Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c46fcd-dd97-44c1-9a72-efa44eaf0f69/1/29CJOW2Al0ezqoLTVUyzj79xut4.mft
File:                     29CJOW2Al0ezqoLTVUyzj79xut4.mft (raw, json)
Hash identifier:          QC4Sm6rtacWj/mK/CFIzgLw/4ZZr8cSHXCuuDluXIZY=
Subject key identifier:   DF:D5:E8:92:5E:7B:D4:73:CB:E8:EE:51:E5:D5:76:5A:8F:CE:35:84
Authority key identifier: DB:D0:89:39:6D:80:97:47:B3:AA:82:D3:55:4C:B3:8F:BF:71:BA:DE
Certificate issuer:       /CN=dbd089396d809747b3aa82d3554cb38fbf71bade
Certificate serial:       01846625B3B488E94836845035389FFC0DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29CJOW2Al0ezqoLTVUyzj79xut4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/c46fcd-dd97-44c1-9a72-efa44eaf0f69/1/29CJOW2Al0ezqoLTVUyzj79xut4.mft
Manifest number:          04CB
Signing time:             Fri 11 Nov 2022 10:04:17 +0000
Manifest this update:     Fri 11 Nov 2022 10:04:17 +0000
Manifest next update:     Sat 12 Nov 2022 10:04:17 +0000
Files and hashes:         1: 29CJOW2Al0ezqoLTVUyzj79xut4.crl (hash: /yvsEU35mGMV8Bdri71+Ji16RcvdWnoafhDLbVO9hxU=)
                          2: hb1dgZSx8TCAqGk6yvqZ7-maG7o.roa (hash: dqm9h84rMFuuFgJyUQbTLL18hbHovO0rnug4DC2t+Q4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:66:25:b3:b4:88:e9:48:36:84:50:35:38:9f:fc:0d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd089396d809747b3aa82d3554cb38fbf71bade
        Validity
            Not Before: Nov 11 10:04:17 2022 GMT
            Not After : Nov 12 10:04:17 2022 GMT
        Subject: CN=dfd5e8925e7bd473cbe8ee51e5d5765a8fce3584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:71:ba:75:50:9f:55:30:40:dd:61:4c:97:
                    81:ef:81:fb:dc:11:77:6c:da:41:2a:dd:07:12:17:
                    4e:59:51:bc:61:95:cd:ab:b7:4b:a8:e5:f7:07:c0:
                    92:fb:06:52:97:19:1a:f9:c4:f3:5c:58:1f:e3:2d:
                    19:e6:18:dc:a8:9f:45:a9:5d:a9:08:83:dc:a5:6e:
                    d8:9b:f3:05:2b:28:ca:2c:75:a4:d8:f6:fc:63:30:
                    c1:03:50:22:64:de:87:ad:ae:59:19:49:99:9f:be:
                    2e:07:8d:3c:75:88:7c:68:7c:73:8a:25:e2:8e:d1:
                    3a:f5:c7:38:24:12:31:ee:f4:01:f8:33:4a:b4:06:
                    65:9f:d7:9f:a6:42:dc:ce:7d:f9:91:ed:16:79:b4:
                    96:f2:e3:ad:8d:b2:a6:a2:b9:58:8e:4f:55:64:fd:
                    dc:71:a9:42:c8:d4:e6:8d:63:af:c2:f3:a7:92:60:
                    a4:fc:46:57:b6:8c:11:b4:54:10:9b:56:b3:0f:36:
                    b0:8a:a0:50:50:42:f3:dc:ec:c6:ea:a2:3a:08:c2:
                    2f:3c:bd:2d:17:45:b6:52:2f:fe:20:8f:eb:e4:ff:
                    73:5e:a2:a6:b6:c4:d9:a9:88:bd:0a:86:93:7b:c8:
                    36:cd:fe:e3:3a:bf:d4:f6:59:85:20:e6:a2:c1:99:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D5:E8:92:5E:7B:D4:73:CB:E8:EE:51:E5:D5:76:5A:8F:CE:35:84
            X509v3 Authority Key Identifier:
                keyid:DB:D0:89:39:6D:80:97:47:B3:AA:82:D3:55:4C:B3:8F:BF:71:BA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29CJOW2Al0ezqoLTVUyzj79xut4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c46fcd-dd97-44c1-9a72-efa44eaf0f69/1/29CJOW2Al0ezqoLTVUyzj79xut4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c46fcd-dd97-44c1-9a72-efa44eaf0f69/1/29CJOW2Al0ezqoLTVUyzj79xut4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:38:7b:8a:8d:e0:5f:29:f4:44:59:a3:28:9a:9e:5a:47:5e:
         39:09:c7:e6:41:2c:b4:0b:7f:78:2a:4b:ee:ad:d2:54:68:7d:
         63:f4:4f:75:bb:e5:c3:a2:ac:f3:55:6d:2c:f0:61:9a:9d:15:
         0d:3a:f5:b4:b0:11:81:b9:1b:7b:a6:62:a4:fd:cc:8d:5b:b6:
         a0:95:3a:60:f5:cc:ad:78:8b:f1:d2:31:b0:7f:35:bd:e2:7a:
         23:fb:8f:66:51:0d:2b:6b:ed:29:20:7f:f0:d4:69:af:6f:8b:
         0b:bc:07:2c:82:b5:4b:ac:a3:91:ea:5d:3f:3b:f4:ce:73:2f:
         40:c8:cf:78:be:80:6a:99:8e:e3:cd:ff:2b:19:a2:7d:a6:15:
         cc:31:34:ac:ec:37:48:56:01:d5:21:a0:01:fa:4f:9f:d3:fa:
         f4:5b:0b:73:98:47:f6:17:c3:6f:59:9d:af:6c:4c:ac:c5:35:
         ff:9c:9d:6b:74:b0:70:0b:eb:a5:46:56:76:af:3e:ab:38:ad:
         27:68:ae:34:be:9c:eb:1b:22:31:bd:6b:82:7f:43:db:d3:10:
         35:df:e8:1c:71:0a:f1:bc:e6:dc:f6:63:ed:e1:24:82:eb:a6:
         30:0b:ce:94:18:72:02:3e:6c:5d:50:31:2e:03:8d:0c:a8:c9:
         3c:1f:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----