Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/2iRdieE1vZXjSO5MSfoOfy9W298.mft
File:                     2iRdieE1vZXjSO5MSfoOfy9W298.mft (raw, json)
Hash identifier:          GaGzuwTi9Yq8Wy1EqKeCTyzo5J+rHDPCNwOVlPgB03E=
Subject key identifier:   E8:74:06:A2:C5:3A:99:6A:30:27:AB:04:2D:F7:7C:B5:04:5B:A6:79
Authority key identifier: DA:24:5D:89:E1:35:BD:95:E3:48:EE:4C:49:FA:0E:7F:2F:56:DB:DF
Certificate issuer:       /CN=da245d89e135bd95e348ee4c49fa0e7f2f56dbdf
Certificate serial:       8CE189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2iRdieE1vZXjSO5MSfoOfy9W298.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/2iRdieE1vZXjSO5MSfoOfy9W298.mft
Manifest number:          BC
Signing time:             Fri 27 May 2022 02:05:25 +0000
Manifest this update:     Fri 27 May 2022 02:05:25 +0000
Manifest next update:     Sat 28 May 2022 02:05:25 +0000
Files and hashes:         1: 0noBCWdeq7uALFbcuiw_sobdtbc.roa (hash: 9AUllFu08attdRtUq1Szj/ycZiPuz4w0xq4zS3d55dI=)
                          2: 2iRdieE1vZXjSO5MSfoOfy9W298.crl (hash: rDGmTRbQxa9RHnAwYqzzrEv2ccg+lziaQyn6i12DIpQ=)
                          3: bGYGRvJrrRyXb-84lxy845Rbrd8.roa (hash: Pq4HdE28Ele2bzMnbNQfuppXQjW+Zmev//bIh0I4FO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9232777 (0x8ce189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da245d89e135bd95e348ee4c49fa0e7f2f56dbdf
        Validity
            Not Before: May 27 02:05:25 2022 GMT
            Not After : May 28 02:05:25 2022 GMT
        Subject: CN=e87406a2c53a996a3027ab042df77cb5045ba679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:66:cf:5a:9c:0a:48:7a:28:5a:24:c3:14:df:
                    7e:a4:74:f3:93:10:78:33:c6:18:97:42:fa:99:e9:
                    5e:f2:28:99:96:b8:69:ee:6f:4a:9b:5a:ec:67:ac:
                    bb:b8:24:27:4d:50:99:2a:fc:1b:40:93:68:d5:7c:
                    68:7d:0d:70:f1:14:8c:ad:d2:e1:8f:23:d6:2d:c7:
                    fb:65:ce:1f:e0:97:32:d6:ea:69:75:bd:65:06:a8:
                    98:ea:29:6e:08:cb:cb:7b:4b:f7:4b:09:54:fb:2f:
                    3d:b8:4e:a7:f8:e2:0e:79:0c:96:9c:72:d6:d2:3c:
                    99:a4:c5:18:4a:bc:ca:57:c4:bc:8f:76:da:33:fa:
                    0f:f0:88:49:d7:8b:05:51:3b:9b:4d:c3:77:32:9a:
                    ff:03:32:7c:c3:0b:8b:86:e7:e4:f3:e8:e6:75:67:
                    9e:a9:aa:a0:2d:2a:73:72:26:84:2f:61:37:12:2e:
                    23:0f:08:52:39:ac:b5:85:e5:2a:a7:b0:be:c3:2b:
                    59:9f:fd:0b:7e:d7:70:1d:be:70:a7:61:5b:31:ce:
                    16:c2:d9:11:ca:81:ee:45:ed:42:65:d6:03:98:89:
                    f9:e6:02:5f:c1:41:50:f2:8d:41:32:ce:cb:34:23:
                    5f:11:df:55:c3:84:78:aa:02:fe:c3:c1:20:a7:86:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:06:A2:C5:3A:99:6A:30:27:AB:04:2D:F7:7C:B5:04:5B:A6:79
            X509v3 Authority Key Identifier:
                keyid:DA:24:5D:89:E1:35:BD:95:E3:48:EE:4C:49:FA:0E:7F:2F:56:DB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iRdieE1vZXjSO5MSfoOfy9W298.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/2iRdieE1vZXjSO5MSfoOfy9W298.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/2iRdieE1vZXjSO5MSfoOfy9W298.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:76:a2:db:bf:dd:8e:ac:fa:d3:e1:1c:26:3a:98:b4:bf:02:
         b8:79:97:ba:3c:ed:6f:5e:18:45:83:48:92:57:c3:3d:c6:fb:
         9e:b7:a8:75:3c:09:96:05:94:97:cb:0d:c2:4a:56:c3:53:f8:
         ce:55:86:55:f9:7e:91:f1:2c:ae:dc:68:28:41:da:53:8a:23:
         34:45:95:a2:bb:a3:fa:1a:6a:e2:fb:b3:bc:d7:91:45:90:be:
         1d:79:e7:af:ec:45:c5:3c:a1:24:f3:8d:30:16:24:29:3e:99:
         4c:a9:21:5d:70:29:c2:01:da:34:2c:85:34:35:0a:73:ff:6a:
         46:f3:14:84:46:ea:61:87:2e:d6:34:9c:fd:15:f8:5e:a6:8e:
         7b:1d:f2:3f:6a:03:cb:32:a0:18:8e:1e:29:b1:17:69:cf:2b:
         be:e0:df:29:cf:32:17:00:7f:88:30:6d:65:af:a8:f0:12:40:
         b1:ca:c3:b5:ec:99:69:f3:80:79:ea:f3:98:3c:bd:cc:64:b9:
         9a:4b:97:45:1d:96:42:d9:cb:1e:c0:7c:7c:d8:aa:3c:16:34:
         0c:da:cf:e8:3c:77:d3:86:c6:c0:7b:6f:0a:97:05:c3:1c:1d:
         4e:d2:f4:66:e6:7a:a8:2f:a3:b3:6b:51:1d:9f:97:9d:b0:58:
         cb:b4:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----