Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.mft
File:                     PYbqOOAh8KlgFSz7cBC0sOLp-ec.mft (raw, json)
Hash identifier:          hJP8c5O7zK+8xx280zy2+TVQCWyXKtLpH+1vMFSWhDE=
Subject key identifier:   27:81:C4:FC:32:F9:7D:2E:52:72:3E:07:30:AB:F5:21:E0:6C:50:25
Authority key identifier: 3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
Certificate issuer:       /CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
Certificate serial:       018506B808DEE422090D5751025F611FC000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.mft
Manifest number:          0AB1
Signing time:             Mon 12 Dec 2022 14:23:22 +0000
Manifest this update:     Mon 12 Dec 2022 14:23:22 +0000
Manifest next update:     Tue 13 Dec 2022 14:23:22 +0000
Files and hashes:         1: 7xshOasUTMle0tb6Cinx7A3KwOc.roa (hash: BRIrZ8bf9rLC3WPY2t5ioq/EE9Lsao72w9+WXN5Ot/U=)
                          2: B4hJlUyQMMpMvss7-Qv0gm3QkFI.roa (hash: bWfDkgZgN+alhDA5zHRmvw4z1n5AU7QzCJnXfgfv3aE=)
                          3: PYbqOOAh8KlgFSz7cBC0sOLp-ec.crl (hash: XZGxISvSBP3o8SQcxZmXLhs6m7HHyMj31ljZX8a93WI=)
                          4: ij44GqHTRFXmIycFlU0mSl7sLac.roa (hash: Gx0YJRA6l4ftSFRxcyo7Sko459FJpjyUfjT4m5pbERg=)
                          5: yTEawqny56p6QcxniV80whLGOE8.roa (hash: oYNsB6sqMpLPF4UaVQkm5mMKVBo2Z3Mcqt3PTes3E1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:06:b8:08:de:e4:22:09:0d:57:51:02:5f:61:1f:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
        Validity
            Not Before: Dec 12 14:23:22 2022 GMT
            Not After : Dec 13 14:23:22 2022 GMT
        Subject: CN=2781c4fc32f97d2e52723e0730abf521e06c5025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:ca:d0:ab:3e:45:57:58:e6:11:49:d8:73:
                    26:66:ac:85:fc:27:51:a1:cd:f4:bf:22:9f:aa:55:
                    1d:19:41:36:80:ff:b7:8a:72:af:31:4c:89:bb:5c:
                    fb:81:b2:f9:68:0e:32:30:bc:6d:69:91:aa:89:0c:
                    3b:7e:04:17:7d:64:9c:32:82:b2:28:e3:9c:76:7e:
                    1b:90:d1:d7:14:df:9a:8b:cc:7e:93:17:99:9f:7f:
                    c7:30:31:30:64:5b:14:e3:c4:2e:6f:07:05:53:e4:
                    55:18:7c:da:26:2a:a2:62:99:30:c1:4f:fd:ad:b3:
                    d7:07:fb:18:2c:31:a7:e0:33:3e:3a:e4:2a:af:27:
                    21:dd:24:e3:5d:db:1d:cb:3a:9f:38:28:07:cf:78:
                    3f:00:22:6a:7a:a6:28:cb:fe:7a:7a:8f:0b:61:ba:
                    f6:99:ed:34:af:cf:94:31:b8:cf:ff:db:83:70:a0:
                    56:bf:99:a5:dd:ff:06:9f:47:1e:b9:49:fb:2a:d3:
                    7e:44:3b:fb:79:60:d7:d9:af:a7:94:61:87:bb:55:
                    f8:a1:1c:62:02:37:48:9a:1e:5f:9d:51:33:e9:51:
                    aa:b9:61:e6:b5:df:e5:28:93:4d:dc:27:0b:2d:5c:
                    9f:04:c8:52:57:14:a0:31:c7:03:ab:73:c6:62:e2:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:81:C4:FC:32:F9:7D:2E:52:72:3E:07:30:AB:F5:21:E0:6C:50:25
            X509v3 Authority Key Identifier:
                keyid:3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:85:c9:74:37:26:91:c7:04:32:0c:78:c1:e3:5d:be:c8:
         b5:02:a4:f1:ed:77:14:a9:fd:6d:34:c2:63:57:e5:db:cd:8a:
         a8:7f:e3:93:cf:39:13:60:77:e7:3c:6d:8a:9d:8f:32:dc:31:
         6c:25:a1:2c:c2:7f:f3:fd:17:94:6c:6e:5e:c2:67:c5:a3:10:
         b8:0c:a0:7c:2c:75:3f:71:9b:ed:64:dd:00:2d:bd:0a:ca:71:
         0d:0b:98:96:88:cc:a8:c5:21:a6:11:fb:69:28:7a:94:46:f2:
         da:25:c0:00:3b:98:87:aa:3b:ea:9b:75:99:f0:dc:65:e6:a1:
         04:18:49:4d:a9:0a:41:33:1b:fb:4c:c4:75:9d:62:94:84:8a:
         f9:d2:df:5b:7f:86:a9:4c:6b:9a:a4:d4:28:e2:f8:74:32:1d:
         3c:40:6e:53:ec:9e:78:1b:7a:fc:1e:d6:72:14:62:0a:93:02:
         35:3e:02:9b:c7:57:0c:90:6f:02:5a:40:35:c1:9b:df:d1:15:
         4a:e2:c4:aa:61:07:0c:32:8a:5a:8c:ed:83:75:ef:6b:72:dc:
         5e:ff:71:7a:a5:a1:76:9a:85:d6:f5:34:6b:20:51:b0:1e:c5:
         dd:2e:93:da:0e:5c:75:53:fa:e3:d7:fb:ed:a8:c8:37:b9:10:
         1a:b0:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----