Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c57b65-c9cf-47e7-8931-8d51a71e8637/1/d1mEoOHT1Cf24D8nn2YGft6A62s.mft
File:                     d1mEoOHT1Cf24D8nn2YGft6A62s.mft (raw, json)
Hash identifier:          22iOBBYHfIoNkEnJq3XjoyMkogWRXdY21RaaTr7SOQs=
Subject key identifier:   3E:51:13:4B:4D:57:63:82:CF:81:FC:18:31:0F:20:19:BC:4D:F6:D6
Authority key identifier: 77:59:84:A0:E1:D3:D4:27:F6:E0:3F:27:9F:66:06:7E:DE:80:EB:6B
Certificate issuer:       /CN=775984a0e1d3d427f6e03f279f66067ede80eb6b
Certificate serial:       018261D48CD1F42AE41086678B6BB2954149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1mEoOHT1Cf24D8nn2YGft6A62s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c57b65-c9cf-47e7-8931-8d51a71e8637/1/d1mEoOHT1Cf24D8nn2YGft6A62s.mft
Manifest number:          09D0
Signing time:             Wed 03 Aug 2022 03:51:35 +0000
Manifest this update:     Wed 03 Aug 2022 03:51:35 +0000
Manifest next update:     Thu 04 Aug 2022 03:51:35 +0000
Files and hashes:         1: C0MFChowXs3-AvbsiiJ8WWEW0UA.roa (hash: ysHIRc5utQG1lxn291oodIY/SdZiMiMtrnU6X+hWzkU=)
                          2: d1mEoOHT1Cf24D8nn2YGft6A62s.crl (hash: L6e1d1u05a4ewjkFVd57mKI22p7txk9mrlozI5MKs/c=)
                          3: dCzca2ITY7BwclBMSXbTjGivmbk.roa (hash: RxIWtSoGB6of1HsDAGAkmpI1C/Tdx8t+FrBFHwmGB08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:61:d4:8c:d1:f4:2a:e4:10:86:67:8b:6b:b2:95:41:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775984a0e1d3d427f6e03f279f66067ede80eb6b
        Validity
            Not Before: Aug  3 03:51:35 2022 GMT
            Not After : Aug  4 03:51:35 2022 GMT
        Subject: CN=3e51134b4d576382cf81fc18310f2019bc4df6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:f5:76:fe:bd:e6:c6:10:14:73:90:e7:19:
                    5b:76:34:8d:13:96:77:44:a9:bc:95:6b:e5:15:f3:
                    b8:7e:73:b9:00:db:df:f0:6d:24:53:05:c7:fe:63:
                    d2:09:17:b8:e6:8e:c3:a2:25:75:d1:29:d1:9d:b5:
                    42:61:38:bd:aa:41:e8:52:e6:b4:8e:da:48:a8:38:
                    bb:70:0c:e4:da:55:b4:34:1f:67:e4:17:87:24:f0:
                    d9:3c:d3:26:25:82:46:a3:28:df:f4:7a:94:6b:fa:
                    aa:8e:79:aa:ea:26:3a:4b:92:94:9e:80:bf:43:cd:
                    43:bd:36:cf:7b:93:36:41:b1:5b:6d:b8:0f:f8:44:
                    93:95:67:6e:21:1f:40:8d:67:1c:86:9d:f7:af:7b:
                    1d:f6:49:7a:ff:eb:84:56:f8:4d:d2:27:06:11:08:
                    46:d1:4b:c1:89:7f:d1:20:f9:8b:4b:32:53:72:1b:
                    35:49:81:de:7d:cf:a6:32:aa:06:02:1a:e3:55:fe:
                    c3:9d:1b:6f:3d:a0:54:c4:a8:7d:39:f6:83:6f:75:
                    33:82:20:19:b8:04:15:6f:28:6d:48:eb:1d:cf:de:
                    14:f2:98:ee:6e:ee:23:3d:14:5c:86:bb:a8:f4:2b:
                    56:cf:43:11:39:14:30:06:08:58:b5:28:c2:9e:1e:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:13:4B:4D:57:63:82:CF:81:FC:18:31:0F:20:19:BC:4D:F6:D6
            X509v3 Authority Key Identifier:
                keyid:77:59:84:A0:E1:D3:D4:27:F6:E0:3F:27:9F:66:06:7E:DE:80:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1mEoOHT1Cf24D8nn2YGft6A62s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c57b65-c9cf-47e7-8931-8d51a71e8637/1/d1mEoOHT1Cf24D8nn2YGft6A62s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c57b65-c9cf-47e7-8931-8d51a71e8637/1/d1mEoOHT1Cf24D8nn2YGft6A62s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:85:13:68:6a:c7:3f:09:24:ed:e7:e2:40:72:59:33:81:71:
         d8:05:3e:01:86:2e:48:91:69:d5:a9:05:06:3b:6e:92:1b:09:
         00:3b:73:fb:51:ff:e9:48:59:b6:9c:a6:fd:14:69:3d:14:7c:
         8c:a5:f6:02:59:11:ee:98:97:3c:54:24:8f:50:b2:42:9f:28:
         c3:bc:ad:1f:59:2a:e6:8f:af:9f:55:d1:79:5f:1d:dc:3a:10:
         9a:ae:e8:4a:28:d8:d8:9f:da:e1:04:9a:9a:75:3a:40:3c:e0:
         04:77:ab:1a:d4:22:15:8d:a5:3d:ae:31:a8:f5:85:5e:57:86:
         99:5a:c0:31:4c:37:48:25:70:f4:93:9c:32:97:c2:d8:1c:9a:
         2f:4a:b9:00:8a:4c:34:6d:f6:d2:12:45:88:8f:cb:0e:f0:27:
         31:9d:a8:fd:ca:02:25:59:b4:e0:01:5d:35:a7:03:6f:96:ec:
         1b:09:4f:25:c0:4a:cd:f4:d2:73:25:4a:2c:c8:6f:bc:51:d0:
         57:50:a8:a1:1a:52:e7:73:74:62:dd:64:12:04:51:e3:41:dd:
         5b:e7:ab:6b:50:03:61:5b:92:1f:a3:c7:50:44:69:45:46:f6:
         63:be:dc:b2:d9:05:44:58:68:59:f0:d7:76:f6:08:1c:42:69:
         af:7e:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----