Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/11cfca-bc16-4a42-ac32-f84219ba9855/1/DIw1kmR0TIFLdCcE5smejP-0NT0.mft
File:                     DIw1kmR0TIFLdCcE5smejP-0NT0.mft (raw, json)
Hash identifier:          j9MKPGUch87VsKHPW0utZq9Lu/CNqqpTDOGKZ6+QcVg=
Subject key identifier:   26:CA:FD:DB:3E:F3:BE:79:83:61:57:26:A9:84:C4:25:48:2A:E1:5C
Authority key identifier: 0C:8C:35:92:64:74:4C:81:4B:74:27:04:E6:C9:9E:8C:FF:B4:35:3D
Certificate issuer:       /CN=0c8c359264744c814b742704e6c99e8cffb4353d
Certificate serial:       0184F62D90279796B3D4EE64A6E99EC5854A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIw1kmR0TIFLdCcE5smejP-0NT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/11cfca-bc16-4a42-ac32-f84219ba9855/1/DIw1kmR0TIFLdCcE5smejP-0NT0.mft
Manifest number:          0BB5
Signing time:             Fri 09 Dec 2022 09:18:11 +0000
Manifest this update:     Fri 09 Dec 2022 09:18:11 +0000
Manifest next update:     Sat 10 Dec 2022 09:18:11 +0000
Files and hashes:         1: DIw1kmR0TIFLdCcE5smejP-0NT0.crl (hash: J6QezWW5/AFwOQoKpYZ97FnsTe0TYJCVsgoLDQdSJK0=)
                          2: myo9HcHCAUdmKd2VnAkeHrN6OB8.roa (hash: 0pwS7WA7M/TOI9HMRoQDE767mQpBbi+5XB0gWs54uRI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f6:2d:90:27:97:96:b3:d4:ee:64:a6:e9:9e:c5:85:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c8c359264744c814b742704e6c99e8cffb4353d
        Validity
            Not Before: Dec  9 09:18:11 2022 GMT
            Not After : Dec 10 09:18:11 2022 GMT
        Subject: CN=26cafddb3ef3be7983615726a984c425482ae15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:40:5c:55:3b:82:3f:26:f2:ac:26:d8:2b:d0:
                    8e:ae:0e:81:55:ac:37:88:1a:39:fa:d4:74:3c:a5:
                    98:d6:85:5b:15:bf:f4:0e:44:98:d8:79:97:53:d3:
                    26:17:20:be:ca:f3:58:77:83:8d:b0:35:03:b0:de:
                    84:69:dd:dc:b5:17:e0:d5:68:51:79:ac:3b:65:b6:
                    18:4c:a3:c7:0f:87:26:dd:b1:ee:bb:be:3f:bd:c2:
                    cd:da:63:fa:95:57:ba:e6:ee:9f:91:d1:28:8f:51:
                    94:0f:2f:df:0e:9c:c5:b4:f6:10:3c:e0:af:bb:d4:
                    e7:3a:d8:74:4f:5e:e4:0d:5b:b5:98:30:c5:c7:63:
                    6e:3a:42:4f:17:d1:a1:5f:ae:56:96:c9:ea:65:d4:
                    69:16:44:30:6d:44:a1:ed:17:e5:52:d6:2a:62:d5:
                    f7:f8:48:24:a7:ea:5c:37:28:d0:a3:2f:8a:a5:7a:
                    df:f6:27:2b:4f:ae:10:21:ea:3d:b0:96:5e:d3:67:
                    c5:ea:ce:62:a6:fa:fd:9f:52:cf:75:4e:91:e4:11:
                    fd:86:65:78:8f:68:95:c0:2e:6c:06:40:0b:15:83:
                    5b:20:11:97:ed:32:9e:68:32:69:10:98:fa:3e:27:
                    74:23:e7:a9:db:8b:de:72:95:a9:8f:3f:7c:55:92:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CA:FD:DB:3E:F3:BE:79:83:61:57:26:A9:84:C4:25:48:2A:E1:5C
            X509v3 Authority Key Identifier:
                keyid:0C:8C:35:92:64:74:4C:81:4B:74:27:04:E6:C9:9E:8C:FF:B4:35:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIw1kmR0TIFLdCcE5smejP-0NT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/11cfca-bc16-4a42-ac32-f84219ba9855/1/DIw1kmR0TIFLdCcE5smejP-0NT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/11cfca-bc16-4a42-ac32-f84219ba9855/1/DIw1kmR0TIFLdCcE5smejP-0NT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:98:26:5d:c4:d2:54:1a:14:fa:a2:40:38:66:b4:cf:17:bc:
         39:41:d2:b0:e8:46:26:7c:43:3b:e3:05:8b:ad:79:03:83:b0:
         3a:20:3d:a1:f1:5e:63:45:68:fd:68:c5:0c:df:2e:2c:82:e7:
         d0:92:e7:72:d5:ca:75:e1:ab:b7:b6:dd:f2:ca:1f:1e:0c:a3:
         a3:76:ff:34:0f:c3:f7:39:3a:3f:ed:75:69:f6:c2:62:ab:b7:
         75:09:e8:9c:f4:aa:f7:bc:a7:61:fa:d6:94:13:50:a0:40:a2:
         e3:15:32:b4:47:98:bf:55:55:ad:34:29:b7:b9:3a:e4:1a:0d:
         e5:c6:c0:ec:ff:f0:5d:41:30:0f:6b:b3:be:a5:ed:da:01:ae:
         9e:fc:e4:2a:19:58:b3:80:db:b0:1a:02:f8:73:1a:a9:cc:39:
         d9:a5:24:11:f0:8b:95:c3:40:90:cc:fd:f6:ae:a4:85:49:09:
         8a:70:11:bb:99:ee:7e:6f:fa:4a:e3:eb:c8:84:c8:2e:85:99:
         1c:fe:23:d6:01:5a:fb:02:36:14:11:64:73:b4:b2:4e:48:ad:
         14:de:75:88:01:66:97:d3:18:72:c7:91:75:db:cf:37:6b:ac:
         51:99:d0:a5:98:15:81:db:ae:b3:d6:0f:8c:80:1e:18:4a:5d:
         59:3e:4e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----