Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/7OeVDYUbrn1-JUf7mB9Cckr-PXk.mft
File:                     7OeVDYUbrn1-JUf7mB9Cckr-PXk.mft (raw, json)
Hash identifier:          qXUV5wPjlZvbvZGGOsL/IJM3yaaaNbxb485YWX5DTj4=
Subject key identifier:   AF:4D:22:A7:48:95:DC:35:57:63:53:C3:73:6C:20:3E:C6:85:2D:10
Authority key identifier: EC:E7:95:0D:85:1B:AE:7D:7E:25:47:FB:98:1F:42:72:4A:FE:3D:79
Certificate issuer:       /CN=ece7950d851bae7d7e2547fb981f42724afe3d79
Certificate serial:       01845575B25F213CDF54DC8F5D5A11417234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OeVDYUbrn1-JUf7mB9Cckr-PXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/7OeVDYUbrn1-JUf7mB9Cckr-PXk.mft
Manifest number:          03B6
Signing time:             Tue 08 Nov 2022 04:18:07 +0000
Manifest this update:     Tue 08 Nov 2022 04:18:07 +0000
Manifest next update:     Wed 09 Nov 2022 04:18:07 +0000
Files and hashes:         1: 7OeVDYUbrn1-JUf7mB9Cckr-PXk.crl (hash: HS1yY6SFKcSp1ZwhuDGNbtSvMMdv45cZUFkeVdgSUzE=)
                          2: bw-9sNysRfacOueXXwLDxvIEnsc.roa (hash: tNLR8zOK+WmMJAck4JVEU+BnHrGwXEVE6OqQ//70pL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:55:75:b2:5f:21:3c:df:54:dc:8f:5d:5a:11:41:72:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece7950d851bae7d7e2547fb981f42724afe3d79
        Validity
            Not Before: Nov  8 04:18:07 2022 GMT
            Not After : Nov  9 04:18:07 2022 GMT
        Subject: CN=af4d22a74895dc35576353c3736c203ec6852d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:20:4e:fa:2f:e2:46:c8:39:1b:b4:45:47:
                    8e:80:2b:ef:b7:47:d7:8d:33:4a:92:df:7b:44:6e:
                    b3:97:78:6f:29:68:9a:b2:fa:2d:bf:ff:bb:f6:33:
                    16:b4:10:cf:ba:4c:66:5f:56:ec:29:b0:44:4a:c1:
                    da:cb:e6:08:86:2e:24:f9:6b:e6:29:68:71:05:73:
                    0c:9b:8f:03:58:af:e9:75:03:fc:e8:2d:f5:4f:b9:
                    5e:63:45:30:35:42:b0:7c:11:78:79:21:57:f8:cc:
                    a9:83:09:9c:ae:ea:bf:08:22:71:86:61:47:15:5c:
                    64:29:77:7f:d7:d2:8e:40:35:a6:0e:3b:8f:a4:88:
                    c9:75:40:0a:eb:e9:52:ed:f9:b8:72:45:15:3a:6e:
                    c3:d3:79:e9:96:14:51:ba:81:1b:79:c4:90:54:61:
                    68:24:23:a0:10:39:1a:9b:a1:3a:ab:c1:d2:e2:cf:
                    48:9e:06:1e:29:03:fc:23:55:c6:ed:e9:33:3f:91:
                    1a:d4:c8:84:81:42:76:d0:5f:8a:58:55:19:cb:bd:
                    61:b8:a7:4a:b8:5f:da:3b:5e:bc:81:6c:b0:c5:1b:
                    6e:a3:c0:6c:e8:55:81:09:52:47:7f:3b:64:de:51:
                    5d:ee:c4:20:7a:b5:7d:ac:28:51:38:e2:7e:0f:83:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4D:22:A7:48:95:DC:35:57:63:53:C3:73:6C:20:3E:C6:85:2D:10
            X509v3 Authority Key Identifier:
                keyid:EC:E7:95:0D:85:1B:AE:7D:7E:25:47:FB:98:1F:42:72:4A:FE:3D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OeVDYUbrn1-JUf7mB9Cckr-PXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/7OeVDYUbrn1-JUf7mB9Cckr-PXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/7OeVDYUbrn1-JUf7mB9Cckr-PXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9f:f6:e9:b0:91:c9:40:11:d3:d1:4d:e8:94:4c:64:09:24:
         d2:ef:80:cc:b6:aa:1d:72:30:54:00:2e:94:af:08:06:40:10:
         6d:ac:97:24:36:fb:b9:93:37:b8:72:fe:8a:72:b1:3f:b7:97:
         4d:7e:1a:d0:a1:64:74:5a:96:a0:44:fb:2a:24:d0:c5:a3:a4:
         5b:03:42:c7:5d:b6:f1:c4:f0:9c:94:82:a4:b5:79:5a:89:9f:
         7c:4b:1b:96:cc:fe:7b:80:83:06:ab:6b:68:c9:6b:c0:8b:58:
         99:42:ef:3a:81:be:08:28:ac:3d:50:92:f4:41:c2:9e:9f:d4:
         19:bc:4b:d1:7a:5e:6a:8b:53:30:1d:00:9f:e6:7b:a7:3d:4e:
         d0:2b:00:2c:80:5d:de:35:2e:03:5d:51:98:19:87:4c:df:37:
         a0:30:ac:dd:33:8d:66:eb:bf:69:df:4f:97:fe:66:65:7c:7b:
         a8:3c:9a:d7:9e:ab:30:d2:f7:9a:c4:28:ff:04:3c:ab:4c:26:
         fb:7b:86:ad:f7:b1:9e:ba:37:5f:fa:5e:f1:88:2a:35:fa:6b:
         0f:58:4c:86:37:8a:1a:20:5f:06:24:23:f5:bd:b9:d6:d6:a7:
         26:81:3f:48:1e:dd:67:0c:26:e9:6f:1d:ea:d6:5b:b9:99:1c:
         e0:16:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----