Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cab3d1-d978-4b84-bfa6-1e7cb3618e44/1/3YWrPBOactiZPJrUrZQTd0gf-7w.mft
File:                     3YWrPBOactiZPJrUrZQTd0gf-7w.mft (raw, json)
Hash identifier:          bdjVQuWFM4HYIPqtqK+XGdNb21GBUAU7rbUtP+DdoxE=
Subject key identifier:   6A:E8:5E:18:B5:E7:84:35:69:A6:20:D1:30:07:2B:E8:CD:13:94:C5
Authority key identifier: DD:85:AB:3C:13:9A:72:D8:99:3C:9A:D4:AD:94:13:77:48:1F:FB:BC
Certificate issuer:       /CN=dd85ab3c139a72d8993c9ad4ad941377481ffbbc
Certificate serial:       7C6C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3YWrPBOactiZPJrUrZQTd0gf-7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cab3d1-d978-4b84-bfa6-1e7cb3618e44/1/3YWrPBOactiZPJrUrZQTd0gf-7w.mft
Manifest number:          9B
Signing time:             Mon 30 May 2022 01:45:25 +0000
Manifest this update:     Mon 30 May 2022 01:45:25 +0000
Manifest next update:     Tue 31 May 2022 01:45:25 +0000
Files and hashes:         1: 3YWrPBOactiZPJrUrZQTd0gf-7w.crl (hash: r/9L9LBxbe/+fmehMwCQbSqUZUxGh+JMe5ZZiReGAg4=)
                          2: XmfVMF9FsIb8tkKHQ4VA42n7ido.roa (hash: xIO30Z8OLK8xupwvWK1/s5JQ1XjHAfM0ArJDIg1z9Vk=)
                          3: iW_oGJLDEhFfNsvNnrbrHZk7lp4.roa (hash: ubjAENkDfQwOyZ4/aMmhxPA/xEEOFitzrMlUIIoBXwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8154187 (0x7c6c4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd85ab3c139a72d8993c9ad4ad941377481ffbbc
        Validity
            Not Before: May 30 01:45:25 2022 GMT
            Not After : May 31 01:45:25 2022 GMT
        Subject: CN=6ae85e18b5e7843569a620d130072be8cd1394c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:68:2d:94:42:ff:2a:eb:aa:dc:77:05:a3:
                    5b:ff:48:ee:04:19:0c:05:8d:29:54:96:61:cc:a3:
                    d3:62:06:74:9a:23:ee:9d:d6:a4:8e:f2:02:e3:99:
                    69:8a:42:d5:f4:25:dd:7a:ec:7a:b0:41:d8:f0:27:
                    4f:ce:73:33:6e:a9:f9:06:34:1d:63:ba:a5:d2:7c:
                    76:d6:48:55:5c:0d:a7:75:57:7d:60:57:ba:43:f3:
                    08:6d:cd:d8:ba:2c:c4:a0:be:c0:c8:6b:c0:b5:1d:
                    54:03:96:51:43:9f:c4:31:98:dc:9d:d2:40:b1:58:
                    3f:f4:98:e9:1a:d8:ea:37:ca:99:2b:86:5c:fc:2a:
                    df:4a:1e:d9:e4:72:05:98:b2:8a:f3:a2:bc:d7:45:
                    4c:cf:2d:f3:be:5d:27:a3:93:a0:7f:a1:5b:47:c2:
                    81:aa:85:40:02:34:71:47:2e:d0:58:89:23:5a:97:
                    4e:80:b4:55:f8:08:26:d4:33:9e:4f:26:e6:aa:59:
                    61:4d:3d:03:04:49:98:03:91:f9:20:5f:fc:0e:21:
                    95:9a:a8:ba:33:a2:5c:f8:cb:00:fa:38:d8:78:a3:
                    02:80:7e:ee:fd:95:f3:b6:70:ff:37:37:92:1f:70:
                    56:6d:18:33:2a:ab:94:2a:ae:16:89:30:85:a1:f2:
                    44:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E8:5E:18:B5:E7:84:35:69:A6:20:D1:30:07:2B:E8:CD:13:94:C5
            X509v3 Authority Key Identifier:
                keyid:DD:85:AB:3C:13:9A:72:D8:99:3C:9A:D4:AD:94:13:77:48:1F:FB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YWrPBOactiZPJrUrZQTd0gf-7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cab3d1-d978-4b84-bfa6-1e7cb3618e44/1/3YWrPBOactiZPJrUrZQTd0gf-7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cab3d1-d978-4b84-bfa6-1e7cb3618e44/1/3YWrPBOactiZPJrUrZQTd0gf-7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:69:45:40:50:65:d6:72:7f:e8:01:05:82:44:84:eb:ae:
         f2:0f:0b:96:36:88:0f:0a:0d:db:83:34:79:1f:64:32:10:ac:
         5d:ba:f8:3e:02:cc:44:79:b6:82:b9:40:5e:6c:75:93:d0:2d:
         0b:c3:f0:9c:c4:20:8b:30:df:b3:da:fb:99:4a:7a:5a:5f:ab:
         ec:84:5d:8a:d7:a2:f4:07:05:54:fe:3c:6f:08:2b:ff:16:77:
         d3:a2:e1:d0:c5:70:0e:67:c3:f6:6c:57:32:0c:f0:69:b6:69:
         8d:17:cf:53:40:df:40:96:d9:f1:36:7f:a3:70:63:10:1e:4b:
         64:56:46:78:38:aa:a7:e2:dc:01:1d:f4:7c:95:38:3d:9e:95:
         4b:11:40:70:ad:e1:49:1e:e7:ea:93:bf:64:ed:d5:10:7a:7f:
         9c:14:4c:da:72:63:68:f1:61:28:97:86:cb:47:37:bf:38:09:
         3d:ce:a3:10:f4:13:38:f7:bc:3b:46:34:02:62:d4:07:53:ce:
         84:57:df:50:a6:53:d6:2a:ec:9e:b6:71:a7:a2:2a:4d:af:a3:
         e0:8b:a0:93:e6:ad:84:71:92:52:59:f1:07:10:7d:f8:45:d8:
         aa:db:31:a8:b0:a5:e1:4c:de:fc:c6:a2:75:05:2b:63:79:41:
         d5:1b:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----