Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dacfd9-8e16-4cbc-88f8-79e8d60b6158/1/xakxy8DOUBaqWVzeBAYBQ8CXNgE.mft
File:                     xakxy8DOUBaqWVzeBAYBQ8CXNgE.mft (raw, json)
Hash identifier:          ava3L8/rBLCtb5pmNF2rmz3LFxNuox/wzkx+7DNeuK4=
Subject key identifier:   B3:52:73:76:5F:95:62:96:52:82:1D:AB:E0:23:D0:1F:07:52:84:E5
Authority key identifier: C5:A9:31:CB:C0:CE:50:16:AA:59:5C:DE:04:06:01:43:C0:97:36:01
Certificate issuer:       /CN=c5a931cbc0ce5016aa595cde04060143c0973601
Certificate serial:       04A03865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xakxy8DOUBaqWVzeBAYBQ8CXNgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/dacfd9-8e16-4cbc-88f8-79e8d60b6158/1/xakxy8DOUBaqWVzeBAYBQ8CXNgE.mft
Manifest number:          0614
Signing time:             Wed 22 Jun 2022 06:05:12 +0000
Manifest this update:     Wed 22 Jun 2022 06:05:12 +0000
Manifest next update:     Thu 23 Jun 2022 06:05:12 +0000
Files and hashes:         1: bfQJg1dzhO9nnPMkgAtLTXq7tDY.roa (hash: kXyU4saEnPNlj01ERgMuEnKBS6YAzeOYEI/FuWXCALc=)
                          2: xakxy8DOUBaqWVzeBAYBQ8CXNgE.crl (hash: UkaamzCLUv300t+XeFC8bNbb8vdkYRX5a6ky22CgrPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77609061 (0x4a03865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a931cbc0ce5016aa595cde04060143c0973601
        Validity
            Not Before: Jun 22 06:05:12 2022 GMT
            Not After : Jun 23 06:05:12 2022 GMT
        Subject: CN=b35273765f95629652821dabe023d01f075284e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:bb:62:66:47:ba:30:23:00:5a:f2:8a:a3:
                    7f:a6:c3:a7:a0:83:0f:7f:cf:26:f2:78:64:bc:8d:
                    fa:2a:45:33:19:d9:90:df:d2:14:26:4a:aa:43:74:
                    9e:d8:df:d3:9c:21:78:69:66:e4:17:0a:a5:c9:84:
                    5c:f0:6a:0b:53:6a:4f:9d:93:15:74:95:b2:f0:9e:
                    ce:81:fa:f7:f4:77:e9:61:f0:2a:5f:26:42:90:68:
                    94:4e:8e:c0:92:6d:55:98:ac:8d:ce:ec:c0:83:cf:
                    d2:d4:31:81:c5:72:0c:29:22:ec:21:42:00:57:4a:
                    a7:3c:1f:7c:83:44:43:7f:f9:39:19:c8:b2:b2:fb:
                    d4:ff:91:43:5c:ff:ad:fe:f4:3f:7c:84:57:34:d0:
                    f0:cb:2c:05:05:25:de:f9:79:3f:2a:10:00:1c:49:
                    0a:c4:ad:a5:11:0b:38:17:d6:f2:fb:a9:a9:a0:07:
                    74:a4:83:7f:b4:c6:ae:48:51:86:d1:72:95:d1:36:
                    c5:3d:29:8e:18:d7:00:aa:9b:0c:ce:7d:5a:40:bb:
                    5c:f6:fe:f5:8b:de:a7:8d:3d:d9:ce:7e:4c:bc:48:
                    29:3a:50:72:c8:c7:3b:4b:f6:f1:ef:8e:cd:1a:fd:
                    55:d8:4d:4d:44:99:16:8e:90:a4:22:f0:b9:57:b7:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:52:73:76:5F:95:62:96:52:82:1D:AB:E0:23:D0:1F:07:52:84:E5
            X509v3 Authority Key Identifier:
                keyid:C5:A9:31:CB:C0:CE:50:16:AA:59:5C:DE:04:06:01:43:C0:97:36:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xakxy8DOUBaqWVzeBAYBQ8CXNgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dacfd9-8e16-4cbc-88f8-79e8d60b6158/1/xakxy8DOUBaqWVzeBAYBQ8CXNgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dacfd9-8e16-4cbc-88f8-79e8d60b6158/1/xakxy8DOUBaqWVzeBAYBQ8CXNgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:41:9f:62:79:d5:b5:a4:15:4b:c2:85:f3:74:1b:57:c3:
         f0:6c:ca:aa:cf:08:86:ea:74:16:ae:df:70:97:a9:0b:c7:51:
         05:d3:1c:fa:bb:26:49:b9:b4:4a:2d:97:eb:20:e2:bd:e7:b4:
         b3:d1:36:ba:f4:ea:4b:ab:7f:fc:8c:ff:4c:a9:79:d6:d4:c7:
         d9:cb:7e:ae:9d:14:b6:76:a0:4f:e5:50:90:47:6e:99:d6:71:
         4f:90:1d:e7:f4:ca:d5:e8:f9:b0:00:c2:72:f0:a0:36:6b:38:
         fa:e7:9c:0b:d7:f9:8f:39:0f:8d:34:3e:45:f0:1f:1e:e5:ae:
         19:58:02:2e:04:df:71:f1:47:18:e7:e4:f6:43:9a:e8:3b:72:
         08:9d:c9:5d:82:aa:e8:df:2a:f7:ca:b6:a1:0e:4e:09:a5:e7:
         ab:7a:de:98:55:dc:e1:74:2b:d8:75:2d:ff:43:d2:6d:03:5a:
         c0:9c:44:09:ca:b7:49:8b:95:62:38:1b:a3:9e:cd:df:ad:5e:
         66:71:b3:ea:ec:b6:fe:ae:6e:13:d7:2a:89:26:b2:08:33:1c:
         81:ca:1d:6c:d3:5b:30:16:bb:fc:85:1f:40:75:38:b1:c7:94:
         bb:bd:06:01:13:e5:16:ca:3b:b9:40:9e:3c:d4:d9:2d:6f:f7:
         f1:7d:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----