Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.mft
File:                     2gVY1zSxbAp5i5A0RXDl5cwFOZ0.mft (raw, json)
Hash identifier:          cvuhRLAmQk8trf4FbIvtsj9Lt1dJCVXoRNWUmtcsOgI=
Subject key identifier:   0A:90:67:1B:6E:58:EA:64:29:4D:E3:2E:F9:18:1C:6D:E2:0C:52:DA
Authority key identifier: DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D
Certificate issuer:       /CN=da0558d734b16c0a798b90344570e5e5cc05399d
Certificate serial:       01840E132A3573C9DA0AA0A2228D843F4076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.mft
Manifest number:          01DC
Signing time:             Tue 25 Oct 2022 07:37:27 +0000
Manifest this update:     Tue 25 Oct 2022 07:37:27 +0000
Manifest next update:     Wed 26 Oct 2022 07:37:27 +0000
Files and hashes:         1: 2gVY1zSxbAp5i5A0RXDl5cwFOZ0.crl (hash: 4jbGqW+iAxbKlcwCHBO/o5RfigredaKUQpYdEkRB8Sk=)
                          2: 43KrS8dWhrOlVAQXMc6q19HPYuU.roa (hash: 5p4QzJFITLwSviD65JhHEeZg7mmSp1Rc++vhtEtMMos=)
                          3: fUs1MJ8msl2BteVlFXslRv8zwcE.roa (hash: 169ImsXbrwiWXCOJu9CdaFts+YKu74qvwOJnhnmRuqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0e:13:2a:35:73:c9:da:0a:a0:a2:22:8d:84:3f:40:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0558d734b16c0a798b90344570e5e5cc05399d
        Validity
            Not Before: Oct 25 07:37:27 2022 GMT
            Not After : Oct 26 07:37:27 2022 GMT
        Subject: CN=0a90671b6e58ea64294de32ef9181c6de20c52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:e4:0e:f8:91:5e:b8:82:36:b9:72:52:43:
                    ce:00:51:48:7e:71:7d:28:4e:09:5f:7c:b9:9f:57:
                    98:7d:4a:57:b0:05:f4:85:30:18:1c:b7:f1:51:44:
                    24:63:0e:d7:8e:c1:e9:a8:ee:26:bf:ee:a1:1a:97:
                    ca:20:26:fc:80:62:fe:f7:f4:15:3a:3e:33:d4:e5:
                    0c:7c:50:3b:0a:bc:b0:f7:1b:94:6c:e9:cb:66:f8:
                    11:4e:23:0f:78:20:e3:a1:d3:1f:57:a6:50:57:b4:
                    1a:39:64:f8:56:11:8c:26:63:78:06:40:f3:94:b0:
                    c4:f5:3e:c3:4a:d3:37:9f:2f:02:2f:e7:49:64:11:
                    b0:91:bf:b9:38:51:5b:9e:57:df:2f:f6:44:f1:28:
                    15:f9:08:ef:e1:c7:de:17:4e:18:11:97:58:a5:28:
                    07:f9:1c:66:9d:6d:ca:82:ee:07:ae:e4:72:f3:e6:
                    6d:7d:80:30:64:c1:c3:ec:50:8f:dc:50:59:b7:de:
                    a5:87:f2:85:75:3d:d6:97:07:fd:7d:0b:1e:44:d7:
                    17:96:76:cd:e1:3c:34:0d:7a:e1:f5:3b:f2:e4:2f:
                    79:76:28:76:34:84:32:b8:97:42:82:d4:95:6a:36:
                    9f:ff:91:dc:39:f2:14:f5:5c:a3:d7:7c:b0:ec:ea:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:90:67:1B:6E:58:EA:64:29:4D:E3:2E:F9:18:1C:6D:E2:0C:52:DA
            X509v3 Authority Key Identifier:
                keyid:DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b2:44:06:de:a3:b4:a7:6a:7b:06:23:31:9b:02:f1:b1:ca:
         ec:6b:80:b1:4c:3f:9d:b0:29:b9:7e:d6:1a:d2:3e:ff:f5:ad:
         9d:0e:96:1d:ef:a8:15:78:f4:03:fd:af:19:b2:c5:ba:ec:0b:
         a2:a8:b8:0a:7b:2b:d0:c9:7b:31:17:5f:06:4b:db:62:60:44:
         35:93:52:23:79:1f:c5:83:fc:93:91:be:c0:be:36:7a:f8:43:
         76:4e:b0:71:bc:b5:25:b9:33:07:5e:e9:cf:cf:1b:e5:c9:53:
         0d:96:33:83:7f:ad:e6:56:76:8c:a6:76:b8:48:47:60:46:26:
         0d:05:6a:2b:64:0a:5c:72:f9:8d:92:61:2d:2d:17:6b:7b:1d:
         f0:e7:e2:fb:88:b6:ef:48:01:de:da:0b:59:d3:28:17:3f:05:
         3a:3e:58:96:ff:dc:34:4c:dd:0b:76:db:d6:22:18:ff:85:e7:
         50:42:11:60:03:4d:93:2c:2d:93:e9:d2:65:a1:e9:f8:fa:45:
         84:ac:07:55:dd:45:d9:97:86:7a:68:5c:d0:ee:1e:09:76:e2:
         33:d3:e4:45:83:0f:8b:4b:40:1c:a7:b8:51:bb:9d:99:77:66:
         34:e5:7b:61:f2:76:1d:ad:bb:25:67:5a:7a:2e:7e:e4:af:52:
         cd:57:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----