSyKTzWzJ5+aaGxuufTXZgyU3woA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162766343 (0x9b39e07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f42c53f31d75d16156adba0fae02bf917a44
        Validity
            Not Before: Feb 23 03:29:04 2022 GMT
            Not After : Feb 24 03:29:04 2022 GMT
        Subject: CN=ad819fa766170d61df23dc5550745ad5606e63a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:e5:8e:85:9c:de:ff:7e:3e:cd:39:ad:a9:
                    3a:27:4d:28:a3:bd:32:80:2f:2b:10:db:e3:06:36:
                    7f:be:ef:c1:fe:39:15:ae:b9:64:ac:de:86:aa:4d:
                    09:1a:1e:9a:f6:62:8a:ca:f2:98:06:29:52:aa:06:
                    9c:3b:20:8a:94:5f:86:d4:44:e2:f1:4c:47:5d:78:
                    79:9e:98:a8:ed:43:d4:7b:56:5d:f6:ea:2a:6c:85:
                    fd:2f:17:29:b2:f4:f9:da:98:38:0e:f9:31:94:0b:
                    cb:3b:5c:da:e2:97:7c:c2:9a:40:50:90:20:c9:f8:
                    b0:c0:0e:5b:a3:39:3e:ea:aa:86:0b:0c:93:1d:21:
                    08:09:f9:4c:7a:bf:76:48:2c:c8:97:7b:3f:7d:2a:
                    13:8e:2c:95:a1:f5:93:66:c4:5b:23:da:50:d0:04:
                    58:ff:81:78:18:3a:23:c2:69:f7:dd:db:c5:21:aa:
                    31:60:12:9b:1e:90:67:de:ed:3f:98:74:09:7c:27:
                    80:b8:fd:51:1d:11:cf:23:96:60:6a:c6:12:64:da:
                    e6:d8:5d:2c:20:be:da:d9:1e:85:55:69:43:7b:89:
                    9c:de:a7:b5:c3:f5:99:0f:ca:40:03:b1:55:88:77:
                    fe:01:61:f0:c0:6f:1c:9c:e3:90:37:77:72:fa:9d:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:81:9F:A7:66:17:0D:61:DF:23:DC:55:50:74:5A:D5:60:6E:63:A2
            X509v3 Authority Key Identifier:
                keyid:28:E1:F4:2C:53:F3:1D:75:D1:61:56:AD:BA:0F:AE:02:BF:91:7A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KOH0LFPzHXXRYVatug-uAr-RekQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KOH0LFPzHXXRYVatug-uAr-RekQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KOH0LFPzHXXRYVatug-uAr-RekQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:b0:a8:03:4f:6b:3f:0c:84:77:c9:4e:43:b9:61:26:7d:
         1f:b8:2f:8b:51:01:f1:2d:c2:29:44:f2:50:46:d9:d1:6f:7f:
         ed:f3:c6:fe:58:c8:93:1a:cb:75:fe:09:03:9b:91:69:e5:7f:
         6b:47:e0:b9:10:77:fc:15:19:5c:d9:7a:28:30:34:32:d8:03:
         30:b9:9e:3c:cf:c0:71:bc:b5:a1:dd:d4:dc:35:1b:57:23:33:
         28:c3:ef:50:78:4f:5e:a6:c0:a8:ea:0d:f0:12:16:33:21:16:
         a1:87:99:8e:93:83:0e:1c:91:1c:b1:7f:ff:48:fb:bb:85:64:
         bd:21:59:36:e0:8b:e6:e3:54:49:c3:64:b9:df:b6:b6:20:23:
         91:58:2d:8a:ca:2f:74:e1:b6:7e:b1:7c:33:53:ac:81:4e:9a:
         cd:fa:91:b1:43:ef:78:c0:b6:a1:cc:94:a7:1f:34:78:53:dd:
         c0:d9:2e:0e:7c:87:13:57:3d:2f:af:0d:f2:69:cb:6c:be:2e:
         78:95:9a:63:9e:33:1a:50:cb:99:04:f4:43:6f:93:87:0f:de:
         28:6a:5e:53:47:78:08:95:fe:9a:11:b0:c0:3f:e7:9b:4b:f4:
         5b:d7:68:43:91:68:35:97:00:cb:93:ab:45:98:b7:da:33:af:
         ad:44:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----