Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.mft
File:                     TyHFOT2T_M8LjgzM3I1Ul-LWkgk.mft (raw, json)
Hash identifier:          63gc6yCGh+7n92NKhCxxHnU1Jj4UHhJ/TZvso5WcZdg=
Subject key identifier:   DF:B7:79:C4:8E:EB:21:75:7C:E3:3D:9B:16:42:CD:D8:AC:92:FC:9E
Authority key identifier: 4F:21:C5:39:3D:93:FC:CF:0B:8E:0C:CC:DC:8D:54:97:E2:D6:92:09
Certificate issuer:       /CN=4f21c5393d93fccf0b8e0cccdc8d5497e2d69209
Certificate serial:       01845AD1FDC0117FF85023D575AA97895173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.mft
Manifest number:          07B9
Signing time:             Wed 09 Nov 2022 05:17:02 +0000
Manifest this update:     Wed 09 Nov 2022 05:17:02 +0000
Manifest next update:     Thu 10 Nov 2022 05:17:02 +0000
Files and hashes:         1: J9fylWntBCsbRqgLuTV8YnhaPnw.roa (hash: geB9oG6n4ut4Nyd7y/ogJzApthhu4H4M9vhO10UDiQE=)
                          2: TyHFOT2T_M8LjgzM3I1Ul-LWkgk.crl (hash: /adMDKc6ZHIsX+AbIXdDXBBMjpuVjCagxkxIr6uGD/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5a:d1:fd:c0:11:7f:f8:50:23:d5:75:aa:97:89:51:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f21c5393d93fccf0b8e0cccdc8d5497e2d69209
        Validity
            Not Before: Nov  9 05:17:02 2022 GMT
            Not After : Nov 10 05:17:02 2022 GMT
        Subject: CN=dfb779c48eeb21757ce33d9b1642cdd8ac92fc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cb:fc:ba:8d:ef:38:c1:67:a3:c5:90:87:ac:
                    3c:50:24:a2:7d:40:c0:6e:59:f8:82:87:11:04:7e:
                    bd:56:7b:93:28:fa:98:3b:57:1d:30:64:48:2a:3c:
                    27:fb:24:33:ba:a9:ba:d4:4c:10:a4:24:07:26:d2:
                    d5:3f:4d:ec:be:cb:42:3f:db:a2:42:14:ee:54:6a:
                    26:c0:bd:16:11:2a:cc:88:86:f6:49:cc:e0:7f:d4:
                    23:ed:18:25:8a:f1:f2:3e:55:1f:49:81:e0:e7:c7:
                    86:80:79:ef:35:2d:b2:46:a4:dd:00:83:fd:db:f4:
                    48:f1:67:18:67:c8:db:62:0b:52:5a:b3:16:ae:fb:
                    77:58:dc:4d:43:00:4c:33:fb:6f:2f:96:f7:f8:e4:
                    37:23:2b:84:f9:cb:53:d2:6c:19:e8:4d:11:fe:c3:
                    47:2b:99:e4:52:e7:c7:d4:ba:cc:a8:a4:fd:2b:f0:
                    85:9a:e9:39:50:67:ee:f1:44:6a:bf:0b:d9:07:d5:
                    1d:9a:c6:39:6a:b4:63:b5:72:63:99:1a:1b:e0:a9:
                    1b:8c:02:b6:82:2a:b8:8a:34:99:87:14:51:3b:5d:
                    83:e9:da:48:ef:9b:85:44:ee:fa:f4:0b:56:45:64:
                    cc:7a:a4:e8:b7:b3:b0:63:97:9a:f5:d1:1e:88:39:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B7:79:C4:8E:EB:21:75:7C:E3:3D:9B:16:42:CD:D8:AC:92:FC:9E
            X509v3 Authority Key Identifier:
                keyid:4F:21:C5:39:3D:93:FC:CF:0B:8E:0C:CC:DC:8D:54:97:E2:D6:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c2:0f:9b:45:46:c5:2d:47:7c:8b:fb:11:00:63:03:de:fb:
         95:50:06:f6:61:14:e1:03:ce:27:3a:52:d3:62:c9:39:c9:7f:
         ab:ed:05:51:c0:77:fe:ab:86:6e:cc:a1:26:7b:43:04:10:e5:
         8c:15:fc:08:7e:d6:c6:d6:e9:cd:c9:7a:8e:12:9d:52:04:32:
         28:67:3b:5e:de:27:e6:13:69:1e:ae:f2:a5:ba:fe:b9:e3:92:
         92:58:85:ce:fb:9a:8f:17:1f:de:64:c3:34:f1:db:38:e0:09:
         c6:60:ee:09:3c:4f:a2:a3:f0:18:33:71:44:63:15:7f:bb:b4:
         2c:6d:c9:0c:d0:61:56:ee:47:4d:b0:02:1b:a8:2e:c8:35:1d:
         b4:ac:57:2c:dd:49:6e:b1:4d:4c:f5:b7:8c:c9:0f:f3:4f:96:
         b8:fc:77:8c:5f:11:89:f7:f0:59:99:84:c4:e9:2b:0a:74:62:
         eb:c1:9f:8d:06:c2:36:b6:70:4b:f4:93:c2:cd:c9:79:6b:f7:
         17:d6:d3:80:1f:bc:82:9e:c5:d8:57:ee:72:de:20:bd:fc:ad:
         09:c5:95:df:58:c5:f1:fa:2a:ed:6d:6e:32:67:f7:00:11:f8:
         1c:52:fa:31:19:85:3a:eb:5c:4a:c0:0c:e7:c1:24:62:af:20:
         61:20:ab:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----