Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e9284b-142e-4765-81a2-04f7851b021e/1/vaLCo5nDCjOTBjiPOmXcDkNOzpk.mft
File:                     vaLCo5nDCjOTBjiPOmXcDkNOzpk.mft (raw, json)
Hash identifier:          edS/UptFXkpghxmRqAAX9f9H8AVIuy/68KRHl78pDFg=
Subject key identifier:   BA:75:96:8A:D3:07:3B:E6:0C:8C:9C:D0:10:58:C2:1B:91:B7:64:4F
Authority key identifier: BD:A2:C2:A3:99:C3:0A:33:93:06:38:8F:3A:65:DC:0E:43:4E:CE:99
Certificate issuer:       /CN=bda2c2a399c30a339306388f3a65dc0e434ece99
Certificate serial:       0A1DEA59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vaLCo5nDCjOTBjiPOmXcDkNOzpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e9284b-142e-4765-81a2-04f7851b021e/1/vaLCo5nDCjOTBjiPOmXcDkNOzpk.mft
Manifest number:          096F
Signing time:             Wed 25 May 2022 11:55:17 +0000
Manifest this update:     Wed 25 May 2022 11:55:17 +0000
Manifest next update:     Thu 26 May 2022 11:55:17 +0000
Files and hashes:         1: vaLCo5nDCjOTBjiPOmXcDkNOzpk.crl (hash: gHroARSfNtAEFPl10eMuZ3lMVcH6GuJPXRS4vYsS/yA=)
                          2: zkTTO6ZnFHaOo-DxT-HOug1ZioM.roa (hash: /HHJZ9+F7NeYursRZ2Aqm7hfWlXxzY9BfVKfkHdmusA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169732697 (0xa1dea59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda2c2a399c30a339306388f3a65dc0e434ece99
        Validity
            Not Before: May 25 11:55:17 2022 GMT
            Not After : May 26 11:55:17 2022 GMT
        Subject: CN=ba75968ad3073be60c8c9cd01058c21b91b7644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:ae:ac:d1:6c:88:be:3b:0b:63:36:88:66:
                    73:e4:81:ce:3d:09:9e:ff:0a:c2:1c:8f:06:7f:ad:
                    60:97:fd:ba:1e:46:97:24:71:89:59:27:0f:f8:4c:
                    24:2b:46:ed:bc:b9:4b:59:48:9a:57:d5:e1:08:24:
                    ea:cc:5e:a3:a8:d9:56:75:34:c3:5c:82:a7:c7:f0:
                    d0:01:d7:93:80:b5:38:cb:2a:ed:2b:d3:ee:95:2b:
                    90:3c:74:6a:16:b5:5f:61:85:75:20:d2:28:44:72:
                    00:50:de:be:43:c2:98:f7:3c:9e:23:a9:9d:55:f1:
                    1c:57:f5:e8:b7:37:ba:22:e8:58:af:c5:2f:21:ec:
                    14:55:3d:dd:48:af:e6:8d:04:e2:c0:83:ca:40:18:
                    ba:de:34:be:17:ce:75:bd:b3:2f:37:ad:35:f5:db:
                    9b:8d:12:e6:c3:9c:a4:66:a8:ff:26:a8:d4:a0:23:
                    f7:5f:9b:7c:4e:ac:17:09:4f:4b:58:e4:5f:c2:7b:
                    93:7c:5c:e5:22:1d:a8:bc:dd:93:a7:41:46:b4:20:
                    0f:0a:fa:38:79:76:24:40:cf:6d:c0:78:0c:88:a6:
                    d9:b7:c7:ec:63:80:b5:94:04:cb:3c:23:97:cd:85:
                    fd:88:b4:c5:5e:62:cb:11:76:f7:a5:16:6c:09:ed:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:96:8A:D3:07:3B:E6:0C:8C:9C:D0:10:58:C2:1B:91:B7:64:4F
            X509v3 Authority Key Identifier:
                keyid:BD:A2:C2:A3:99:C3:0A:33:93:06:38:8F:3A:65:DC:0E:43:4E:CE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaLCo5nDCjOTBjiPOmXcDkNOzpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e9284b-142e-4765-81a2-04f7851b021e/1/vaLCo5nDCjOTBjiPOmXcDkNOzpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e9284b-142e-4765-81a2-04f7851b021e/1/vaLCo5nDCjOTBjiPOmXcDkNOzpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4e:b7:c7:9f:24:7b:8f:9e:28:59:7c:d7:5c:f6:87:36:cc:
         61:f0:20:5c:78:52:d7:97:20:ee:5e:b7:76:09:10:f0:3f:c7:
         9a:c6:06:e9:6c:51:ee:f1:3f:98:8e:d5:cb:5e:10:f8:05:6b:
         11:65:5c:b8:89:c6:85:27:b4:73:c5:ee:4b:b6:44:5b:e2:b8:
         26:2d:68:a8:b1:d1:3f:18:d6:81:e7:f8:9c:23:a3:15:d0:6a:
         05:6b:1e:89:44:c1:5f:65:58:cc:18:48:72:d7:e6:b7:50:ff:
         20:d6:b8:e4:a7:e0:c4:01:e1:62:b5:6e:85:92:2a:c5:34:44:
         a1:40:aa:4b:01:36:cc:68:e8:86:2b:6e:b2:87:e8:b8:e8:3f:
         1c:0b:11:ee:d5:9d:61:fa:eb:8a:5e:dc:07:a7:07:28:d9:54:
         48:93:ca:1a:2b:cf:79:f2:91:16:9c:11:00:58:3b:52:00:f3:
         19:05:cc:a2:66:b4:32:08:6c:9d:5f:af:f4:aa:bf:94:5b:fe:
         68:b5:0d:08:97:2a:e8:90:82:1a:f2:81:f4:89:e4:23:c8:b5:
         3e:8e:2f:d7:ee:b0:95:11:88:9f:71:9e:55:e2:fd:15:a6:ab:
         45:17:46:0a:d8:e9:8d:4c:4c:5e:46:ae:33:b9:b0:7e:05:fa:
         6d:68:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----