Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/hWSXJ2MEZPsIcJrJNkM5ePShDqo.mft
File:                     hWSXJ2MEZPsIcJrJNkM5ePShDqo.mft (raw, json)
Hash identifier:          kTO99yy0PzgKOSkXIEGwgraJgRAyZhSH7Co4VYhkAg0=
Subject key identifier:   85:01:78:4F:08:8C:A4:20:84:11:7F:D0:EA:88:79:B8:03:2B:61:CB
Authority key identifier: 85:64:97:27:63:04:64:FB:08:70:9A:C9:36:43:39:78:F4:A1:0E:AA
Certificate issuer:       /CN=85649727630464fb08709ac936433978f4a10eaa
Certificate serial:       05D12740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWSXJ2MEZPsIcJrJNkM5ePShDqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/hWSXJ2MEZPsIcJrJNkM5ePShDqo.mft
Manifest number:          077D
Signing time:             Thu 17 Mar 2022 04:52:33 +0000
Manifest this update:     Thu 17 Mar 2022 04:52:33 +0000
Manifest next update:     Fri 18 Mar 2022 04:52:33 +0000
Files and hashes:         1: MOy6a5SByu5zbLu4uzMRLATAvuk.roa (hash: FkmFlc+XpMkT1rIAombbJRWkX64T6qiCjc3WEQoM6/g=)
                          2: hWSXJ2MEZPsIcJrJNkM5ePShDqo.crl (hash: SFyFSu+TFKX+pOKmhix+jnfFCDk/Z07BvNuh1oc2A7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97593152 (0x5d12740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85649727630464fb08709ac936433978f4a10eaa
        Validity
            Not Before: Mar 17 04:52:33 2022 GMT
            Not After : Mar 18 04:52:33 2022 GMT
        Subject: CN=8501784f088ca42084117fd0ea8879b8032b61cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:9a:aa:ed:bf:68:9c:92:f6:5e:47:2c:b9:
                    1d:eb:3c:20:e2:a8:57:f7:d1:ba:13:c4:b5:d5:ac:
                    97:22:d3:53:bf:10:46:0d:d8:19:2f:b4:56:df:5b:
                    d9:56:fc:58:7a:8e:ab:e4:97:2c:18:86:04:70:4f:
                    2c:d7:21:03:95:09:38:52:51:24:c0:66:42:fe:cb:
                    0f:14:49:b8:6e:b3:7d:a5:53:03:a2:ed:50:1e:2f:
                    fc:d5:5e:29:aa:df:bc:21:b5:63:d4:37:bc:79:50:
                    9d:62:ac:d1:77:27:3a:d3:b2:99:4e:72:13:13:35:
                    6d:06:70:51:51:a3:51:69:61:5c:93:d8:a6:6a:ee:
                    fb:09:41:3c:d9:80:b5:d1:c8:21:6a:12:72:32:b4:
                    2d:74:e3:8a:97:69:91:de:8c:41:67:5d:e4:6a:44:
                    28:61:df:03:e7:26:e5:8c:36:8b:4f:59:16:90:83:
                    a6:15:f1:29:6e:be:19:2c:72:a6:39:39:79:6f:b7:
                    69:3a:84:d9:0e:10:ae:b5:79:95:d8:a0:63:9e:40:
                    c9:b1:95:22:a0:e6:04:58:d7:97:30:fa:d6:b9:4e:
                    0c:61:a1:81:ae:17:9a:f0:fd:fa:62:31:9c:2f:c8:
                    26:43:ad:92:77:13:df:1f:c4:af:ca:94:62:c6:9e:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:01:78:4F:08:8C:A4:20:84:11:7F:D0:EA:88:79:B8:03:2B:61:CB
            X509v3 Authority Key Identifier:
                keyid:85:64:97:27:63:04:64:FB:08:70:9A:C9:36:43:39:78:F4:A1:0E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSXJ2MEZPsIcJrJNkM5ePShDqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/hWSXJ2MEZPsIcJrJNkM5ePShDqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/hWSXJ2MEZPsIcJrJNkM5ePShDqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:b3:b9:01:7e:6d:81:e5:67:3a:f2:09:18:34:75:ae:6a:
         49:4a:fb:3e:62:6c:2a:52:cf:fa:9a:60:2b:20:41:40:45:50:
         0a:d4:3b:89:ca:9b:b1:59:36:52:4e:eb:33:95:26:4c:0c:92:
         d3:ae:f3:71:32:81:cd:af:ec:58:2c:79:42:7d:c9:3e:fb:7a:
         06:d9:88:bd:18:ec:26:91:e4:60:f5:0c:e1:ee:ef:5c:f8:f7:
         be:0b:10:92:5f:e8:20:86:9c:c8:cb:90:3e:a6:70:7c:58:d1:
         dd:7a:95:29:0f:11:8f:2b:8b:6a:00:c4:35:a0:53:2f:1a:27:
         7e:60:25:81:23:ff:91:72:88:ce:cf:7e:b3:45:e6:89:c1:3e:
         3f:c4:39:62:e5:f0:58:e0:94:cb:5d:9f:5a:55:c0:38:36:28:
         27:a5:0d:40:3c:f3:f8:cb:9a:3e:f9:3d:50:e3:fc:e4:3e:93:
         52:7b:26:44:7c:57:41:ac:32:9d:88:a6:f3:9b:0a:b4:51:6a:
         6c:9e:59:9f:1e:e1:51:7b:59:52:1e:35:61:48:29:f6:a8:df:
         76:f3:a8:59:d9:7f:b4:b4:5c:00:25:6f:ee:ec:fd:81:78:09:
         0e:7c:13:87:47:c1:52:05:8b:e0:d6:c8:01:90:4b:c5:3b:75:
         93:93:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----