Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/zVeJTJnbnb90XmZKOg0nT-FuXa0.mft
File:                     zVeJTJnbnb90XmZKOg0nT-FuXa0.mft (raw, json)
Hash identifier:          ziUMEzFdOMbs51ypC/2PPH+i8LDhejJL9N/mnByPAjk=
Subject key identifier:   B1:E6:32:E6:DA:AC:3F:F3:4D:A9:2A:FB:52:67:7E:2D:7B:F0:59:CA
Authority key identifier: CD:57:89:4C:99:DB:9D:BF:74:5E:66:4A:3A:0D:27:4F:E1:6E:5D:AD
Certificate issuer:       /CN=cd57894c99db9dbf745e664a3a0d274fe16e5dad
Certificate serial:       01827BF91812A302B24070C9709B47F07C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVeJTJnbnb90XmZKOg0nT-FuXa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/zVeJTJnbnb90XmZKOg0nT-FuXa0.mft
Manifest number:          05B2
Signing time:             Mon 08 Aug 2022 05:41:38 +0000
Manifest this update:     Mon 08 Aug 2022 05:41:38 +0000
Manifest next update:     Tue 09 Aug 2022 05:41:38 +0000
Files and hashes:         1: C6WG1YWu2fZl0IxGrvkuNd7azBE.roa (hash: i1LhjNEZYr56b+rxkEpFXQHDD1IOBuF8whnwn9gYPb8=)
                          2: K9jrtxqd6JGh0EV-ybcipMUcuw4.roa (hash: gqEo3mzCOjLcdkFC2kTY015ZfHHuxSBHfN8d7JY2/oY=)
                          3: zVeJTJnbnb90XmZKOg0nT-FuXa0.crl (hash: p4RPP8zqyL5t3Gc6A7rmz8z55gvp2x1OUS55gnG2n3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7b:f9:18:12:a3:02:b2:40:70:c9:70:9b:47:f0:7c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd57894c99db9dbf745e664a3a0d274fe16e5dad
        Validity
            Not Before: Aug  8 05:41:38 2022 GMT
            Not After : Aug  9 05:41:38 2022 GMT
        Subject: CN=b1e632e6daac3ff34da92afb52677e2d7bf059ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:f4:f4:d9:3f:5a:9b:0c:e2:5c:cf:cb:d2:
                    74:43:43:cd:78:61:02:ec:6c:f3:8f:b3:60:38:e0:
                    c9:2a:7c:f7:51:c5:c4:a0:59:7e:9f:cf:59:67:7a:
                    0d:f0:2a:d6:ad:3a:96:10:8c:ec:0a:c8:67:3e:55:
                    d3:cb:6d:19:41:89:2a:d5:0e:5a:ba:e8:72:13:75:
                    47:7c:c1:11:f4:7e:ad:de:10:6f:10:ac:e3:b7:dd:
                    ce:9f:ae:85:6f:4b:b1:cc:c3:40:1b:fc:82:c2:45:
                    38:20:c0:1a:62:37:e0:88:db:58:69:5c:6b:e4:73:
                    87:32:a3:0c:59:0e:ef:97:4c:91:d5:66:03:fc:31:
                    b0:c4:03:02:4f:68:1a:33:52:ad:ae:ae:55:bf:4e:
                    0c:2b:b6:88:5c:cc:94:aa:54:08:b4:39:a1:db:d7:
                    5e:e4:c8:fc:31:af:e3:3a:69:82:3b:8f:03:95:1e:
                    fb:8a:d4:09:61:4a:fa:e5:79:b8:23:67:b5:d3:e7:
                    c3:aa:fb:8d:48:23:59:54:cb:17:7e:8f:26:e3:ed:
                    3d:19:ae:e0:aa:22:14:5d:bb:fc:9c:cb:6e:16:cd:
                    25:c7:4b:13:33:71:e3:83:dd:6c:18:5a:75:12:7b:
                    d8:a3:a1:a8:d2:d6:0d:91:de:2f:f9:07:a6:cc:9d:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E6:32:E6:DA:AC:3F:F3:4D:A9:2A:FB:52:67:7E:2D:7B:F0:59:CA
            X509v3 Authority Key Identifier:
                keyid:CD:57:89:4C:99:DB:9D:BF:74:5E:66:4A:3A:0D:27:4F:E1:6E:5D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVeJTJnbnb90XmZKOg0nT-FuXa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/zVeJTJnbnb90XmZKOg0nT-FuXa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/zVeJTJnbnb90XmZKOg0nT-FuXa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:eb:a4:a3:6c:f1:dc:13:db:44:c3:c1:af:ab:6c:74:b1:
         75:a7:b5:08:a0:82:17:76:ab:02:d9:5e:8c:44:8e:9a:52:d5:
         5b:6a:85:a0:d6:02:a7:c1:13:20:9e:24:46:98:92:a0:1e:6c:
         5d:d0:00:eb:ea:dc:92:fa:65:f9:73:51:01:e7:a7:cb:17:6f:
         8c:22:79:b8:89:25:3e:3c:95:5f:39:99:53:9b:09:69:f1:f8:
         f9:a8:63:49:a8:d2:e1:0e:f8:17:cd:ee:ea:94:5a:54:d3:2e:
         c9:6b:b9:6d:c5:0e:9a:9d:7e:9e:90:07:bf:a0:dc:c4:a4:2b:
         e7:d6:25:bc:4f:2d:ed:32:98:45:a3:d8:eb:1c:96:af:88:96:
         09:bf:5d:06:41:28:40:c2:3b:db:5a:09:fa:f5:85:01:be:55:
         72:77:37:c7:94:33:68:6e:93:44:b6:30:ff:dc:32:e2:66:f2:
         7e:0f:91:53:a6:d7:57:c2:d6:ac:af:b6:04:90:8c:2f:51:05:
         4d:74:c1:15:b9:32:84:f3:00:ad:7b:38:85:47:d0:63:8f:89:
         4f:ec:ce:f3:bd:ad:b5:56:b3:8d:bc:31:65:18:52:f5:ac:04:
         92:ee:43:12:67:ba:35:5d:18:a0:6c:42:ec:90:81:d8:2b:03:
         bd:52:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----