Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/lI1GUquxA6qB9Yf9LRMBSSZe27c.mft
File:                     lI1GUquxA6qB9Yf9LRMBSSZe27c.mft (raw, json)
Hash identifier:          CjeetuLe9aPH889yok2kDyAuWjvA4kxwLNpQ6FmBE2o=
Subject key identifier:   74:9C:06:D2:12:A3:24:79:23:ED:95:E2:BF:E9:21:F4:C3:E3:84:F8
Authority key identifier: 94:8D:46:52:AB:B1:03:AA:81:F5:87:FD:2D:13:01:49:26:5E:DB:B7
Certificate issuer:       /CN=948d4652abb103aa81f587fd2d130149265edbb7
Certificate serial:       0357C36C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lI1GUquxA6qB9Yf9LRMBSSZe27c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/lI1GUquxA6qB9Yf9LRMBSSZe27c.mft
Manifest number:          0443
Signing time:             Fri 22 Apr 2022 12:32:25 +0000
Manifest this update:     Fri 22 Apr 2022 12:32:25 +0000
Manifest next update:     Sat 23 Apr 2022 12:32:25 +0000
Files and hashes:         1: 2WQslAaqsGlX_1DNPdB0MOaA-bk.roa (hash: VNuCZ06sL0pkIJy3Izi2+AtMfaZReq9OpAo1woJsYxQ=)
                          2: lI1GUquxA6qB9Yf9LRMBSSZe27c.crl (hash: 2qxRcLvkTXP42DP99WctvAixiioyLmULYefoieLFr5Q=)
                          3: tsL1ijIdMnI1JV0Nma1iIh1hmXE.roa (hash: fdkQlk/GP+tn+9pH5KbH57G5ZXUYLBk4Fa4O711MlCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56083308 (0x357c36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948d4652abb103aa81f587fd2d130149265edbb7
        Validity
            Not Before: Apr 22 12:32:25 2022 GMT
            Not After : Apr 23 12:32:25 2022 GMT
        Subject: CN=749c06d212a3247923ed95e2bfe921f4c3e384f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:ac:16:3c:71:39:47:e7:63:e6:8d:ce:27:
                    d9:88:7a:b5:44:41:12:f2:58:c7:d4:5e:55:6b:ee:
                    ba:b3:d9:c1:eb:fd:4c:89:03:0e:c4:6f:76:ec:f4:
                    be:29:2e:de:1d:46:98:41:8c:fe:48:0d:f4:71:f9:
                    33:87:05:c0:bd:1b:b6:e2:59:88:9a:95:ac:74:2f:
                    26:75:14:26:88:2d:2c:04:0d:cc:1c:16:09:bf:77:
                    55:36:a0:cb:66:52:0a:0d:2c:6c:26:67:a0:21:3c:
                    37:95:39:7e:38:35:df:77:40:9b:ed:9c:f6:9f:9d:
                    58:4e:f7:cf:43:ee:36:97:5d:c9:5c:d4:e5:44:7d:
                    6c:8b:b2:ce:b4:7a:ff:40:01:ba:c1:a6:ec:dd:b2:
                    6e:42:5f:20:5a:77:f9:8c:a5:8f:34:64:89:9d:6e:
                    f2:9e:9f:58:76:41:32:4f:20:8d:56:51:a1:41:79:
                    3b:0b:74:c4:96:2f:f5:c3:be:c1:94:fd:0c:95:09:
                    c7:26:78:d2:90:81:ec:14:5d:14:03:bb:46:1d:ab:
                    19:c8:6c:dc:10:66:3b:d2:b8:f9:37:ac:50:18:9d:
                    43:30:27:bc:39:7d:d6:66:dd:b1:78:e5:a3:46:4d:
                    2d:9a:a6:76:c3:26:dd:89:b5:5a:21:44:88:04:db:
                    13:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9C:06:D2:12:A3:24:79:23:ED:95:E2:BF:E9:21:F4:C3:E3:84:F8
            X509v3 Authority Key Identifier:
                keyid:94:8D:46:52:AB:B1:03:AA:81:F5:87:FD:2D:13:01:49:26:5E:DB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1GUquxA6qB9Yf9LRMBSSZe27c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/lI1GUquxA6qB9Yf9LRMBSSZe27c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/lI1GUquxA6qB9Yf9LRMBSSZe27c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c3:6d:c7:65:32:f9:0f:47:c1:29:31:1f:74:0c:d7:58:e6:
         ee:55:4e:e1:f3:8e:64:6d:dd:22:64:62:af:b4:51:42:17:72:
         63:19:9e:16:80:c0:67:f0:2e:7b:ea:f6:a7:08:4d:49:3d:f8:
         9a:ca:5d:33:5b:37:37:e3:b6:73:5c:c1:84:75:9e:39:e0:00:
         d5:1f:3f:f6:2e:c9:7e:3f:f7:62:9a:96:c0:2f:c0:a6:c7:58:
         24:1a:26:cf:3a:82:f9:27:69:51:6a:0a:44:b3:83:71:de:79:
         58:94:1a:47:97:81:ad:18:ce:f4:6a:46:18:fa:0e:2b:91:01:
         f7:65:0d:07:ce:1c:ac:f1:de:8f:12:2b:5b:40:7c:48:0e:c1:
         bb:40:b9:18:46:4a:68:16:47:5f:78:90:df:a0:d7:22:d7:10:
         b3:b4:fd:41:91:7a:3d:c2:9a:a9:3a:87:ce:54:eb:40:f3:93:
         f0:a8:e6:f8:ab:91:4c:b5:d1:34:02:c7:31:9b:17:cf:9b:94:
         f3:2e:a2:86:8d:10:2d:a7:8c:0b:bd:c9:c6:50:ca:d7:63:ec:
         b7:7f:51:c6:d2:f8:71:b2:06:14:25:a4:3e:0a:4f:d8:bf:d5:
         da:a4:06:30:bb:2f:f2:46:93:fb:6c:b5:03:a9:45:b1:9f:a6:
         4a:28:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----