Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/XC19GEnIiwTvndWiQG61FQjjw7Q.mft
File:                     XC19GEnIiwTvndWiQG61FQjjw7Q.mft (raw, json)
Hash identifier:          8q7wp+1VazMJGZNaEYfhWgt1njPrsTQ6xaxpsCcrpDc=
Subject key identifier:   84:15:FE:42:6A:2E:C8:9D:05:E3:32:61:D9:F1:C7:02:7F:21:2B:D0
Authority key identifier: 5C:2D:7D:18:49:C8:8B:04:EF:9D:D5:A2:40:6E:B5:15:08:E3:C3:B4
Certificate issuer:       /CN=5c2d7d1849c88b04ef9dd5a2406eb51508e3c3b4
Certificate serial:       0183172B7C11021472AD24DDC949CF2B8B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XC19GEnIiwTvndWiQG61FQjjw7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/XC19GEnIiwTvndWiQG61FQjjw7Q.mft
Manifest number:          05DA
Signing time:             Wed 07 Sep 2022 08:57:49 +0000
Manifest this update:     Wed 07 Sep 2022 08:57:49 +0000
Manifest next update:     Thu 08 Sep 2022 08:57:49 +0000
Files and hashes:         1: I_84ZaBEJdZ6fDIbdhcIMsr9RWg.roa (hash: 9BILeIYSY0aOneE4KVPB6Q4mwYm/odOBq5e47iOWU5s=)
                          2: XC19GEnIiwTvndWiQG61FQjjw7Q.crl (hash: EGnF+HxuPZW62oms01Pc0fxlnWL937am7M7pi6m0AWI=)
                          3: kTLL69NgM-8oS1XLGQlPUb1N9cI.roa (hash: lritduTftE7+8I8E7CZxWyPpUXPGO3UKVhJaWK8WqJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:17:2b:7c:11:02:14:72:ad:24:dd:c9:49:cf:2b:8b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c2d7d1849c88b04ef9dd5a2406eb51508e3c3b4
        Validity
            Not Before: Sep  7 08:57:49 2022 GMT
            Not After : Sep  8 08:57:49 2022 GMT
        Subject: CN=8415fe426a2ec89d05e33261d9f1c7027f212bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:ed:49:00:f6:57:c2:8e:e1:e8:01:d4:fa:
                    e0:39:46:30:ee:bd:cb:14:e2:0b:1e:8b:0f:c2:52:
                    7d:d7:9f:31:11:13:19:a1:95:ed:45:33:53:13:8e:
                    81:68:61:ca:06:60:00:fe:c8:65:40:a6:a8:dc:7a:
                    68:37:b2:7e:6a:90:33:7a:90:e0:f4:b9:9f:86:62:
                    b6:e8:aa:14:f5:63:76:4b:36:54:4b:cd:06:a7:7e:
                    d2:a7:7b:81:c4:68:05:6d:01:9d:b1:ed:3e:0f:e2:
                    35:8b:c0:60:53:a2:3e:ea:5b:f5:04:5b:22:5b:e6:
                    2c:ab:89:69:e4:d9:ad:3b:bb:32:a9:ab:be:94:b3:
                    3a:f2:9a:01:d7:57:97:c7:63:f0:4c:62:f9:36:98:
                    b1:ef:bc:01:f9:14:ab:e1:02:e4:bc:a1:b8:ba:a7:
                    0f:bd:a5:3a:a5:95:fa:e2:d7:54:e7:f3:3e:19:f0:
                    db:ba:48:df:bc:b2:84:eb:7c:d6:1b:fc:5f:74:21:
                    f1:67:80:ad:a9:4e:2b:3b:9d:b3:d0:8b:5f:3c:07:
                    91:46:c2:b1:7e:1c:95:18:b5:71:28:c9:37:86:51:
                    e3:c6:89:b4:a3:3f:ca:76:89:3b:d5:ad:ab:f4:e2:
                    31:85:41:1a:23:11:12:9d:d7:67:5d:37:89:9d:ff:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:15:FE:42:6A:2E:C8:9D:05:E3:32:61:D9:F1:C7:02:7F:21:2B:D0
            X509v3 Authority Key Identifier:
                keyid:5C:2D:7D:18:49:C8:8B:04:EF:9D:D5:A2:40:6E:B5:15:08:E3:C3:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XC19GEnIiwTvndWiQG61FQjjw7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/XC19GEnIiwTvndWiQG61FQjjw7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/XC19GEnIiwTvndWiQG61FQjjw7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ac:28:7c:5c:c4:ce:20:3a:76:63:37:b0:51:78:51:8e:42:
         ed:4e:26:2f:7c:cf:ec:a7:1b:87:58:53:13:e9:db:68:a9:c3:
         6d:c0:ee:50:a7:ba:08:6d:73:ef:4a:b5:ae:3d:c3:ee:d6:bc:
         a0:03:50:d4:b1:4d:26:0a:4f:b2:31:fa:ef:dd:f0:b1:c9:9d:
         19:1f:b0:82:1c:45:9f:4c:c0:7c:7a:ce:3a:6b:71:3e:99:9c:
         87:d4:1b:ae:a5:fa:1e:1f:b7:85:0d:fe:de:9f:10:c1:51:46:
         61:ac:1f:68:ed:63:88:e0:5d:64:34:bb:2f:2f:d0:b6:0b:44:
         3a:6d:ca:df:8d:8b:5c:00:4c:c9:2f:76:f7:cf:bb:6e:f6:31:
         9b:dd:a2:8f:c4:8e:ce:4a:77:f1:de:fb:59:ee:17:c9:99:5c:
         a2:8f:83:af:da:d0:17:b5:41:72:6b:a2:be:38:9c:10:9d:f9:
         77:8f:a1:f3:57:57:60:e9:f2:de:c7:02:b0:a7:60:8a:22:23:
         2b:6e:3e:7c:15:a2:af:71:73:7f:06:73:0c:d5:f5:9a:6c:d0:
         77:6f:3a:ae:f8:02:e6:e4:bc:7f:2b:01:08:11:ec:bb:70:0a:
         2e:b3:94:61:81:69:5d:85:a2:a2:41:ec:a5:7d:c0:74:b0:43:
         d3:52:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----