Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a1b79e-4a93-41cf-b7c9-b60aaa0f949e/1/0DpR14I8xRNDC_CMWryJiX_bge0.mft
File:                     0DpR14I8xRNDC_CMWryJiX_bge0.mft (raw, json)
Hash identifier:          2dDQt//wGyOnF4bLiuQdVgNwmxYnkP1yGfktXdcTJFo=
Subject key identifier:   69:4F:AF:05:3F:11:FD:5F:C2:85:43:AD:76:B1:F5:61:7B:89:E2:7A
Authority key identifier: D0:3A:51:D7:82:3C:C5:13:43:0B:F0:8C:5A:BC:89:89:7F:DB:81:ED
Certificate issuer:       /CN=d03a51d7823cc513430bf08c5abc89897fdb81ed
Certificate serial:       08CC34DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DpR14I8xRNDC_CMWryJiX_bge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b79e-4a93-41cf-b7c9-b60aaa0f949e/1/0DpR14I8xRNDC_CMWryJiX_bge0.mft
Manifest number:          0980
Signing time:             Tue 31 May 2022 09:45:21 +0000
Manifest this update:     Tue 31 May 2022 09:45:21 +0000
Manifest next update:     Wed 01 Jun 2022 09:45:21 +0000
Files and hashes:         1: 0DpR14I8xRNDC_CMWryJiX_bge0.crl (hash: 2v2UQZla61diFAJxbgvaXPFVXufGlqRKqvpMuAxR37Q=)
                          2: 27CTkySH_PfPGNqmoG_Ky36vLmY.roa (hash: 8ey8acdIx2CZhlpcfH1Uo2On+tYgIjO6JVyGiLSanwE=)
                          3: E1Cx8nFFtuUw2dTFCWTpt-5cuaM.roa (hash: g6xJnxpJNojpbRVBn8EFCp6pdGKQ2UdXhKyB/SmUClA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147600605 (0x8cc34dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03a51d7823cc513430bf08c5abc89897fdb81ed
        Validity
            Not Before: May 31 09:45:21 2022 GMT
            Not After : Jun  1 09:45:21 2022 GMT
        Subject: CN=694faf053f11fd5fc28543ad76b1f5617b89e27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:8b:7f:21:9a:4c:83:e7:7e:d3:7c:56:91:
                    6b:47:9a:52:7b:bf:be:6b:01:f8:ea:ed:2d:bd:0f:
                    fe:46:a5:7c:02:15:25:18:13:fe:cc:1a:34:80:40:
                    74:30:c0:c6:c6:7a:ee:05:06:25:55:59:d9:3f:2e:
                    3f:95:71:61:3c:0d:7e:14:3d:e0:2e:d6:1a:4c:c9:
                    70:62:e4:fe:b8:03:99:5c:ba:e2:fa:b4:bc:d7:45:
                    a0:a5:ec:e5:ff:e7:31:ec:2b:4b:aa:c6:77:5b:ee:
                    a5:21:8b:62:b8:29:b0:5a:4e:ec:a5:ca:8b:e5:37:
                    07:fa:dd:7d:15:ce:f0:68:96:29:13:fe:d1:ec:e3:
                    43:6b:2d:87:4b:fb:aa:e9:d8:55:73:9f:40:fc:c8:
                    42:77:ef:07:10:4f:88:23:bb:34:dc:d1:61:2d:07:
                    c1:72:fa:4e:b0:8b:51:89:b5:f8:8e:06:8e:2d:0f:
                    66:be:ca:72:d3:c3:54:e3:f0:1d:22:f3:02:e4:41:
                    9f:eb:a9:15:ad:03:69:36:84:b2:94:63:65:1a:86:
                    65:b4:bb:50:b1:ae:d3:ed:82:d1:08:f4:8f:22:98:
                    e2:45:de:44:78:f2:c4:09:1b:db:02:4b:ac:05:f0:
                    7f:50:af:3a:25:a9:98:45:99:5b:99:0e:f3:b3:cc:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:AF:05:3F:11:FD:5F:C2:85:43:AD:76:B1:F5:61:7B:89:E2:7A
            X509v3 Authority Key Identifier:
                keyid:D0:3A:51:D7:82:3C:C5:13:43:0B:F0:8C:5A:BC:89:89:7F:DB:81:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DpR14I8xRNDC_CMWryJiX_bge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b79e-4a93-41cf-b7c9-b60aaa0f949e/1/0DpR14I8xRNDC_CMWryJiX_bge0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b79e-4a93-41cf-b7c9-b60aaa0f949e/1/0DpR14I8xRNDC_CMWryJiX_bge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a2:b3:2b:ae:f3:f6:3e:21:7b:c4:64:51:5a:0a:12:c9:aa:
         46:58:f5:0f:98:1b:e0:90:de:ad:71:70:d2:b3:a7:24:9b:73:
         db:06:5e:f0:e3:8d:d6:37:b0:82:16:64:39:69:33:da:cf:a7:
         c2:cd:26:54:5a:4c:dc:79:dc:15:1f:4c:00:c5:86:62:f3:0c:
         e8:b0:c1:2a:bd:1c:50:21:e4:88:b0:de:ce:24:21:3d:dc:44:
         e1:54:d9:54:b4:a3:93:fa:ab:7d:5b:3d:c0:c0:bd:12:63:c8:
         43:60:48:28:51:5b:73:57:41:68:46:46:e0:08:c3:f2:d1:c8:
         de:88:5a:9b:ed:31:bd:10:60:7e:65:6d:19:0c:62:e8:ae:70:
         ca:e2:5d:e5:d1:f7:a9:05:c1:0f:84:c4:71:20:17:57:ac:34:
         fe:9c:54:d0:05:8f:7e:8f:78:0d:42:e9:5d:c8:1d:39:fe:f4:
         f2:20:f8:bf:57:0f:23:c1:ab:8d:ee:04:28:f9:d0:a7:3a:1e:
         b3:dd:26:ae:20:a1:b9:7d:1a:56:b5:e4:33:b8:e6:0f:a8:b7:
         c0:d4:fb:50:1a:2c:b4:56:dc:9a:75:ad:3b:91:1f:66:dc:bb:
         ff:92:80:82:ec:5d:b6:53:4b:90:69:79:f1:45:fb:3f:5b:8b:
         d9:bc:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----