Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/20ee6e-c2b1-4d7d-a835-fccbeed8d429/1/3HrX2vUvIBM6LjAlVsZ7zt1xfuo.mft
File:                     3HrX2vUvIBM6LjAlVsZ7zt1xfuo.mft (raw, json)
Hash identifier:          hdt4+bvTUv2YQ+x0jZYGRR4U2IClYvR6zFFyrBHlIxM=
Subject key identifier:   9B:74:90:EF:0C:1D:B4:76:0A:B1:9B:7B:95:12:7F:29:08:AA:D4:35
Authority key identifier: DC:7A:D7:DA:F5:2F:20:13:3A:2E:30:25:56:C6:7B:CE:DD:71:7E:EA
Certificate issuer:       /CN=dc7ad7daf52f20133a2e302556c67bcedd717eea
Certificate serial:       01853736982E9D987B36AD2D6286627C4EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HrX2vUvIBM6LjAlVsZ7zt1xfuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/20ee6e-c2b1-4d7d-a835-fccbeed8d429/1/3HrX2vUvIBM6LjAlVsZ7zt1xfuo.mft
Manifest number:          08E5
Signing time:             Thu 22 Dec 2022 00:23:22 +0000
Manifest this update:     Thu 22 Dec 2022 00:23:22 +0000
Manifest next update:     Fri 23 Dec 2022 00:23:22 +0000
Files and hashes:         1: 3HrX2vUvIBM6LjAlVsZ7zt1xfuo.crl (hash: ab2oZRAFUXmR1thBAfzb9Krdr57LwdkPrV7i/0+wLB4=)
                          2: YjPvYOGyn_vlJ-CYbOgaBR6qWtw.roa (hash: EUf6ZyGS6Odo9oQR+ODykSLEPUWvHsjJTgWsjCEawPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:37:36:98:2e:9d:98:7b:36:ad:2d:62:86:62:7c:4e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7ad7daf52f20133a2e302556c67bcedd717eea
        Validity
            Not Before: Dec 22 00:23:22 2022 GMT
            Not After : Dec 23 00:23:22 2022 GMT
        Subject: CN=9b7490ef0c1db4760ab19b7b95127f2908aad435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a8:2e:ad:0b:fb:56:14:e6:cb:d3:37:46:f1:
                    dd:5d:bb:72:b1:4f:d0:b9:ac:be:c1:ee:21:22:70:
                    b0:e8:1f:67:81:b0:f1:7a:d4:94:8e:10:9c:5b:6a:
                    b2:da:83:71:e6:31:f0:56:0f:76:76:95:2e:a4:c8:
                    0c:df:8a:cc:c9:a9:2e:5d:ae:ba:8f:6e:4f:c8:28:
                    22:aa:b9:f8:5f:9f:0d:78:05:62:1a:35:98:f2:c0:
                    c3:b8:21:18:4c:8f:1a:a4:c4:16:09:3a:f5:66:8b:
                    56:0a:e8:29:3b:ef:e9:ef:9c:d5:20:33:f2:21:12:
                    b2:39:1e:08:f1:ec:21:e5:34:2a:20:b3:7a:5e:f0:
                    fb:7c:8c:9e:01:c1:a4:7c:f1:4a:05:43:49:09:87:
                    47:89:f5:6d:51:ab:2b:a4:07:57:c6:c0:fa:13:cd:
                    ef:29:e5:18:c7:9d:ac:f2:48:22:51:84:e4:c8:c5:
                    a7:69:8e:8a:72:37:eb:95:24:ce:84:9e:74:be:7e:
                    c1:b7:67:a4:e1:4f:8d:e0:ca:ee:b5:61:eb:41:e6:
                    42:64:af:5f:f8:73:b2:f0:41:77:d7:a2:be:aa:88:
                    dd:dd:bd:f5:e4:ab:e4:44:74:35:b0:87:6a:e5:5a:
                    b3:37:c5:8c:dc:e4:a6:48:86:98:e7:4e:a2:73:82:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:74:90:EF:0C:1D:B4:76:0A:B1:9B:7B:95:12:7F:29:08:AA:D4:35
            X509v3 Authority Key Identifier:
                keyid:DC:7A:D7:DA:F5:2F:20:13:3A:2E:30:25:56:C6:7B:CE:DD:71:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HrX2vUvIBM6LjAlVsZ7zt1xfuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/20ee6e-c2b1-4d7d-a835-fccbeed8d429/1/3HrX2vUvIBM6LjAlVsZ7zt1xfuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/20ee6e-c2b1-4d7d-a835-fccbeed8d429/1/3HrX2vUvIBM6LjAlVsZ7zt1xfuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:19:e5:82:20:39:1e:26:b2:02:50:c2:5a:cd:50:22:37:
         a2:f1:e1:86:97:78:5f:ba:88:b5:4b:aa:5e:a8:e4:15:9b:21:
         aa:cc:25:03:5b:12:c7:ac:8c:b5:dd:06:a7:5b:77:d9:bf:c0:
         2e:22:69:87:b4:5a:1c:80:fb:b4:7e:7b:f9:5e:9a:f5:6e:c5:
         9a:65:df:cd:cc:bc:90:34:b5:25:e7:5d:24:3c:ec:c8:ef:35:
         8c:a9:6d:5f:a4:a8:93:0f:d9:4e:9f:01:99:0d:4c:e9:e1:fb:
         b4:ca:49:e7:1e:90:3c:89:68:d1:01:d6:33:c9:d1:7a:12:3d:
         00:cb:26:f5:e2:66:a9:ec:dc:5a:a0:a3:24:d9:68:81:38:8a:
         93:58:43:c0:c0:fd:bb:91:f1:7f:0f:36:e0:63:50:bb:56:83:
         a6:e1:7e:11:d3:58:7f:60:59:61:88:b2:0e:9a:fd:7b:56:16:
         6d:13:db:82:5f:6b:00:35:ab:7f:e4:d6:0f:bd:75:95:11:04:
         25:af:43:ed:1c:24:6e:1a:01:ac:56:75:f6:3c:15:49:89:ab:
         bb:8f:9c:02:c6:2e:72:bb:4f:8f:cf:fe:97:ae:a3:f4:c9:0c:
         99:86:69:07:2e:92:4d:21:0d:8e:f3:ab:58:f8:42:66:15:a9:
         32:45:25:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----