Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bfc1ec-07e6-40e3-a3a7-9176979b5a81/1/DGN6i2AX4q_wJh4ejN3Z320sQXM.mft
File:                     DGN6i2AX4q_wJh4ejN3Z320sQXM.mft (raw, json)
Hash identifier:          lPSaN2zdkZpH/dzcKXAbVOLwqLZH2GhWp0A+bF02W6g=
Subject key identifier:   73:2E:C4:D9:2A:44:03:32:08:A5:3E:93:8B:32:2A:21:22:8E:9C:D1
Authority key identifier: 0C:63:7A:8B:60:17:E2:AF:F0:26:1E:1E:8C:DD:D9:DF:6D:2C:41:73
Certificate issuer:       /CN=0c637a8b6017e2aff0261e1e8cddd9df6d2c4173
Certificate serial:       07DEE463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DGN6i2AX4q_wJh4ejN3Z320sQXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bfc1ec-07e6-40e3-a3a7-9176979b5a81/1/DGN6i2AX4q_wJh4ejN3Z320sQXM.mft
Manifest number:          08DE
Signing time:             Tue 05 Apr 2022 22:39:40 +0000
Manifest this update:     Tue 05 Apr 2022 22:39:40 +0000
Manifest next update:     Wed 06 Apr 2022 22:39:40 +0000
Files and hashes:         1: DGN6i2AX4q_wJh4ejN3Z320sQXM.crl (hash: LkjxN+jwQ0qOMjR5iTNjGckrASfX3wM0tT6H7cOmFQI=)
                          2: c25ezgd4WjsFACBiy5eCkIz3i2E.roa (hash: VcrtKM6G8fkgtcOzDCIpVTYCj2XyqTpPPxl28LbrYwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132047971 (0x7dee463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c637a8b6017e2aff0261e1e8cddd9df6d2c4173
        Validity
            Not Before: Apr  5 22:39:40 2022 GMT
            Not After : Apr  6 22:39:40 2022 GMT
        Subject: CN=732ec4d92a44033208a53e938b322a21228e9cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:35:f1:e3:40:1b:68:50:70:a0:25:98:a9:
                    ed:42:36:d5:67:ca:21:9c:55:41:f6:23:d6:81:76:
                    a6:45:f4:4c:87:a7:e0:39:93:d7:3f:d8:27:5e:bd:
                    8f:48:76:27:5c:48:d7:df:5e:e6:75:8d:6e:d1:5a:
                    a0:02:83:41:e6:82:55:6a:9e:87:b6:ac:58:a5:07:
                    46:3b:0a:0f:53:10:09:43:66:e7:59:f4:e0:d1:9f:
                    f2:dc:c3:d5:42:cc:78:08:90:9e:1a:06:a8:7b:12:
                    27:ac:32:3f:fb:37:64:ab:e9:01:dd:78:2e:ed:c4:
                    a8:6e:34:41:ac:d6:c3:3b:52:70:90:22:af:e7:ee:
                    a5:ba:f2:54:3e:c9:67:15:ce:d5:db:59:93:e6:51:
                    0d:00:18:57:44:1e:5f:a5:b3:f2:b4:5a:7f:95:4e:
                    48:12:ba:13:5a:5d:ea:66:3c:29:e1:82:2d:36:bd:
                    9e:80:43:41:57:09:eb:fa:71:38:41:f2:d6:e0:e1:
                    e9:a2:e6:e1:94:cf:1c:44:87:68:eb:e3:9d:7a:73:
                    34:bd:bf:b5:9d:f5:77:ab:78:f2:76:f2:96:b9:4c:
                    4c:e3:87:bc:69:8c:2c:ad:7f:87:1e:57:d0:04:d7:
                    96:7c:1c:7e:c6:99:d2:b9:d4:48:3a:2f:0b:1e:a7:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:C4:D9:2A:44:03:32:08:A5:3E:93:8B:32:2A:21:22:8E:9C:D1
            X509v3 Authority Key Identifier:
                keyid:0C:63:7A:8B:60:17:E2:AF:F0:26:1E:1E:8C:DD:D9:DF:6D:2C:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGN6i2AX4q_wJh4ejN3Z320sQXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bfc1ec-07e6-40e3-a3a7-9176979b5a81/1/DGN6i2AX4q_wJh4ejN3Z320sQXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bfc1ec-07e6-40e3-a3a7-9176979b5a81/1/DGN6i2AX4q_wJh4ejN3Z320sQXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c2:94:b9:e1:01:39:69:1c:a9:76:e7:6e:7b:38:c7:4f:f9:
         41:f2:2f:c7:5f:65:bb:01:ea:c2:74:47:cb:a6:52:11:62:c9:
         60:35:23:e7:f7:55:20:c9:a3:68:0d:9d:29:e1:44:73:69:4b:
         16:60:11:e2:63:20:f3:ff:35:19:f8:0f:52:af:86:e4:57:8f:
         13:05:15:1e:a1:4d:eb:98:c6:5c:9d:4e:49:fc:5c:97:dc:42:
         92:39:0c:c6:55:49:36:9c:5a:d9:e7:b5:95:85:23:ea:0c:a9:
         aa:32:30:bc:76:65:03:f5:43:15:96:96:d3:c5:6a:74:e2:73:
         0d:ad:fc:45:0a:d7:23:0f:85:33:46:71:99:ee:71:e4:3b:a9:
         1f:b5:02:f2:75:99:72:f4:ab:13:52:03:1d:50:8f:f1:c4:33:
         4b:fe:60:52:b4:ce:b5:67:13:28:75:a1:b1:dc:46:fe:d2:59:
         05:dd:00:2c:a4:60:d7:63:2b:98:31:9e:62:18:50:82:2b:80:
         0c:d4:d8:b6:e9:d6:1d:84:d6:c1:19:c5:5e:a2:bb:94:ce:58:
         a8:69:fe:79:7b:9f:c1:d8:6d:d5:c4:66:32:31:06:8b:6a:28:
         c0:89:2d:01:f6:d9:12:5a:d6:22:d4:d5:d9:e3:75:af:c7:de:
         1c:99:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----