Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/350916-f332-495b-b872-2f4ccfab9359/1/8kkD8rxEw-t5U7uSzftkwZTwW3I.mft
File:                     8kkD8rxEw-t5U7uSzftkwZTwW3I.mft (raw, json)
Hash identifier:          +IVN+dihySkIovFEPUyvQ8fh/YPjJLyOFlQ4yFGWf5U=
Subject key identifier:   55:9D:29:1A:62:B1:01:ED:C4:45:AD:C5:67:16:AF:17:DE:B5:18:70
Authority key identifier: F2:49:03:F2:BC:44:C3:EB:79:53:BB:92:CD:FB:64:C1:94:F0:5B:72
Certificate issuer:       /CN=f24903f2bc44c3eb7953bb92cdfb64c194f05b72
Certificate serial:       0B43DDC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8kkD8rxEw-t5U7uSzftkwZTwW3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/350916-f332-495b-b872-2f4ccfab9359/1/8kkD8rxEw-t5U7uSzftkwZTwW3I.mft
Manifest number:          087B
Signing time:             Thu 03 Mar 2022 08:00:19 +0000
Manifest this update:     Thu 03 Mar 2022 08:00:19 +0000
Manifest next update:     Fri 04 Mar 2022 08:00:19 +0000
Files and hashes:         1: 4APGEr01eRnI1gVllBUGtovRQVQ.roa (hash: ZUBrnZHjWsLoJXVN6TiuE2de0yl/Wqe4mdRTJ32lqSw=)
                          2: 8kkD8rxEw-t5U7uSzftkwZTwW3I.crl (hash: 7bytVWNKkKU28/WM5rlEOmUcRUrR4n96+2KVQY8tuFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188997056 (0xb43ddc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f24903f2bc44c3eb7953bb92cdfb64c194f05b72
        Validity
            Not Before: Mar  3 08:00:19 2022 GMT
            Not After : Mar  4 08:00:19 2022 GMT
        Subject: CN=559d291a62b101edc445adc56716af17deb51870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:97:ee:54:ab:75:37:1c:3c:ea:7b:94:83:23:
                    60:5a:16:0b:32:11:91:24:a6:04:bf:a5:2d:d3:a0:
                    20:78:4c:9f:8e:12:d6:88:22:80:d0:7d:7d:06:63:
                    ab:7c:8f:d3:72:24:16:ed:be:ed:64:34:c1:7e:9a:
                    48:91:5a:c2:5a:64:50:33:ab:1f:1f:4e:98:f8:fc:
                    c8:b1:98:27:10:ec:cd:70:a4:39:27:f4:61:02:06:
                    65:7e:a7:fa:83:ae:92:e6:c1:52:23:e1:4b:99:93:
                    3b:72:ae:5b:33:5a:1f:67:3b:23:38:09:b0:c5:91:
                    88:4b:b4:ee:9c:79:fe:c6:ab:a2:49:09:4d:e4:c0:
                    28:09:d2:ad:69:cb:4c:95:a6:dc:d8:32:68:9a:2e:
                    2f:94:75:04:2f:35:fc:ea:53:f4:dd:d3:24:bc:d3:
                    ed:e3:5c:67:f7:20:e5:11:20:9a:19:90:7c:6c:9b:
                    b2:35:dd:f8:f9:04:71:37:fe:1a:a7:46:68:ba:51:
                    f9:73:af:5b:2c:d2:9f:50:b4:f6:aa:4d:56:e2:01:
                    09:5b:3a:d7:90:99:23:f4:34:36:68:c5:cc:32:96:
                    7d:59:17:b2:55:be:ae:68:20:fa:b8:3e:e6:d7:6b:
                    7e:37:15:5d:f0:98:1c:71:2b:40:e4:13:96:24:55:
                    2b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9D:29:1A:62:B1:01:ED:C4:45:AD:C5:67:16:AF:17:DE:B5:18:70
            X509v3 Authority Key Identifier:
                keyid:F2:49:03:F2:BC:44:C3:EB:79:53:BB:92:CD:FB:64:C1:94:F0:5B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kkD8rxEw-t5U7uSzftkwZTwW3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/350916-f332-495b-b872-2f4ccfab9359/1/8kkD8rxEw-t5U7uSzftkwZTwW3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/350916-f332-495b-b872-2f4ccfab9359/1/8kkD8rxEw-t5U7uSzftkwZTwW3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:65:46:7c:d0:02:0b:76:86:41:79:d8:f3:18:10:a4:99:77:
         c3:27:9f:c7:b7:21:ab:07:87:9d:2b:c1:95:4c:0d:cd:50:20:
         0b:6c:2d:ff:43:3a:a3:7d:d4:be:a0:48:c6:2a:67:ed:76:88:
         35:66:90:ea:e1:a5:28:8e:28:14:4a:52:36:78:ac:dc:a5:1d:
         aa:f8:eb:bb:0e:99:52:9b:7a:e0:fe:96:67:b7:3f:bb:1a:eb:
         01:9f:7f:5e:b6:c9:ba:c6:90:a7:ad:5f:ed:66:ca:5f:16:71:
         b8:31:26:f7:32:64:4a:bb:36:0f:1f:a5:02:df:2e:40:7b:e8:
         ed:79:34:a0:ed:97:19:be:5a:eb:de:ba:c8:22:13:cc:32:4b:
         e8:3a:75:c4:ec:e7:6a:0d:f6:fe:18:0a:9d:94:58:9f:2a:5a:
         d4:fd:09:9c:c4:04:b1:39:e0:5e:87:b9:db:78:25:0f:7f:87:
         56:55:bd:ad:6a:f3:4a:6b:6e:1a:dc:72:16:69:09:d0:94:ea:
         81:86:fc:22:bd:47:e0:17:fd:47:75:57:4b:13:ac:95:89:08:
         c4:c6:0d:14:16:4f:1e:77:93:c8:55:ef:35:08:51:8f:c2:d5:
         74:5c:4e:b7:08:af:7f:74:42:bb:26:c1:21:62:ab:c0:5a:48:
         6b:49:df:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----