Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/JrVZL7u2uqV8qLblVmEsbtjrjqw.mft
File:                     JrVZL7u2uqV8qLblVmEsbtjrjqw.mft (raw, json)
Hash identifier:          gXgWRjiZanofKvFUKS/iCDfHPqvlXQyMOiLQmSWQQTA=
Subject key identifier:   C6:3E:96:8F:A0:C8:58:20:58:86:44:2E:8E:34:1E:84:B4:A6:D6:70
Authority key identifier: 26:B5:59:2F:BB:B6:BA:A5:7C:A8:B6:E5:56:61:2C:6E:D8:EB:8E:AC
Certificate issuer:       /CN=26b5592fbbb6baa57ca8b6e556612c6ed8eb8eac
Certificate serial:       01837C59C94229DE5A2E9308D85BD4866201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrVZL7u2uqV8qLblVmEsbtjrjqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/JrVZL7u2uqV8qLblVmEsbtjrjqw.mft
Manifest number:          06B1
Signing time:             Tue 27 Sep 2022 00:30:02 +0000
Manifest this update:     Tue 27 Sep 2022 00:30:02 +0000
Manifest next update:     Wed 28 Sep 2022 00:30:02 +0000
Files and hashes:         1: F3FVv9qSBOXPzzd4JxBGT4sUHMk.roa (hash: MZl2p7NOFrhfzZeRHgS/c9+wfrbMLrn7vJ273ogn1AQ=)
                          2: JrVZL7u2uqV8qLblVmEsbtjrjqw.crl (hash: f21s2JB2TGT7TjWCXr+eBSnCmBFMOOcWTWcGvs41FNQ=)
                          3: KJ52uIEf3X540lQ7hjiPhpHDq8s.roa (hash: REJ1nxyzCgG+lO71bqKk47yAJDz648mxA27M+7k5ebk=)
                          4: KgTfqBHylb1Y1qxBF7Paq6cKeNM.roa (hash: PuVs6KmmMHaY561iOflEcpjSyChsqyHGWjsLhcRUtjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7c:59:c9:42:29:de:5a:2e:93:08:d8:5b:d4:86:62:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b5592fbbb6baa57ca8b6e556612c6ed8eb8eac
        Validity
            Not Before: Sep 27 00:30:02 2022 GMT
            Not After : Sep 28 00:30:02 2022 GMT
        Subject: CN=c63e968fa0c858205886442e8e341e84b4a6d670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:15:fc:65:94:43:45:07:3e:3f:75:dc:a8:
                    f9:77:19:1f:8a:d3:a8:ae:90:2c:61:7a:77:6e:7f:
                    a1:d9:fa:c2:37:cd:a3:2c:fe:31:e2:77:b4:78:27:
                    4d:cd:71:e9:5c:68:fa:de:ff:f6:10:68:75:18:c9:
                    83:4e:76:1a:92:d2:50:da:b4:10:06:46:bc:1e:38:
                    45:a1:b7:5d:7f:d9:59:52:68:d7:8a:a6:e1:42:ca:
                    9c:7c:0e:cd:a6:94:4b:a6:20:50:97:77:76:5d:76:
                    e1:a4:d7:c2:c6:90:24:95:84:55:54:e3:91:ce:57:
                    a3:a9:8d:82:58:e8:6e:99:7b:2d:7f:80:36:e5:d3:
                    f4:7c:72:96:8a:52:68:fd:77:ec:ea:a3:46:45:39:
                    93:04:b8:58:99:d8:47:5e:f5:2d:f5:97:f4:e6:fa:
                    7a:21:de:db:9f:d9:41:74:19:e3:37:c8:3e:1d:f3:
                    a4:50:be:3d:09:30:7d:6f:96:92:00:70:a7:c4:e3:
                    78:08:dd:91:50:0f:1b:1a:0e:75:36:05:71:10:70:
                    6f:85:6c:a1:fd:ec:1f:6b:e1:0b:9d:92:dc:7a:71:
                    35:8c:8d:05:4a:53:e1:72:bc:26:4c:d1:ec:1d:16:
                    33:19:a2:eb:29:5b:97:d1:dc:46:ee:ad:33:29:d6:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:96:8F:A0:C8:58:20:58:86:44:2E:8E:34:1E:84:B4:A6:D6:70
            X509v3 Authority Key Identifier:
                keyid:26:B5:59:2F:BB:B6:BA:A5:7C:A8:B6:E5:56:61:2C:6E:D8:EB:8E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrVZL7u2uqV8qLblVmEsbtjrjqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/JrVZL7u2uqV8qLblVmEsbtjrjqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/JrVZL7u2uqV8qLblVmEsbtjrjqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:a1:eb:c8:17:4a:bb:a5:bc:b9:21:ac:df:4c:bc:7b:dd:
         a2:e0:3f:a8:2f:45:d5:39:7d:ca:10:ae:e2:72:05:57:75:c7:
         7b:67:6f:02:1f:69:8c:e1:98:f8:aa:d0:69:04:5e:74:7b:5a:
         1f:f7:04:5c:3d:1d:7c:8a:ef:c9:b6:be:ba:6f:f4:c3:18:09:
         9f:5e:bf:2d:05:ae:d1:2d:b4:f5:be:af:06:9f:5e:dc:6e:33:
         2a:b2:82:44:34:1f:5c:9d:b3:38:9a:ae:ae:f9:a2:48:98:77:
         36:e1:43:07:00:a2:d3:b0:c9:7f:3c:61:5a:92:06:58:19:51:
         27:58:3e:9b:56:7b:9c:21:9f:f3:a9:a3:9a:f9:aa:b5:bc:d6:
         ee:b7:f2:85:39:5d:04:d5:e6:88:50:92:c6:24:c4:cf:07:bd:
         45:78:b8:fb:e5:cd:62:14:13:b7:06:4e:da:09:6e:ac:a3:c1:
         95:2a:88:d7:fa:19:16:21:87:3c:b5:2a:6a:e4:77:03:c2:c5:
         0b:98:e3:1a:76:3d:b9:93:70:f2:aa:b0:59:86:7c:aa:fa:00:
         78:71:c4:3b:f1:0d:bf:26:75:03:0c:29:f1:ac:fa:61:43:3f:
         4f:93:c8:3e:47:84:f6:0d:78:09:10:eb:6e:e1:f3:ac:cd:6d:
         e3:fb:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----