Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/57e624-db04-4ee4-a3d3-7df68541d9b8/1/0rX5zb-YOO2HBfUzq3sjqyW1pW8.mft
File:                     0rX5zb-YOO2HBfUzq3sjqyW1pW8.mft (raw, json)
Hash identifier:          MZIdWq0H2XX6yoF1tcYe0F+hj8k2aEtjDkpMpwk1/Iw=
Subject key identifier:   D1:E7:E7:98:DF:10:3D:70:84:19:2C:F9:F6:14:00:39:79:0B:42:57
Authority key identifier: D2:B5:F9:CD:BF:98:38:ED:87:05:F5:33:AB:7B:23:AB:25:B5:A5:6F
Certificate issuer:       /CN=d2b5f9cdbf9838ed8705f533ab7b23ab25b5a56f
Certificate serial:       01850606FA62B8CE303020E016B672B7989E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rX5zb-YOO2HBfUzq3sjqyW1pW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/57e624-db04-4ee4-a3d3-7df68541d9b8/1/0rX5zb-YOO2HBfUzq3sjqyW1pW8.mft
Manifest number:          0BBD
Signing time:             Mon 12 Dec 2022 11:09:58 +0000
Manifest this update:     Mon 12 Dec 2022 11:09:58 +0000
Manifest next update:     Tue 13 Dec 2022 11:09:58 +0000
Files and hashes:         1: 0rX5zb-YOO2HBfUzq3sjqyW1pW8.crl (hash: nj5oSGfFQXsk8MoPROmeC24Har7FOEfbS/kUxoHK5BE=)
                          2: pVXrYQL03xo0DAjJxHzbP7Ior80.roa (hash: qX41Nxd8nY8Eo9KH3zYtPZKW+Uh7fBYoQOJMLqIuFeE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:06:06:fa:62:b8:ce:30:30:20:e0:16:b6:72:b7:98:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b5f9cdbf9838ed8705f533ab7b23ab25b5a56f
        Validity
            Not Before: Dec 12 11:09:58 2022 GMT
            Not After : Dec 13 11:09:58 2022 GMT
        Subject: CN=d1e7e798df103d7084192cf9f6140039790b4257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:17:78:c0:15:fe:e4:c5:0c:23:0b:7f:de:
                    b3:e5:d4:c3:80:15:48:4d:90:ef:88:a0:13:d6:71:
                    00:e3:73:e0:27:0e:12:8b:c5:df:41:92:1e:5a:b5:
                    5b:59:8e:3f:cc:33:1c:0c:c4:b4:02:87:cf:54:0e:
                    f6:88:5e:b4:f9:84:13:7c:35:50:d9:01:73:d8:90:
                    3f:da:ed:2f:d0:db:50:70:f5:96:96:78:22:83:c5:
                    fd:45:fa:51:a3:54:e4:e5:ec:8c:db:0e:cc:a6:3b:
                    2f:37:1e:ea:74:9a:f3:cf:fc:18:29:3b:36:5b:9f:
                    87:57:b8:14:4e:81:d5:0c:a5:f8:c6:23:4b:8d:d0:
                    0f:34:bd:41:c1:21:29:b6:be:2e:33:ac:b2:9a:c1:
                    6a:ec:18:5c:75:0d:6e:4d:d7:b2:b8:23:e0:30:c8:
                    fa:f1:44:f9:e0:f2:52:e1:3f:41:2b:53:62:ee:0c:
                    4e:a7:80:f7:3f:a7:cf:3b:63:be:5f:38:ae:cc:44:
                    80:94:31:47:03:48:ff:35:77:d1:57:0d:f1:71:89:
                    bb:c7:74:2f:2a:0c:ff:e5:a8:96:ef:4a:67:ab:de:
                    46:1f:6d:5f:ea:74:52:3c:86:ae:4a:ba:52:1f:93:
                    12:44:46:8b:da:c8:c4:30:dd:e5:4b:60:0d:c7:b3:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E7:E7:98:DF:10:3D:70:84:19:2C:F9:F6:14:00:39:79:0B:42:57
            X509v3 Authority Key Identifier:
                keyid:D2:B5:F9:CD:BF:98:38:ED:87:05:F5:33:AB:7B:23:AB:25:B5:A5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rX5zb-YOO2HBfUzq3sjqyW1pW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/57e624-db04-4ee4-a3d3-7df68541d9b8/1/0rX5zb-YOO2HBfUzq3sjqyW1pW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/57e624-db04-4ee4-a3d3-7df68541d9b8/1/0rX5zb-YOO2HBfUzq3sjqyW1pW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:1c:72:d0:5b:c4:fa:25:d4:a3:47:0f:cc:36:10:b5:0f:
         30:50:d5:73:ac:04:be:52:6c:1d:5b:41:d8:15:7e:c7:38:26:
         97:36:71:4d:0f:0c:68:43:52:75:ea:bf:f2:2a:0d:70:e4:21:
         c2:93:3a:9f:9c:1c:30:86:a0:e7:2c:ac:34:de:be:97:8b:11:
         f6:97:1f:68:d3:85:5e:aa:91:d8:87:92:e2:50:08:bc:ce:47:
         66:9b:3b:98:69:b4:ed:65:f5:73:f7:24:8b:9c:70:06:f3:db:
         f7:85:55:02:d8:cd:91:b9:b4:68:d8:bf:2d:10:09:67:96:54:
         e6:3b:45:29:0e:76:c8:bb:b8:92:7e:7c:b5:16:0f:4f:80:cd:
         5b:7b:e5:c5:fa:75:4f:23:ca:cd:18:f0:7f:54:33:c3:0b:cb:
         d7:95:24:b5:75:b2:d7:50:b5:80:7d:79:84:0b:7c:3c:23:13:
         19:6d:4a:ac:62:e6:2c:2f:ab:25:af:a6:f4:fa:0c:0c:04:f3:
         06:65:2b:61:19:a0:e8:aa:8f:da:48:5a:c3:47:0e:42:05:67:
         89:71:7a:0d:5a:bc:97:eb:e3:50:63:92:47:e9:6c:02:ff:97:
         c6:c1:da:a5:36:9b:eb:52:25:ee:2d:6b:50:13:e0:48:aa:81:
         cb:e2:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----