Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bf6267-1f4f-446e-aeb1-ef2d9ad0ca6c/1/3GmwWLewGtvto7Y2LzwHUeku4ew.mft
File:                     3GmwWLewGtvto7Y2LzwHUeku4ew.mft (raw, json)
Hash identifier:          bvn8Z+QVFbO+Uhn6YplsZnXqRmbwD6sBKlvPskVEyE4=
Subject key identifier:   EA:BA:9D:51:E5:67:78:A7:9E:84:33:97:CB:90:FA:45:45:87:DA:52
Authority key identifier: DC:69:B0:58:B7:B0:1A:DB:ED:A3:B6:36:2F:3C:07:51:E9:2E:E1:EC
Certificate issuer:       /CN=dc69b058b7b01adbeda3b6362f3c0751e92ee1ec
Certificate serial:       0185290CC34392471DF17CCCF60CBB08F9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GmwWLewGtvto7Y2LzwHUeku4ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/bf6267-1f4f-446e-aeb1-ef2d9ad0ca6c/1/3GmwWLewGtvto7Y2LzwHUeku4ew.mft
Manifest number:          0589
Signing time:             Mon 19 Dec 2022 06:23:00 +0000
Manifest this update:     Mon 19 Dec 2022 06:23:00 +0000
Manifest next update:     Tue 20 Dec 2022 06:23:00 +0000
Files and hashes:         1: 3GmwWLewGtvto7Y2LzwHUeku4ew.crl (hash: s828Fn8+DbiLnjz/Ed+S9GC5YhEE+aez3sKKMZOVSTs=)
                          2: G4wm_TC_6cJ0UrqzK_lU5ih9jTQ.roa (hash: wkCeczXaGXHFCSTYR/tcvQ7/E8GgDwZZMSB9kncET4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:0c:c3:43:92:47:1d:f1:7c:cc:f6:0c:bb:08:f9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc69b058b7b01adbeda3b6362f3c0751e92ee1ec
        Validity
            Not Before: Dec 19 06:23:00 2022 GMT
            Not After : Dec 20 06:23:00 2022 GMT
        Subject: CN=eaba9d51e56778a79e843397cb90fa454587da52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:49:ba:45:02:6b:bd:d2:46:0e:9b:9a:c2:
                    84:1e:83:09:28:8c:69:fd:99:95:36:f1:45:f4:07:
                    1a:0a:f7:de:f9:8c:5a:4a:40:5d:99:19:a8:e4:c4:
                    a1:0b:16:a4:de:81:f9:29:33:66:b4:6c:fa:e9:2d:
                    a2:d8:a3:a0:98:e8:98:8a:a1:ae:6d:1d:b6:44:07:
                    29:61:2b:ee:0b:7a:0d:2d:6e:87:97:17:f7:8a:90:
                    06:c5:4b:2c:e6:a5:c4:af:2c:7a:28:b5:2e:dd:d4:
                    ea:14:6e:84:2c:cb:f5:81:e4:5c:89:a4:71:58:20:
                    f8:9d:08:f7:4d:2b:4d:15:c3:90:4a:16:20:df:da:
                    eb:20:77:f2:b7:d6:ce:b3:5c:56:59:3a:0f:b4:76:
                    05:ce:62:5a:78:71:56:4f:63:4c:3f:3c:b1:51:40:
                    39:d9:eb:4b:35:7e:20:9b:ce:74:75:63:8b:6e:54:
                    96:ac:38:31:e0:ec:85:f3:93:91:32:11:f9:8f:ad:
                    84:a7:ad:79:8a:22:f5:7e:41:fd:94:af:cd:16:f1:
                    65:8c:ec:1e:08:dc:71:50:8e:30:5c:65:e6:5c:5e:
                    85:1e:e5:f1:eb:aa:3d:a3:c8:ef:85:b7:09:bf:3d:
                    cb:b3:f7:1c:37:63:96:dc:97:a7:3b:14:ca:35:c7:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BA:9D:51:E5:67:78:A7:9E:84:33:97:CB:90:FA:45:45:87:DA:52
            X509v3 Authority Key Identifier:
                keyid:DC:69:B0:58:B7:B0:1A:DB:ED:A3:B6:36:2F:3C:07:51:E9:2E:E1:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GmwWLewGtvto7Y2LzwHUeku4ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bf6267-1f4f-446e-aeb1-ef2d9ad0ca6c/1/3GmwWLewGtvto7Y2LzwHUeku4ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bf6267-1f4f-446e-aeb1-ef2d9ad0ca6c/1/3GmwWLewGtvto7Y2LzwHUeku4ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:78:4f:18:23:5e:3e:61:7d:5b:d9:ae:4d:88:78:25:da:
         d2:55:5d:10:70:cf:dd:a1:0b:ba:ed:1c:c0:fd:c9:37:9b:cb:
         47:a9:cb:f7:e0:e9:2d:df:ae:98:66:79:1d:1f:d2:7c:cd:b8:
         28:68:74:ac:e0:1d:88:48:f1:53:81:d2:b4:6e:f4:cc:b8:d5:
         bc:9b:67:60:67:9c:e0:02:c3:bf:76:b8:1b:8f:c6:42:de:c9:
         2b:5e:a4:4d:dd:61:5f:dc:0a:1b:eb:29:46:2f:9a:96:57:94:
         a3:9d:6a:b3:26:19:07:2e:69:1e:86:5c:63:13:e1:3e:71:09:
         83:98:60:e3:22:0f:08:24:46:46:f2:1d:66:15:4f:2d:75:87:
         b2:6c:ab:48:b3:fe:6f:e4:9b:fe:db:4b:08:21:f8:53:fc:bd:
         c5:93:27:88:29:6c:c9:e3:85:33:70:c4:e3:7c:a2:e9:b6:9a:
         ad:5f:6f:28:15:8b:9f:b5:a2:11:cd:87:c4:1e:d3:6a:75:42:
         83:1f:22:00:4f:ad:cc:16:e8:dc:b2:12:47:f2:6a:5d:9b:1d:
         27:f8:85:fb:7b:92:d2:50:18:8e:c6:23:23:79:cd:4d:32:9c:
         3e:85:67:62:88:00:0e:35:e6:6c:58:98:e0:8f:bf:0a:7c:73:
         e6:6c:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----