Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/788642-6abf-4e14-87a7-ea3ba89d21b2/1/7fKz9KvDGja-58F_ch-ilKRljd8.mft
File:                     7fKz9KvDGja-58F_ch-ilKRljd8.mft (raw, json)
Hash identifier:          p9Eo5qVsVzcWfxYbRojx0SVmr4U/SfSD9LAgMacz0mQ=
Subject key identifier:   60:B5:86:F9:AF:7A:7D:75:B2:EC:95:F2:F1:D1:B1:D4:0B:A4:04:01
Authority key identifier: ED:F2:B3:F4:AB:C3:1A:36:BE:E7:C1:7F:72:1F:A2:94:A4:65:8D:DF
Certificate issuer:       /CN=edf2b3f4abc31a36bee7c17f721fa294a4658ddf
Certificate serial:       018509DA4028E7515C01043848B4DFF41EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fKz9KvDGja-58F_ch-ilKRljd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/788642-6abf-4e14-87a7-ea3ba89d21b2/1/7fKz9KvDGja-58F_ch-ilKRljd8.mft
Manifest number:          0BC0
Signing time:             Tue 13 Dec 2022 04:59:36 +0000
Manifest this update:     Tue 13 Dec 2022 04:59:36 +0000
Manifest next update:     Wed 14 Dec 2022 04:59:36 +0000
Files and hashes:         1: 7fKz9KvDGja-58F_ch-ilKRljd8.crl (hash: N4KnTyFmycj6NfPa22HftrjLTp+8hqN7Uj7gbJeG1Y8=)
                          2: YwHQToJ4pLrZ5QodJswh59-6iUs.roa (hash: +EN/LJvtadomCtYZJWxXMOuY+xUQtL30DK8Z+2GkOfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:09:da:40:28:e7:51:5c:01:04:38:48:b4:df:f4:1e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf2b3f4abc31a36bee7c17f721fa294a4658ddf
        Validity
            Not Before: Dec 13 04:59:36 2022 GMT
            Not After : Dec 14 04:59:36 2022 GMT
        Subject: CN=60b586f9af7a7d75b2ec95f2f1d1b1d40ba40401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:74:9a:0f:5e:80:b8:3a:2b:3b:3a:a0:20:
                    3d:f3:42:4f:7c:80:96:08:35:ca:25:fc:0e:c0:4d:
                    8f:a0:32:97:96:aa:fd:28:bd:4c:e8:6a:46:6d:8c:
                    bc:1d:85:2c:71:a2:f7:52:8a:ea:af:84:64:5c:97:
                    26:cc:a0:0b:18:2d:3e:45:57:d6:13:95:7c:55:8b:
                    26:b9:1b:a8:57:23:26:8d:e7:33:f7:a7:88:2a:1d:
                    e4:ce:dd:ec:9b:97:9e:84:57:48:70:05:94:df:6a:
                    15:d3:c0:5f:0f:76:fe:a0:ce:c3:37:66:64:0d:15:
                    94:d4:de:85:bd:f4:52:ff:c4:87:f6:30:9b:e1:30:
                    d4:50:6c:73:29:4d:00:87:20:08:c0:fb:8f:8b:47:
                    db:38:7e:82:75:74:ab:c0:7d:19:48:46:0f:ca:90:
                    d5:75:c5:49:f1:12:a6:ee:35:a0:f5:60:8d:bb:83:
                    d5:72:db:20:f3:bc:1a:fa:78:7e:d3:6b:56:fc:b3:
                    e2:aa:d2:61:98:8c:a0:20:c2:b5:8f:a9:66:77:d1:
                    59:01:ab:04:67:11:3c:21:d6:c8:50:a7:f1:7c:cd:
                    f6:11:1a:2b:1f:01:35:33:39:98:59:31:5d:16:f0:
                    5e:11:5f:c9:10:18:76:7d:c4:6d:a1:56:9d:92:ae:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B5:86:F9:AF:7A:7D:75:B2:EC:95:F2:F1:D1:B1:D4:0B:A4:04:01
            X509v3 Authority Key Identifier:
                keyid:ED:F2:B3:F4:AB:C3:1A:36:BE:E7:C1:7F:72:1F:A2:94:A4:65:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fKz9KvDGja-58F_ch-ilKRljd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/788642-6abf-4e14-87a7-ea3ba89d21b2/1/7fKz9KvDGja-58F_ch-ilKRljd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/788642-6abf-4e14-87a7-ea3ba89d21b2/1/7fKz9KvDGja-58F_ch-ilKRljd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:95:7d:e8:41:5f:c7:ea:60:d4:30:a3:c7:43:c3:47:0f:
         fe:d5:cf:e3:f5:14:8e:5f:11:29:ad:3a:37:b6:0f:98:e4:ce:
         42:3d:38:8d:ba:ff:c2:89:0f:a0:29:d0:3f:6f:59:68:ac:e6:
         71:72:a0:d7:f9:9b:fa:95:e5:05:18:d4:af:4d:cf:20:8d:c4:
         ba:11:a0:81:9a:d4:47:3a:e4:8b:c9:1e:28:21:41:87:2e:f9:
         fc:a4:55:1c:41:71:06:75:41:cf:d3:11:f5:86:b9:fc:06:0a:
         20:6c:30:56:e2:9c:9b:c6:1d:84:68:57:da:03:c4:ec:ec:8f:
         09:bc:63:94:5e:5e:e0:fd:0c:9c:58:d4:83:18:e6:77:6e:0d:
         43:a3:2a:9f:6e:94:b8:05:df:81:4e:3b:02:19:05:1c:ca:a7:
         4c:ad:9f:df:e7:2c:9e:66:fc:c9:f7:c9:8c:86:74:da:43:98:
         92:f5:70:39:f2:16:1a:b0:a4:01:96:7f:c2:c6:a2:26:aa:ce:
         1b:83:d3:8d:3b:05:16:33:f3:3d:f7:99:00:30:dc:32:29:62:
         a9:a0:a0:94:4c:1e:ab:22:7a:91:52:5a:98:23:f8:26:2c:71:
         d9:10:2e:8a:95:4b:d7:01:b4:58:fe:72:0b:7b:67:90:50:d7:
         f1:07:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----