Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/bWsgBF4dD-bO8oeB6zAL3pglpLU.mft
File:                     bWsgBF4dD-bO8oeB6zAL3pglpLU.mft (raw, json)
Hash identifier:          lFiD4RNk7DPD68+CE0cQf5xtL8KjT1I4mbeNtziVxPY=
Subject key identifier:   76:56:FA:A3:D4:06:5A:A8:21:0F:E8:77:4A:1E:05:ED:58:3A:8B:37
Authority key identifier: 6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
Certificate issuer:       /CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Certificate serial:       01845575D823C42EB224C993BAD2016C98D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/bWsgBF4dD-bO8oeB6zAL3pglpLU.mft
Manifest number:          0614
Signing time:             Tue 08 Nov 2022 04:18:17 +0000
Manifest this update:     Tue 08 Nov 2022 04:18:17 +0000
Manifest next update:     Wed 09 Nov 2022 04:18:17 +0000
Files and hashes:         1: _2dHY9aVhKazyzoE0FQKcP3a-og.roa (hash: ie9zLEFoO3ME7MsJqjv+jbHltc9Diklv5IJ962NvMSc=)
                          2: _97llZXrV4m0HRs9wt9J1Q6rcAI.roa (hash: 0d6sxQ3nIMJXoGnFnElOPCHVfxr7HIsKqmjzD9Jacq4=)
                          3: bWsgBF4dD-bO8oeB6zAL3pglpLU.crl (hash: +tjSuFpNYWfR+0Jic964u2jYaWj/yy/zCJ53C+Rx4bc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:55:75:d8:23:c4:2e:b2:24:c9:93:ba:d2:01:6c:98:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
        Validity
            Not Before: Nov  8 04:18:17 2022 GMT
            Not After : Nov  9 04:18:17 2022 GMT
        Subject: CN=7656faa3d4065aa8210fe8774a1e05ed583a8b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:95:19:d6:82:a2:6d:5d:37:6d:87:75:91:
                    49:15:fe:03:d6:91:1b:3b:15:bb:24:26:b0:a3:6b:
                    93:e3:e6:85:6e:fc:a7:31:0c:77:64:fb:65:b0:36:
                    37:5d:9c:bf:82:e2:30:d2:bd:3f:ad:7d:74:ee:b6:
                    ac:3a:13:41:3e:24:f4:77:e1:6e:8a:79:85:ab:dd:
                    c2:16:f3:a7:5a:32:ea:56:40:4b:2f:fb:8d:3c:4c:
                    ff:26:2c:17:42:59:74:03:5d:4c:83:cf:7c:09:1d:
                    d0:84:3f:99:bb:02:9a:99:43:29:46:05:0c:c9:ff:
                    d4:e6:4f:9c:e4:d8:9a:b0:f9:21:b7:cd:5d:fe:fc:
                    3a:14:04:1e:25:e5:e8:db:93:67:72:62:c0:4c:8f:
                    6c:ec:9a:51:01:10:78:26:36:f3:a4:4c:fe:89:7c:
                    0e:2a:c9:6f:e0:52:c9:1b:51:d0:97:1d:55:e7:4c:
                    e2:43:f5:c8:1d:27:71:b7:23:e1:7f:41:3a:d5:4b:
                    ae:8f:d3:87:78:54:26:3a:5c:45:10:db:46:4b:d0:
                    c0:1c:5a:24:ae:3d:09:05:b4:56:37:ac:5c:1b:4f:
                    5e:9c:91:d2:f7:42:0a:ad:1c:57:c0:ab:01:d0:68:
                    4c:65:3d:b8:db:49:94:4e:a9:95:4f:4b:50:9e:a3:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:56:FA:A3:D4:06:5A:A8:21:0F:E8:77:4A:1E:05:ED:58:3A:8B:37
            X509v3 Authority Key Identifier:
                keyid:6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/bWsgBF4dD-bO8oeB6zAL3pglpLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/bWsgBF4dD-bO8oeB6zAL3pglpLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:db:1c:f9:ed:28:cc:99:ba:a3:fd:39:63:d2:61:c0:d5:
         0c:70:7f:d9:91:f2:66:2f:9b:70:d0:63:f4:aa:78:18:5e:82:
         09:98:5d:19:00:11:7b:01:69:3f:d1:a4:cf:67:86:a5:9a:54:
         e0:bd:ac:07:5b:80:9e:96:53:d4:bf:8a:d4:c8:20:3d:1b:f5:
         0a:73:5c:e2:f3:b1:c2:90:94:34:55:65:a2:b8:b8:d5:18:40:
         fa:78:92:ae:f8:6d:b0:d0:2a:41:1b:6f:75:98:55:56:50:b3:
         09:64:65:58:9d:c3:b2:0f:2b:0d:b9:af:1e:1f:ac:36:f4:e1:
         f7:cd:76:7b:f3:ad:2d:18:f6:3f:e4:e5:dd:56:4f:2c:d4:96:
         59:2e:f7:87:b8:b3:af:71:2a:3b:b5:e6:6f:8f:5a:45:14:10:
         93:df:b4:cb:f8:1f:d0:31:4a:79:20:30:52:8f:55:d4:40:27:
         50:2e:03:7b:bd:3b:c3:fc:0d:18:99:ca:90:63:1f:f5:31:1c:
         45:a4:25:e9:e4:77:87:d6:b6:fa:9b:c4:29:db:5d:db:cc:cc:
         be:a1:14:59:56:b9:41:a0:df:77:2a:cc:9b:89:30:93:93:b8:
         f4:bc:c4:65:e3:95:61:c1:d5:74:a4:32:88:62:52:c3:3c:96:
         85:1b:a4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----