Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.mft
File:                     GDbyZsJRa7973u_i4ezh0O_PgQY.mft (raw, json)
Hash identifier:          izOe4MOziq4nNFpvFhbnp6sBiPwVgbXiXmYOzyyWu2Q=
Subject key identifier:   FD:99:5B:8E:68:F5:8A:01:0E:0F:A4:38:AE:4F:BD:CA:C2:01:DD:08
Authority key identifier: 18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
Certificate issuer:       /CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
Certificate serial:       0185719E7B1D5432751D10A8FCAE0659B0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.mft
Manifest number:          0901
Signing time:             Mon 02 Jan 2023 08:34:49 +0000
Manifest this update:     Mon 02 Jan 2023 08:34:49 +0000
Manifest next update:     Tue 03 Jan 2023 08:34:49 +0000
Files and hashes:         1: GDbyZsJRa7973u_i4ezh0O_PgQY.crl (hash: uFg3Ok7btimfeOfCb6c8qZ4gsQSOk2FjZPI++IK13w8=)
                          2: RenKaCfXcVBdoM5xiZFDggIt3BU.roa (hash: rfLmqNca9WIb8U3Pd716MBd57oBINhmafCEUYz/3G8k=)
                          3: WaflIRWPiBqZASTG_nfNMy9iAwQ.roa (hash: iz0kvliJbeDu4k9eMM8+YesqNrgfDDlwzpfI5/f1ejA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:7b:1d:54:32:75:1d:10:a8:fc:ae:06:59:b0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
        Validity
            Not Before: Jan  2 08:34:49 2023 GMT
            Not After : Jan  3 08:34:49 2023 GMT
        Subject: CN=fd995b8e68f58a010e0fa438ae4fbdcac201dd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:b4:cd:5c:16:d5:5d:75:a4:79:51:e8:87:
                    18:e7:02:30:31:a9:a6:41:60:d6:24:ee:ec:3e:51:
                    85:8c:e0:fc:89:35:c6:6e:65:ed:f1:b8:c0:8c:4f:
                    5f:22:b7:23:b3:30:52:28:6d:cb:42:a6:35:09:35:
                    3e:03:7c:f0:72:54:19:16:28:4c:c3:5f:b2:d9:a4:
                    f7:d9:a1:c1:a8:fe:62:f2:66:15:81:11:ad:dc:78:
                    b1:ce:07:0d:5b:8a:ef:67:b7:a1:3e:27:b4:86:6a:
                    ca:e4:ad:d6:50:4c:0a:ac:07:53:dd:50:01:b6:de:
                    0c:4e:e7:56:34:25:41:23:27:1d:b8:87:81:fb:ef:
                    e2:11:fe:a0:cc:a4:0a:9f:c9:7f:13:21:6d:cc:4d:
                    ed:69:0d:b3:d6:9e:bd:fa:a5:87:80:be:45:62:8e:
                    b9:f1:40:65:da:60:e3:f9:87:a5:3e:b8:58:0f:d0:
                    38:cb:f9:d2:ed:0d:73:e1:8a:2c:de:bd:b8:ee:96:
                    4d:84:f4:85:9a:16:5b:b3:e4:8a:da:b3:e6:54:b5:
                    5b:12:15:f3:9b:d1:d3:92:a0:e3:85:59:e0:4c:6c:
                    e0:bb:59:a2:ae:1c:69:76:4b:38:db:1e:c5:5f:05:
                    4e:f6:73:71:8f:5c:25:eb:37:09:25:cc:89:66:83:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:99:5B:8E:68:F5:8A:01:0E:0F:A4:38:AE:4F:BD:CA:C2:01:DD:08
            X509v3 Authority Key Identifier:
                keyid:18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:53:66:07:10:97:80:30:ea:57:17:b4:1f:42:ce:de:a5:
         f1:80:22:87:03:37:a3:f5:6c:59:98:2c:64:26:0b:7e:06:79:
         28:8c:03:e0:0e:6a:3c:18:56:76:7f:72:5a:9c:55:0d:a1:0a:
         70:4a:ca:71:ef:3b:47:0d:e6:77:71:97:98:d0:64:c2:ca:04:
         43:57:d5:40:90:9b:ec:86:bd:59:9c:97:4e:22:7a:33:c6:dd:
         21:bd:3e:b8:51:96:68:4a:39:fc:53:65:d5:f5:e5:3b:33:0f:
         b6:68:5f:34:f3:2d:48:4d:dc:dc:91:87:6b:bd:da:a0:e9:ba:
         48:2e:19:e3:e6:60:e2:82:5f:9c:a9:f5:1d:10:e2:3b:9d:73:
         3a:9c:33:0f:56:d3:1e:8e:ec:6b:c3:90:ed:70:a1:5d:d1:72:
         90:39:38:5d:6f:2e:87:cb:b6:e2:49:62:22:b2:6d:66:ff:e8:
         16:86:0e:8d:a7:8b:8b:fb:33:11:0b:01:44:c0:de:a3:b3:77:
         c1:b3:db:f5:a7:b5:26:af:d5:f5:f9:c6:63:08:34:8e:cc:52:
         3f:cb:f0:d7:f6:73:53:42:de:70:cb:e1:d1:3a:68:b8:f9:e8:
         13:64:26:b9:bb:88:00:d4:5a:9f:7c:cf:eb:3b:16:4b:db:f6:
         b2:3b:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----