Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/046ae2-f624-4941-b8b2-461ee424de2e/1/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.mft
File:                     9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.mft (raw, json)
Hash identifier:          B+3F2QnyQPwlfYzRK5t6f3W38Gm/Mmy3ZRin9PXW6pM=
Subject key identifier:   8B:E1:0D:46:B5:B8:A7:7F:EF:66:7F:FC:60:C6:95:48:61:9B:39:7F
Authority key identifier: F5:B2:79:0D:C9:1C:AC:43:3E:07:F5:5B:E0:57:7B:1C:31:29:63:87
Certificate issuer:       /CN=f5b2790dc91cac433e07f55be0577b1c31296387
Certificate serial:       0492CA3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/046ae2-f624-4941-b8b2-461ee424de2e/1/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.mft
Manifest number:          060B
Signing time:             Thu 14 Apr 2022 08:06:22 +0000
Manifest this update:     Thu 14 Apr 2022 08:06:22 +0000
Manifest next update:     Fri 15 Apr 2022 08:06:22 +0000
Files and hashes:         1: 8vpHSm3w9Lz-rw9JSIiSExGDqRs.roa (hash: cfGIyER7FINPIwtoljCrj9otobW8wNa8yA+Om2U+ZSg=)
                          2: 9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.crl (hash: nnSbtWgWpb2YgARXS224mDscdfwxxg2vaHls24yTJEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76728894 (0x492ca3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b2790dc91cac433e07f55be0577b1c31296387
        Validity
            Not Before: Apr 14 08:06:22 2022 GMT
            Not After : Apr 15 08:06:22 2022 GMT
        Subject: CN=8be10d46b5b8a77fef667ffc60c69548619b397f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:0c:e4:0a:d2:6b:e8:8a:1e:33:1d:9d:05:
                    e7:29:26:86:08:8f:30:12:0a:31:e6:c6:79:42:70:
                    4d:e9:75:97:2a:13:c0:ef:4a:fe:69:d1:ba:81:88:
                    d7:15:de:dd:d7:ce:db:ef:81:21:9a:33:ac:10:55:
                    4c:bf:77:e8:d8:ac:d1:98:e3:52:75:81:ed:d0:ac:
                    b4:53:d7:03:21:02:ca:d9:67:cc:8f:54:ba:8d:8d:
                    39:d2:7b:60:a4:72:41:9a:5e:5b:8f:b7:bc:26:f2:
                    f0:48:70:0e:d5:3b:07:82:da:6b:03:7b:fa:df:29:
                    ef:53:79:75:18:aa:ff:18:5e:ff:22:7d:f7:60:4e:
                    71:6d:53:0d:8a:f5:1e:7a:4f:e4:ed:6a:b9:3d:69:
                    9a:11:56:46:06:3f:60:b1:86:4c:e7:67:24:b8:31:
                    e8:af:08:43:8b:d2:ac:29:cc:62:25:ac:7e:65:dc:
                    c8:e9:a3:91:13:ac:e5:0e:9b:a7:55:ce:a9:75:bc:
                    af:9c:96:f7:50:77:7f:dc:98:2c:b6:09:30:96:ab:
                    5f:11:31:eb:46:40:c6:81:2b:6d:f0:c3:e5:80:b2:
                    50:52:73:12:67:7a:cb:d9:8e:a1:fa:a8:8c:2a:01:
                    21:b1:a4:6f:d6:4d:1b:94:2c:49:3d:0a:7f:da:4d:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:0D:46:B5:B8:A7:7F:EF:66:7F:FC:60:C6:95:48:61:9B:39:7F
            X509v3 Authority Key Identifier:
                keyid:F5:B2:79:0D:C9:1C:AC:43:3E:07:F5:5B:E0:57:7B:1C:31:29:63:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/046ae2-f624-4941-b8b2-461ee424de2e/1/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/046ae2-f624-4941-b8b2-461ee424de2e/1/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:58:86:d3:44:60:7c:e8:d5:d3:a5:bf:a7:64:b5:60:54:01:
         03:88:12:90:15:28:6e:59:43:19:0f:9a:82:c2:dc:3e:5f:f2:
         e2:bc:2a:17:53:87:a9:7f:2d:a0:58:e5:67:9e:fd:ab:00:b6:
         92:15:83:30:69:0e:10:39:1e:c9:bb:55:9e:8d:d4:8f:81:a9:
         b8:1c:1f:13:0e:69:74:4c:c5:02:9b:24:67:cd:e9:b6:24:5e:
         3d:06:6d:27:1b:52:05:ca:67:be:39:99:52:b2:55:64:c7:50:
         4e:ef:9d:f3:c3:6d:f6:f8:2b:f8:6b:91:24:f0:06:ba:e7:7f:
         e0:53:72:14:2a:f4:34:53:93:99:ed:6c:d0:bd:cd:f4:40:16:
         52:f6:e2:fe:35:bc:56:8d:98:1e:6c:5d:7f:52:1f:9c:3b:06:
         8c:f2:bf:7f:d3:56:ad:76:16:b7:69:74:8a:9e:cd:40:08:8f:
         6c:e8:f6:73:83:a6:4b:31:5f:55:e5:94:37:e6:8b:76:04:66:
         f9:a7:5a:21:9b:72:77:f3:44:94:33:56:8d:cb:5a:3c:f3:ec:
         25:be:4a:16:43:0c:bd:ad:6f:d6:0e:70:02:0b:4d:c2:60:e0:
         d0:33:91:4d:4e:29:84:c0:f3:89:22:b2:a2:5c:16:04:3e:b7:
         02:c4:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----