Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/0sDuK7qXx3IEh9NaODbk14qDAqQ.mft
File:                     0sDuK7qXx3IEh9NaODbk14qDAqQ.mft (raw, json)
Hash identifier:          H1ObLK+Yfr8NYmI/9Yv0o97oz8mSElC39+MTtHhTB0A=
Subject key identifier:   4C:2A:B1:3E:32:0A:99:8F:E5:73:CE:BE:6B:DF:F9:04:41:42:5F:6D
Authority key identifier: D2:C0:EE:2B:BA:97:C7:72:04:87:D3:5A:38:36:E4:D7:8A:83:02:A4
Certificate issuer:       /CN=d2c0ee2bba97c7720487d35a3836e4d78a8302a4
Certificate serial:       01847A234CAF721797085EE83B0B7F8E9CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sDuK7qXx3IEh9NaODbk14qDAqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/0sDuK7qXx3IEh9NaODbk14qDAqQ.mft
Manifest number:          091C
Signing time:             Tue 15 Nov 2022 07:14:04 +0000
Manifest this update:     Tue 15 Nov 2022 07:14:04 +0000
Manifest next update:     Wed 16 Nov 2022 07:14:04 +0000
Files and hashes:         1: 0sDuK7qXx3IEh9NaODbk14qDAqQ.crl (hash: v587x2LQlsyISxobUt3CemstFVX2nL5IdGIXq6n0Dts=)
                          2: KuYIYIokehykOt4zzOQUUoPtXLo.roa (hash: Y5UOnixP7IxVLsgZ+sdTMJCGeJoreYn0LCkxMKs1Vk0=)
                          3: wEIgsDQCa8AUI_VVslLirXugbZ4.roa (hash: 0sLVvOWprZHG0hmnemS9np6FJEK+vCiuTdQCZeLsELI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7a:23:4c:af:72:17:97:08:5e:e8:3b:0b:7f:8e:9c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c0ee2bba97c7720487d35a3836e4d78a8302a4
        Validity
            Not Before: Nov 15 07:14:04 2022 GMT
            Not After : Nov 16 07:14:04 2022 GMT
        Subject: CN=4c2ab13e320a998fe573cebe6bdff90441425f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:0c:df:dd:9d:86:b3:f3:7f:8d:4b:54:ed:
                    c9:21:bf:25:73:23:b9:7a:5e:8b:e3:41:71:53:05:
                    02:dc:3f:d4:10:60:52:91:7c:06:87:2e:54:34:f6:
                    1e:05:7c:e6:d0:95:a0:91:68:1c:ef:47:3f:73:10:
                    2f:45:c8:0f:3c:6d:b8:99:0a:43:d2:e7:f6:7d:f3:
                    c5:0f:5c:b2:d8:f7:e0:a9:69:dc:da:6c:e7:71:66:
                    b8:f8:8a:f8:e7:9c:12:55:2d:82:e5:87:b3:50:bc:
                    a4:25:5d:bd:2a:f2:8e:da:c4:32:97:ca:ed:15:d3:
                    2d:8f:46:1e:b7:43:67:74:d2:70:fe:c3:58:ca:68:
                    13:96:8a:0e:41:b4:09:90:58:94:f3:82:45:62:1f:
                    8f:b1:58:fb:70:9f:3f:af:da:7a:92:05:35:e2:3f:
                    fb:fa:3d:91:22:c0:ee:6e:55:11:af:c5:a3:08:bc:
                    78:92:26:d8:55:8a:3d:33:bc:9e:35:f5:e3:84:34:
                    59:7f:a1:dc:9a:99:66:63:54:70:80:8b:57:50:49:
                    05:25:b6:af:c4:0a:33:ae:7b:0b:94:79:7b:a1:ea:
                    ce:2c:be:ef:38:63:09:93:bf:44:cb:d2:e5:e4:de:
                    bb:41:3a:f5:eb:97:a9:f2:08:dd:92:f0:57:eb:ef:
                    2d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2A:B1:3E:32:0A:99:8F:E5:73:CE:BE:6B:DF:F9:04:41:42:5F:6D
            X509v3 Authority Key Identifier:
                keyid:D2:C0:EE:2B:BA:97:C7:72:04:87:D3:5A:38:36:E4:D7:8A:83:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sDuK7qXx3IEh9NaODbk14qDAqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/0sDuK7qXx3IEh9NaODbk14qDAqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/0sDuK7qXx3IEh9NaODbk14qDAqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:e0:12:34:28:35:1a:61:88:8e:bd:3a:d7:77:7e:05:29:
         86:28:ce:84:dc:e9:dc:fe:14:20:50:17:05:68:28:fb:ff:f3:
         16:62:1a:6e:03:e2:fd:9b:43:5a:f6:91:54:28:15:ab:4e:b2:
         43:63:ca:bb:ff:d3:a8:c5:be:cb:c9:22:0a:83:c7:cf:bf:7c:
         50:11:cf:51:10:72:a9:5b:13:a0:47:8d:1c:5d:a6:0b:fe:0d:
         84:67:c4:c0:87:e4:f7:31:ee:d3:84:05:18:fd:b3:33:52:85:
         2b:4d:e4:36:da:b2:05:19:2d:48:86:4e:89:3a:aa:ec:51:e0:
         a8:74:a2:8f:f1:ba:5a:a6:50:72:c7:5a:9c:1f:72:77:e0:3b:
         af:65:a7:5b:f3:15:12:4f:b7:21:70:36:88:4b:ab:7f:e5:d4:
         79:60:6b:2a:8e:9c:da:92:64:99:c0:4a:68:8a:91:84:2e:78:
         1d:93:99:a8:ae:f4:6c:0b:22:96:5b:f6:d9:39:38:d1:3a:e7:
         bf:fa:24:8e:ed:35:ca:99:80:d8:26:fc:5b:96:d7:57:40:69:
         ca:b7:56:1a:e8:89:3d:7f:ea:8c:e1:8b:57:99:99:06:3a:e4:
         5d:92:68:e7:d4:70:9b:fb:db:ea:3b:16:df:e6:38:05:4c:3b:
         b7:f4:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----