Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/87ebde-840a-4acc-b198-36ccf35f32cf/1/AIb8I1LYyKdgu4CgzjtUckqAgVQ.mft
File:                     AIb8I1LYyKdgu4CgzjtUckqAgVQ.mft (raw, json)
Hash identifier:          nTPW3wCiUgW3vA0fIpwCIWjtPqhK/E36Kl6rQQ1zuXs=
Subject key identifier:   E3:1B:7C:8C:E4:45:3A:21:96:CD:BB:B8:46:9C:01:BF:11:84:9F:83
Authority key identifier: 00:86:FC:23:52:D8:C8:A7:60:BB:80:A0:CE:3B:54:72:4A:80:81:54
Certificate issuer:       /CN=0086fc2352d8c8a760bb80a0ce3b54724a808154
Certificate serial:       0837E7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIb8I1LYyKdgu4CgzjtUckqAgVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/87ebde-840a-4acc-b198-36ccf35f32cf/1/AIb8I1LYyKdgu4CgzjtUckqAgVQ.mft
Manifest number:          08B8
Signing time:             Wed 23 Mar 2022 06:43:21 +0000
Manifest this update:     Wed 23 Mar 2022 06:43:21 +0000
Manifest next update:     Thu 24 Mar 2022 06:43:21 +0000
Files and hashes:         1: AIb8I1LYyKdgu4CgzjtUckqAgVQ.crl (hash: sLaKYIRKdfXCn8wtUcge76JgLwRgzHQosrqUmvajZ+4=)
                          2: TVydVr01UCqk3LygJ_25qw1Tq9o.roa (hash: DSKyfo/59bEidvaXnmkDK1nh//mlpK0Z2EeLf0l6C3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137881581 (0x837e7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0086fc2352d8c8a760bb80a0ce3b54724a808154
        Validity
            Not Before: Mar 23 06:43:21 2022 GMT
            Not After : Mar 24 06:43:21 2022 GMT
        Subject: CN=e31b7c8ce4453a2196cdbbb8469c01bf11849f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:41:e7:57:88:33:8d:cb:56:b1:00:50:ca:
                    db:3f:99:7e:47:47:e2:90:3a:24:40:ce:ff:ed:c9:
                    7a:12:d0:d2:7d:c5:01:79:75:d6:8b:04:65:6d:96:
                    8e:c1:e7:e6:18:f4:1f:52:78:17:b0:86:86:ac:89:
                    59:a9:55:bc:63:ae:a3:94:7e:f8:0f:72:d7:eb:ef:
                    25:40:3a:13:24:59:01:a9:a7:e2:76:8a:78:a3:35:
                    a2:18:bd:14:cc:a6:9e:94:b3:9c:76:5e:e3:1a:bd:
                    0f:8e:69:13:bd:15:9e:4c:fc:2f:2f:50:6a:bc:f8:
                    9c:e4:da:e6:bd:60:2d:ab:b2:24:ca:e3:49:37:39:
                    9b:f2:36:20:01:27:9f:65:c7:24:69:85:e9:6a:54:
                    86:42:57:67:ca:b5:2f:48:03:ed:c3:29:22:94:da:
                    0b:4c:1b:f3:1b:f0:cf:f1:11:07:16:e3:85:0d:d3:
                    0c:7f:72:ec:28:fc:ac:1c:c6:18:69:de:46:7a:44:
                    ae:14:6f:86:36:7c:ec:c6:b3:a7:22:e6:ea:c0:11:
                    91:9d:94:3b:01:22:55:f4:4a:7f:30:8a:34:4b:a5:
                    92:72:12:98:05:7b:ed:8c:aa:1f:e8:53:ce:55:bf:
                    b0:6d:51:53:f7:e8:76:71:1c:c2:98:6b:1e:ae:1b:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1B:7C:8C:E4:45:3A:21:96:CD:BB:B8:46:9C:01:BF:11:84:9F:83
            X509v3 Authority Key Identifier:
                keyid:00:86:FC:23:52:D8:C8:A7:60:BB:80:A0:CE:3B:54:72:4A:80:81:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIb8I1LYyKdgu4CgzjtUckqAgVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/87ebde-840a-4acc-b198-36ccf35f32cf/1/AIb8I1LYyKdgu4CgzjtUckqAgVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/87ebde-840a-4acc-b198-36ccf35f32cf/1/AIb8I1LYyKdgu4CgzjtUckqAgVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d2:a6:f6:53:16:d8:3f:fc:fc:ae:c5:c4:91:96:91:70:7f:
         71:a1:81:98:8b:0e:f9:b3:3d:67:73:e0:1e:de:c1:38:76:33:
         0f:3a:82:e6:ea:ac:6f:39:62:4b:73:4f:bd:9d:7c:11:1d:8c:
         7a:f0:c3:86:54:f1:6b:e0:27:e8:2d:8b:b9:79:da:52:89:1c:
         1f:67:9b:5d:cb:96:f7:2c:ba:e1:c5:67:8d:cf:44:a3:2a:a2:
         e2:de:3d:5b:38:1a:33:4b:d4:05:8a:cb:ad:6d:25:34:86:ad:
         4d:8e:78:7d:bf:ec:18:50:d8:1f:2b:cb:e9:62:0b:db:e1:4e:
         49:b3:ab:6a:12:ce:21:eb:79:6b:8e:0d:fa:c8:23:01:fb:09:
         f0:7b:cf:a2:3f:b5:10:89:cf:bf:06:0a:59:ee:91:93:36:11:
         8d:2c:e0:ee:4e:5d:2c:12:d9:89:72:da:be:72:f8:0a:b8:69:
         9f:35:dc:51:14:ff:a3:91:8e:d6:27:1c:64:b9:57:c1:97:21:
         6b:d9:82:2c:6b:d1:09:c0:03:9b:13:a7:d0:b4:3e:d2:f9:3f:
         73:46:ef:c2:29:ea:b4:86:cb:7a:b3:23:44:89:bd:47:4e:3a:
         03:8f:72:b9:80:53:0d:12:23:33:24:96:ed:27:2e:06:2f:79:
         9d:c0:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----